Malicious MS Office Document analysis – 47929954dfcc

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

Microsoft Office Document

10 malicious · 22 files

OFF2019x64_excel_msgbox_stomped_fakecode.xlsMS Office DocumentATT&CK T1564.007

BIN.

BINRoot Entry

BINCompObjextracted from MS Office Document

BINWorkbookextracted from MS Office Document

BIN_VBA_PROJECT_CUR

BINVBA

BINdirextracted from MS Office Document

BIN__SRP_0extracted from MS Office Document

BIN__SRP_1extracted from MS Office Document

BIN__SRP_2extracted from MS Office Document

BIN__SRP_3extracted from MS Office Document

VBAThisWorkbooksub-stream · VBA ModuleATT&CK T1564.007

VBS[Stored VBA]code extracted · VBScriptATT&CK T1564.007

VBS[Stored VBA].deobfuscated.vbsdeobfuscated · VBScript

VBS[PCode]disassembled · VBScriptATT&CK T1564.007

VBS[PCode].deobfuscated.vbsdeobfuscated · VBScript

VBA[Decompiled VBA]decompiled · VBA ModuleATT&CK T1564.007

VBS[Full Diff]generated · VBScriptATT&CK T1564.007

VBS[Partial Diff]generated · VBScriptATT&CK T1564.007

VBS[Partial Diff].deobfuscated.vbsdeobfuscated · VBScript

BIN_VBA_PROJECTextracted from MS Office Document

BINPROJECTextracted from MS Office Document

BINPROJECTwmextracted from MS Office Document

BINSummaryInformationextracted from MS Office Document

BINDocumentSummaryInformationextracted from MS Office Document