MS Office Document file analysis – d9f556865406

The file d9f556865406a4671d53df11689b1f64 is a MS Office Document for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 499 embedded or derived files. It matches 6 YARA rules. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256: —
MD5: -
Verdict: Inconclusive
File type: MS Office Document

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

Microsoft Office Document

450 files

OFFd9f556865406a4671d53df11689b1f64

BINRoot Entry

BINCiFTqlQG9E

BINPtxuLQBmcFo

BINBgAVGDNNMN6yK1c

BINoK513eMOl7

BINtccurSsdptsQ

BINVXLn2cnI

BINEFEazIQj4J5z

BINhG3vvZDdOfpOjoWGpiXU

URLs in VB Code - #1 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #2 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #3 URIsuspect

http:/huhuhuhuhuhuhu

URLs in VB Code - #4 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #5 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #6 URIsuspect

http:/huhuhuhuhuhuhu

URLs in VB Code - #7 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #8 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #9 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #10 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #11 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #12 URIsuspect

http:/huhuhuhuhuhuhu

URLs in VB Code - #13 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #14 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #15 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #16 URIsuspect

http:/huhuhuhuhuhuhu

URLs in VB Code - #17 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #18 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #19 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #20 URIsuspect

http:/huhuhuhuhuhuhu

URLs in VB Code - #21 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #22 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #23 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #24 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

Overview

Summary by MalvaGPT

Characteristics

File Structure

Artefacts24

File Structure

Artefacts24