Malicious
MS Excel Document
MD5:
Size: 0 B
application/vnd.ms-excel
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Microsoft Office Document
3 malicious · 98 files
XLSFISY-ESSENTIEL.xlsxT1221
XML[Content_Types].xml
BIN_rels
BINxl
XMLworkbook.xml
BIN_rels
BINworksheets
XMLsheet1.xml
XMLsheet2.xml
XMLsheet3.xml
XMLsheet4.xml
XMLsheet5.xml
XMLsheet6.xml
XMLsheet7.xml
XMLsheet8.xml
XMLsheet9.xml
XMLsheet10.xml
XMLsheet11.xml
XMLsheet12.xml
XMLsheet13.xml
XMLsheet14.xml
XMLsheet15.xml
XMLsheet16.xml
XMLsheet17.xml
XMLsheet18.xml
XMLsheet19.xml
BIN_rels
XMLsheet11.xml.rels
OFFsheet1.xml.relsT1221
XMLsheet2.xml.rels
XMLsheet3.xml.rels
XMLsheet4.xml.rels
XMLsheet5.xml.rels
XMLsheet6.xml.rels
XMLsheet7.xml.rels
XMLsheet8.xml.rels
XMLsheet9.xml.rels
XMLsheet10.xml.rels
XMLsheet12.xml.rels
XMLsheet13.xml.rels
XMLsheet14.xml.rels
XMLsheet15.xml.rels
XMLsheet16.xml.rels
XMLsheet17.xml.rels
XMLsheet18.xml.rels
XMLsheet19.xml.rels
BINtheme
XMLstyles.xml
XMLsharedStrings.xml
BINdrawings
XMLdrawing1.xml
BIN_rels
XMLdrawing15.xml.rels
OFFdrawing1.xml.relsT1221
XMLdrawing11.xml.rels
XMLdrawing2.xml
XMLdrawing3.xml
XMLdrawing4.xml
XMLdrawing5.xml
XMLdrawing6.xml
XMLdrawing7.xml
XMLdrawing8.xml
XMLdrawing9.xml
XMLdrawing10.xml
XMLdrawing11.xml
XMLdrawing12.xml
XMLdrawing13.xml
XMLdrawing14.xml
XMLdrawing15.xml
XMLdrawing16.xml
XMLdrawing17.xml
XMLdrawing18.xml
XMLdrawing19.xml
BINmedia
BINcharts
BINprinterSettings
XMLcalcChain.xml
BINdocProps
| Config. Field | Value |
|---|---|
| Target | http:/huhuhuhuhuhuhuhuhuhuhu |
| Path | drawihuhuhuhuhuhuhu |
| XPath | /Relathuhuhuhuhuhuhuhuhuhuhu |
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with Essential| Config. Field | Value |
|---|---|
| Target | https:huhuhuhuhuhuhuhuhuhuhu |
| Path | drawihuhuhuhuhuhuhu |
| XPath | /Relathuhuhuhuhuhuhuhuhuhuhu |
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with Essential| Config. Field | Value |
|---|---|
| Target | https:huhuhuhuhuhuhuhuhuhuhu |
| Path | drawihuhuhuhuhuhuhu |
| XPath | /Relathuhuhuhuhuhuhuhuhuhuhu |
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with Essential| Config. Field | Value |
|---|---|
| Target | http:/huhuhuhuhuhuhu |
| Path | sheethuhuhuhuhuhuhu |
| XPath | /Relathuhuhuhuhuhuhuhuhuhuhu |
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with Essential