Suspect
MS Office Document
MD5:
Size: 0 B
application/vnd.ms-office
The file b07a03883675654088a2b56a80933ca8 is a MS Office Document. Malva.RE parsed it statically and found no known malware family, configuration or malicious signature. Static analysis extracted 75 embedded or derived files. It matches 1 YARA rule. Static analysis cannot prove a file is harmless: an unknown or heavily packed threat can go undetected. The file was parsed and decompiled, never executed.
- SHA256
- —
- MD5
- -
- Verdict
- No known threat found
- File type
- MS Office Document
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Microsoft Office Document
76 files
OFFb07a03883675654088a2b56a80933ca8
BINRoot Entry
BINuBQ173q5JOhMyyLSoEs7
BINH8pxPoECiq1bo2
BINbprAnf6J
BINowIss0HthIdqG4l
BINE9nApq9Bsh9mmW
BINUKqqACLUALIsaSR
BINOj7ZgVzn9X7NeE9Z4X1
BINoXAAsaYOQC188UF
BINnW0eNf35ZjkI6w
BINQAZX2o5H
BINm7mvr72L
BINDEWTud3JSrCytqK
BINOj7QkJVzat8
BINhG3vvZDdOfpOjoWGpiXU
URLs in VB Code - #1
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #2
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #3
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #4
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #5
URIsuspect
http:/huhuhuhuhuhuhu
URLs in VB Code - #6
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #7
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #8
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential