This sample is a 706 KB MS Excel Document. Malva.RE parsed it statically and found no known malware family, configuration or malicious signature among its 403 YARA rules. Static analysis extracted 14 embedded or derived files. Static analysis cannot prove a file is harmless: an unknown or heavily packed threat can go undetected. The file was parsed and decompiled, never executed.
- SHA256
- 1230aec8cfcf5093eedecc346c2584d679b3ea364fc318d5015c0819d012f1c4
- MD5
- a706b8ada0f5a78ee1e8bdda1b8fefe9
- Verdict
- No known threat found
- File type
- MS Excel Document · 706 KB
Cite this report: https://app.malva.re/sha256/1230aec8cfcf5093eedecc346c2584d679b3ea364fc318d5015c0819d012f1c4
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
bin
2oox:metadata
1oox:style
1oox:theme
1xml
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
oox:xlsx>oox:media>ole:doc
oox:xlsx>oox:media>ole:doc