Malicious MS Excel Document analysis – 828fbec5f2d7

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

Microsoft Office Document

11 malicious · 29 files

XLS2019x64_excel_msgbox_stomped_fakecode.xlsmMS Excel DocumentATT&CK T1564.007

XML[Content_Types].xmlextracted from MS Excel Document · XML

BINdocProps

BINxl

XMLsharedStrings.xmlextracted from MS Excel Document · XML

XMLstyles.xmlextracted from MS Excel Document · XML

OFFvbaProject.binextracted from MS Excel Document · MS Office DocumentATT&CK T1564.007

BIN.

BINRoot Entry

BINVBA

BINdirextracted from MS Office Document

BIN__SRP_0extracted from MS Office Document

BIN__SRP_1extracted from MS Office Document

BIN__SRP_2extracted from MS Office Document

BIN__SRP_3extracted from MS Office Document

VBAThisWorkbooksub-stream · VBA ModuleATT&CK T1564.007

VBS[Stored VBA]code extracted · VBScriptATT&CK T1564.007

VBS[Stored VBA].deobfuscated.vbsdeobfuscated · VBScript

VBS[PCode]disassembled · VBScriptATT&CK T1564.007

VBS[PCode].deobfuscated.vbsdeobfuscated · VBScript

VBA[Decompiled VBA]decompiled · VBA ModuleATT&CK T1564.007

VBS[Full Diff]generated · VBScriptATT&CK T1564.007

VBS[Partial Diff]generated · VBScriptATT&CK T1564.007

VBS[Partial Diff].deobfuscated.vbsdeobfuscated · VBScript

BIN_VBA_PROJECTextracted from MS Office Document

BINPROJECTextracted from MS Office Document

BINPROJECTwmextracted from MS Office Document

XMLworkbook.xmlextracted from MS Excel Document · XML

BINtheme

BINworksheets

BIN_rels