Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
FileType
Microsoft Office Document
2 malicious · 109 files
OFF57f0524d97b6dfb7b9746a2ebe0737c3MS Office Document
BIN䡀䌏䈯extracted from MS Office Document
BIN䡀䈖䌧䠤extracted from MS Office Document
BIN䡀䌋䄱䜵extracted from MS Office Document
BIN䡀䌍䏤䊲extracted from MS Office Document
BIN㳎㼊䀚䆾䅤extracted from MS Office Document
BIN䡀㬿䏲䐸䖱extracted from MS Office Document
BIN䡀㽿䅤䈯䠶extracted from MS Office Document
BIN䡀䈏䗤䕸䠨extracted from MS Office Document
BIN䡀䋌䆨㫮䛲extracted from MS Office Document
BIN䡀䒌䗱䒵䠯extracted from MS Office Document
BIN䡀䕙䓲䕨䜷extracted from MS Office Document
BIN䡀䈛䒰䈹䌏䈯extracted from MS Office Document
BIN䡀䈝䗻䗜䏼䠨extracted from MS Office Document
BIN䡀䌍䈵䗦䕲䠼extracted from MS Office Document
BIN䡀䒌䓰䑲䑨䠷extracted from MS Office Document
VBS䌋䄱䜵㸾㵙㴖䠛extracted from MS Office Document · VBScript
EXE䌋䄱䜵䂾㼊㬠䠋extracted from MS Office Document · PE32+ x64
BIN䡀㼿䕷䑬㭪䗤䠤extracted from MS Office Document
BIN䡀㼿䕷䑬㹪䒲䠯extracted from MS Office Document
BIN䡀㿿䏤䇬䗤䒬䠱extracted from MS Office Document
BIN䡀䒌䗱䒵㮯䈹䗱extracted from MS Office Document
BIN䡀䖖㯬䏬㱨䖤䠫extracted from MS Office Document
BIN䡀䘌䗶䐲䆊䌷䑲extracted from MS Office Document
BIN䡀䙎䑨㶷䓤䌳䊱extracted from MS Office Document
BIN䡀䄕䑸䋦䒌䇱䗬䒬䠱extracted from MS Office Document
BIN䡀䇊䌰㾱㼒䔨䈸䆱䠨extracted from MS Office Document
BIN䡀䒌䗱䒵㬯䑲䌧䌷䑲extracted from MS Office Document
BIN䡀䈏䗤䕸㬨䐲䒳䈱䗱䠶extracted from MS Office Document
BIN䡀䑒䗶䏤㾯㼒䔨䈸䆱䠨extracted from MS Office Document
BIN䌋䄱䜵䀾䛬㲞㲿䒦㲿䉱䠲extracted from MS Office Document
BIN䡀䇊䌰㮱䈻䘦䈷䈜䘴䑨䈦extracted from MS Office Document
BIN䡀䇊䗹䛎䆨䗸㼨䔨䈸䆱䠨extracted from MS Office Document
BIN䌋䄱䜵䀾䛬㲞㫿䓰㫿䑤䈱䠵extracted from MS Office Document
BIN䌋䄱䜵䀾䛬㲞㫿䓰㭿䄬䒯䠪extracted from MS Office Document
BIN䡀䑒䗶䏤㮯䈻䘦䈷䈜䘴䑨䈦extracted from MS Office Document
BINSummaryInformationextracted from MS Office Document
EXEF1extracted from MS Office Document · PE32
BINF2extracted from MS Office Document
BINF3extracted from MS Office Document
URLs in VB Code - #1
URIsuspect
https:huhuhuhuhuhuhu
URLs in VB Code - #2
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #3
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #4
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #1
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
2 malicious · 109 files
OFF57f0524d97b6dfb7b9746a2ebe0737c3MS Office Document
BIN䡀䌏䈯extracted from MS Office Document
BIN䡀䈖䌧䠤extracted from MS Office Document
BIN䡀䌋䄱䜵extracted from MS Office Document
BIN䡀䌍䏤䊲extracted from MS Office Document
BIN㳎㼊䀚䆾䅤extracted from MS Office Document
BIN䡀㬿䏲䐸䖱extracted from MS Office Document
BIN䡀㽿䅤䈯䠶extracted from MS Office Document
BIN䡀䈏䗤䕸䠨extracted from MS Office Document
BIN䡀䋌䆨㫮䛲extracted from MS Office Document
BIN䡀䒌䗱䒵䠯extracted from MS Office Document
BIN䡀䕙䓲䕨䜷extracted from MS Office Document
BIN䡀䈛䒰䈹䌏䈯extracted from MS Office Document
BIN䡀䈝䗻䗜䏼䠨extracted from MS Office Document
BIN䡀䌍䈵䗦䕲䠼extracted from MS Office Document
BIN䡀䒌䓰䑲䑨䠷extracted from MS Office Document
VBS䌋䄱䜵㸾㵙㴖䠛extracted from MS Office Document · VBScript
EXE䌋䄱䜵䂾㼊㬠䠋extracted from MS Office Document · PE32+ x64
BIN䡀㼿䕷䑬㭪䗤䠤extracted from MS Office Document
BIN䡀㼿䕷䑬㹪䒲䠯extracted from MS Office Document
BIN䡀㿿䏤䇬䗤䒬䠱extracted from MS Office Document
BIN䡀䒌䗱䒵㮯䈹䗱extracted from MS Office Document
BIN䡀䖖㯬䏬㱨䖤䠫extracted from MS Office Document
BIN䡀䘌䗶䐲䆊䌷䑲extracted from MS Office Document
BIN䡀䙎䑨㶷䓤䌳䊱extracted from MS Office Document
BIN䡀䄕䑸䋦䒌䇱䗬䒬䠱extracted from MS Office Document
BIN䡀䇊䌰㾱㼒䔨䈸䆱䠨extracted from MS Office Document
BIN䡀䒌䗱䒵㬯䑲䌧䌷䑲extracted from MS Office Document
BIN䡀䈏䗤䕸㬨䐲䒳䈱䗱䠶extracted from MS Office Document
BIN䡀䑒䗶䏤㾯㼒䔨䈸䆱䠨extracted from MS Office Document
BIN䌋䄱䜵䀾䛬㲞㲿䒦㲿䉱䠲extracted from MS Office Document
BIN䡀䇊䌰㮱䈻䘦䈷䈜䘴䑨䈦extracted from MS Office Document
BIN䡀䇊䗹䛎䆨䗸㼨䔨䈸䆱䠨extracted from MS Office Document
BIN䌋䄱䜵䀾䛬㲞㫿䓰㫿䑤䈱䠵extracted from MS Office Document
BIN䌋䄱䜵䀾䛬㲞㫿䓰㭿䄬䒯䠪extracted from MS Office Document
BIN䡀䑒䗶䏤㮯䈻䘦䈷䈜䘴䑨䈦extracted from MS Office Document
BINSummaryInformationextracted from MS Office Document
EXEF1extracted from MS Office Document · PE32
BINF2extracted from MS Office Document
BINF3extracted from MS Office Document
No malware configuration was found at this point.
URLs in VB Code - #1
URIsuspect
https:huhuhuhuhuhuhu
57f0524d97b6dfb7b9746a2ebe0737c3
URLs in VB Code - #2
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
57f0524d97b6dfb7b9746a2ebe0737c3
URLs in VB Code - #3
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
57f0524d97b6dfb7b9746a2ebe0737c3
URLs in VB Code - #4
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
57f0524d97b6dfb7b9746a2ebe0737c3
URLs in VB Code - #1
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
57f0524d97b6dfb7b9746a2ebe0737c3 › Root Entry › 䌋䄱䜵㸾㵙㴖䠛
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
57f0524d97b6dfb7b9746a2ebe0737c3 › F1
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Coming soon: export of this report's indicators to MISP and EDR platforms.
