Malicious MS Office Document analysis – e0b3c2388072

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

Microsoft Office Document

8 malicious · 47 files

OFFe0b3c23880722fb10a8ffe3b5505d1dfMS Office Document

BINRoot Entry

BINDataextracted from MS Office Document

BIN1Tableextracted from MS Office Document

BINCompObjextracted from MS Office Document

BINWordDocumentextracted from MS Office Document

BINSummaryInformationextracted from MS Office Document

BINDocumentSummaryInformationextracted from MS Office Document

BINMacros

BINPROJECTextracted from MS Office Document

BINPROJECTlkextracted from MS Office Document

BINPROJECTwmextracted from MS Office Document

BINVBA

BINdirextracted from MS Office Document

VBATronDesub-stream · VBA Module

VBS[Stored VBA]code extracted · VBScript

VBA[PCode]disassembled · VBA Module

BIN__SRP_0extracted from MS Office Document

BIN__SRP_1extracted from MS Office Document

BIN__SRP_2extracted from MS Office Document

BIN__SRP_3extracted from MS Office Document

BIN__SRP_4extracted from MS Office Document

BIN__SRP_5extracted from MS Office Document

BIN__SRP_8extracted from MS Office Document

BIN__SRP_9extracted from MS Office Document

BIN__SRP_aextracted from MS Office Document

BIN__SRP_bextracted from MS Office Document

VBAThongBaosub-stream · VBA Module

VBS[Stored VBA]code extracted · VBScript

VBA[PCode]disassembled · VBA Module

VBS[Decompiled VBA]decompiled · VBScript

VBATronDe_Formsub-stream · VBA Module

VBS[Stored VBA]code extracted · VBScript

VBA[PCode]disassembled · VBA Module

VBS[Decompiled VBA]decompiled · VBScript

BIN_VBA_PROJECTextracted from MS Office Document

VBAThongTin_Formsub-stream · VBA Module

VBS[Stored VBA]code extracted · VBScript

VBA[PCode]disassembled · VBA Module

VBS[Decompiled VBA]decompiled · VBScript

BINThongBao

BINTronDe_Form

BINThongTin_Form

8 malicious · 47 files

OFFe0b3c23880722fb10a8ffe3b5505d1dfMS Office Document

BINRoot Entry

BINDataextracted from MS Office Document

BIN1Tableextracted from MS Office Document

BINCompObjextracted from MS Office Document

BINWordDocumentextracted from MS Office Document

BINSummaryInformationextracted from MS Office Document

BINDocumentSummaryInformationextracted from MS Office Document

BINMacros

BINPROJECTextracted from MS Office Document

BINPROJECTlkextracted from MS Office Document

BINPROJECTwmextracted from MS Office Document

BINVBA

BINdirextracted from MS Office Document

VBATronDesub-stream · VBA Module

VBS[Stored VBA]code extracted · VBScript

VBA[PCode]disassembled · VBA Module

BIN__SRP_0extracted from MS Office Document

BIN__SRP_1extracted from MS Office Document

BIN__SRP_2extracted from MS Office Document

BIN__SRP_3extracted from MS Office Document

BIN__SRP_4extracted from MS Office Document

BIN__SRP_5extracted from MS Office Document

BIN__SRP_8extracted from MS Office Document

BIN__SRP_9extracted from MS Office Document

BIN__SRP_aextracted from MS Office Document

BIN__SRP_bextracted from MS Office Document

VBAThongBaosub-stream · VBA Module

VBS[Stored VBA]code extracted · VBScript

VBA[PCode]disassembled · VBA Module

VBS[Decompiled VBA]decompiled · VBScript

VBATronDe_Formsub-stream · VBA Module

VBS[Stored VBA]code extracted · VBScript

VBA[PCode]disassembled · VBA Module

VBS[Decompiled VBA]decompiled · VBScript

BIN_VBA_PROJECTextracted from MS Office Document

VBAThongTin_Formsub-stream · VBA Module

VBS[Stored VBA]code extracted · VBScript

VBA[PCode]disassembled · VBA Module

VBS[Decompiled VBA]decompiled · VBScript

BINThongBao

BINTronDe_Form

BINThongTin_Form

vbaDNA - VBA Stomping & Purging Stategy detection

	Module Name0
	TronDe	VBA Macro
	ThongBao	VBA Macro
	TronDe_Form	Blacklist VBA VBA Macro
	ThongTin_Form	VBA Macro

No malware configuration was found at this point.

Coming soon: export of this report's indicators to MISP and EDR platforms.