Malicious
Malicious

85c766f653d29db991d32056884a0e7b

WSF File
|
MD5: 85c766f653d29db991d32056884a0e7b
|
Size: 111.62 KB
|
application/xml

Html
Office Document
Corrupted
Blacklist VBA
WSF File
VBScript
T1059.005
sCriPTinG.fIlEsYSTEmobJecT
DeObfuscated
Obfuscated
Print
General
Structural Analysis
Config.0
Yara Rules99+
Sync
Community
Infection Chain
Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
85c766f653d29db991d32056884a0e7b
Sha1
ddf3a9e569abf163da020dde5b61d2bb08994263
Sha256
57cd4253d259a328cdd6e704b52d6c62252839265c4e402ba0c7d5f95aba1775
Sha384
4cbfa539b20429fa3d317d44be31ef49c74fbd7dbaf2ed0bddffa7bf899a0aca08a565eb955239dca607a5479ca3260a
Sha512
36f27ecae031395b8feee42cf6ce9aaab834cfafc37ca9b387a63e9fac54192df0153f6ac7603619b4378bea3aa8195f4ece61bdc8315e9c9b4e3b76a32fd809
SSDeep
1536:Z2ze0kcLK98Hl2vbhe9w7VHsg8M6SkDN:Z2ze0kcLFHl2vteiy
TLSH
B6B38C012E49D63AE946A278CA83C753B2141D1B8DC5763F3278BF1D2DB65388A1F6F1
File Structure
85c766f653d29db991d32056884a0e7b
Html
Office Document
Corrupted
Blacklist VBA
WSF File
VBScript
T1059.005
sCriPTinG.fIlEsYSTEmobJecT
DeObfuscated
Obfuscated
Malicious
[Repaired @0x0001471A]
Office Document
Corrupted
Html
WSF File
Malicious
[Content_Types].xml
Xml
_rels
.rels
Xml
theme
theme
themeManager.xml
Xml
theme1.xml
Xml
_rels
themeManager.xml.rels
Xml
Root Entry
Malicious
Data
1Table
Office Document
Corrupted
Malicious
[Repaired @0x0000071A]
Office Document
Corrupted
Malicious
CompObj
WordDocument
SummaryInformation
DocumentSummaryInformation
Macros
Malicious
PROJECT
PROJECTwm
VBA
Malicious
dir
ThisDocument
Blacklist VBA
VBA Macro
Html
WSF File
Malicious
[Stored VBA]
Blacklist VBA
VBA Macro
Visual Basic
Html
WSF File
sCriPTinG.fIlEsYSTEmobJecT
VBScript
Malicious
[Job Id= Name=No Name]
Malicious
[] #0
VBScript
Malicious
[PCode]
Blacklist VBA
VBA Macro
VBA P-Code
Disassembly
Html
WSF File
VBScript
T1059.005
DeObfuscated
Obfuscated
Malicious
[Job Id=0.0.0.0 Name=No Name]
Malicious
[VBScript] #0
VBScript
T1059.005
DeObfuscated
Obfuscated
Malicious
[VBScript] #0.deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[Decompiled VBA]
Blacklist VBA
VBA Macro
Visual Basic
Decompiled
Html
WSF File
sCriPTinG.fIlEsYSTEmobJecT
VBScript
Malicious
_VBA_PROJECT
[Job Id=0.0.0.0 Name=No Name]
Malicious
[VBScript] #0
VBScript
T1059.005
Malicious
Artefacts
Name
 Value
URLs in VB Code - #1

http://www.iec.ch
URLs in VB Code - #2

http://schemas.openxmlformats.org/drawingml/2006/main
URLs in VB Code - #1

http://schemas.openxmlformats.org/drawingml/2006/main
85c766f653d29db991d32056884a0e7b (111.62 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙