Malicious
MS Excel Document
MD5: cb71d716e00e4a549fdcd09ca210da95
Size: 229.39 KB
application/vnd.ms-excel
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Microsoft Office Document
Size
229.39 KB · 229,387 B
First seen
2026-02-09 14:18 · 8 months ago
Last seen
2026-02-09 14:18 · 8 months ago
Last analysis
2026-02-09 14:19 · 8 months ago
Hashes
MD5
cb71d716e00e4a549fdcd09ca210da95
Sha1
4d237c9cf44fb6a39936f004e934fabac7edd06b
Sha256
972fa5a416057b28ba0a442f81765a9f775435a789acb9338ae89208d47f0dc7
Sha384
ae6495e658fc4b96dfcec0ad22af94011687d29762aa0245e33f06103cbf4a4f1656796d024b73eeb9050a1836cb3567
Sha512
1f6a89c3115cf4085a346e5d40c35085101ea90a168877dd81540f3ee5e36fbfa88f48bdbff9e3bf34328912d5168e2244535f466da64b40859d262c64791f31
SSDeep
6144:VJ725geUsZIUbbuzuQjzbU23umBhqkW4A9TKlf6WWLYF:fMGaXCCe0ou2aQicF
TLSH
C02413ABC44BCCE6CC3EE03E62348ED9B219790BF25678352829646E351179F315DE27
2 malicious · 27 files
XLScb71d716e00e4a549fdcd09ca210da95
XML[Content_Types].xml
BIN_rels
XML.rels
BINxl
BIN_rels
XMLworkbook.xml.rels
XMLworkbook.xml
BINdrawings
XMLdrawing1.xml
BIN_rels
XMLdrawing1.xml.rels
BINworksheets
BIN_rels
XMLsheet1.xml.rels
XMLsheet1.xml
BINtheme
XMLtheme1.xml
XMLstyles.xml
OFFvbaProject.bin
BINRoot Entry
BINPROJECT
BINPROJECTwm
BINVBA
BINdir
VBAModule1
VBS[Stored VBA]
VBA[PCode]
BIN__SRP_0
BIN__SRP_1
BIN__SRP_2
BIN__SRP_3
BIN_VBA_PROJECT
BINmedia
IMGimage1.png
IMGimage1.png-preview.png
BINdocProps
XMLcore.xml
XMLapp.xml
URLs in VB Code - #1
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential2 malicious · 27 files
XLScb71d716e00e4a549fdcd09ca210da95
XML[Content_Types].xml
BIN_rels
BINxl
BIN_rels
XMLworkbook.xml
BINdrawings
BINworksheets
BINtheme
XMLstyles.xml
OFFvbaProject.bin
BINRoot Entry
BINPROJECT
BINPROJECTwm
BINVBA
BINdir
VBAModule1
VBS[Stored VBA]
VBA[PCode]
BIN__SRP_0
BIN__SRP_1
BIN__SRP_2
BIN__SRP_3
BIN_VBA_PROJECT
BINmedia
BINdocProps
No malware configuration was found at this point.
URLs in VB Code - #1
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
cb71d716e00e4a549fdcd09ca210da95 › xl › vbaProject.bin › Root Entry › VBA › Module1 › [Stored VBA]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account