Malicious
MS Office Document
MD5:
Size: 0 B
application/vnd.ms-office
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Microsoft Office Document
5 malicious · 74 files
OFF78e7923935618b9f3285b4b0ff1f861eT1221Exploit
OFF[Repaired @0x000C2200]
BIN.
BINRoot Entry
BINCompObj
BINWorkbook
BINMBD008B5B04
BINWorkbook
BINMBD0050ED84
BINMBD0050FDBA
XLSPackageT1221
XML[Content_Types].xml
BIN_rels
BINxl
BIN_rels
XMLworkbook.xml
BINworksheets
BINdrawings
BINmedia
XMLstyles.xml
XMLsharedStrings.xml
BINtheme
BINexternalLinks
XMLexternalLink1.xml
BIN_rels
OFFexternalLink1.xml.relsT1221
BINprinterSettings
XMLcomments1.xml
BINdocProps
BINMBD00512150
BINSummaryInformation
BINDocumentSummaryInformation
BINMBD008B5B05
BINOleExploit
BIN_VBA_PROJECT_CUR
BINSummaryInformation
BINDocumentSummaryInformation
| Config. Field | Value |
|---|---|
| URL #1 | http:/huhuhuhuhuhuhuhuhuhuhu |
| URL #2 | http:/huhuhuhuhuhuhuhuhuhuhu |
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with Essential| Config. Field | Value |
|---|---|
| Target | file:/huhuhuhuhuhuhuhuhuhuhu |
| Path | externhuhuhuhuhuhuhu |
| XPath | /Relathuhuhuhuhuhuhuhuhuhuhu |
| Outer XML | <Relathuhuhuhuhuhuhuhuhuhuhu |
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with EssentialRemote Template - Highly Suspicious Document RelationShip
URImalicious
file:/huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential