Sign up free
Suspicious
Suspect

Share on LinkedIn
Print
MS Office Document
MD5:
Size: 0 B
application/vnd.ms-office

The file b07a03883675654088a2b56a80933ca8 is a MS Office Document. Malva.RE parsed it statically and found no known malware family, configuration or malicious signature. Static analysis extracted 75 embedded or derived files. It matches 1 YARA rule. Static analysis cannot prove a file is harmless: an unknown or heavily packed threat can go undetected. The file was parsed and decompiled, never executed.

SHA256
—
MD5
-
Verdict
No known threat found
File type
MS Office Document

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
Microsoft Office Document

76 files
OFFb07a03883675654088a2b56a80933ca8
BINuBQ173q5JOhMyyLSoEs7
BINH8pxPoECiq1bo2
BINbprAnf6J
BINowIss0HthIdqG4l
BINE9nApq9Bsh9mmW
BINUKqqACLUALIsaSR
BINOj7ZgVzn9X7NeE9Z4X1
BINoXAAsaYOQC188UF
BINnW0eNf35ZjkI6w
BINQAZX2o5H
BINm7mvr72L
BINDEWTud3JSrCytqK
BINOj7QkJVzat8
BINhG3vvZDdOfpOjoWGpiXU

URLs in VB Code - #1 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #2 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #3 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #4 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #5 URIsuspect
http:/huhuhuhuhuhuhu
URLs in VB Code - #6 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #7 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #8 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
An error has occurred. This application may no longer respond until reloaded. Reload 🗙