Malicious
eb9715a5304e3dd9c2756ac51ab3234e
MS Word Document | MD5: eb9715a5304e3dd9c2756ac51ab3234e | Size: 543.55 KB | application/msword
MS Word Document
MD5: eb9715a5304e3dd9c2756ac51ab3234e
Size: 543.55 KB
application/msword
Office Document
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
T1221
Remote Template Injection
DeObfuscated
VBScript
T1059.005
Obfuscated
Scripting.FileSystemObject
General
Structural Analysis
Config.4
Yara Rules99+
Sync
Community
Infection Chain
Summary by MalvaGPT
Characteristics
|
Hash | Hash Value |
|---|---|
| MD5 | eb9715a5304e3dd9c2756ac51ab3234e
|
| Sha1 | 8aaf84974c428c49dde6bf797cda387a3a8febb5
|
| Sha256 | 4a16071cd4a31e06e7a47f7f449d846991f6dbf476861c4b4ffa806705efdd4e
|
| Sha384 | c97c6e71a7d7ed5cc44c321010d9def1b1e3f1ec334da17df0ab9731cb0901888e6937a13822391e84beed85990cf4e9
|
| Sha512 | 862b45b7759ae3b104b92628ee43e4ca48499efd865c5e6cb7e968f1345d702ef2f23aaa79e7688572db2a2602cf9cbf15e2bd5589986c7d482b92187f8ca8d7
|
| SSDeep | 12288:gQZQHyBGWyy4FvGXJrJ0ir3ph8DnD4PXszO157wCtbtW3dyA:jaHQO0XJrmir3pKLMPXszCtbgV
|
| TLSH | 38C4F1C1F4E62D76C232157A7FEBE460FF60CA7362847516B30E2A681FB36676517084
|
File Structure
eb9715a5304e3dd9c2756ac51ab3234e
Office Document
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
T1221
Remote Template Injection
DeObfuscated
VBScript
T1059.005
Obfuscated
Scripting.FileSystemObject
Malicious
[Content_Types].xml
Xml
_rels
.rels
Xml
word
Malicious
document.xml
Xml
_rels
Malicious
document.xml.rels
Xml
T1221
Remote Template Injection
Malicious
vbaProject.bin.rels
Xml
endnotes.xml
Xml
header1.xml
Xml
header2.xml
Xml
footer1.xml
Xml
footer2.xml
Xml
header3.xml
Xml
footer3.xml
Xml
footnotes.xml
Xml
vbaProject.bin
Office Document
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Malicious
.
Malicious
Root Entry
Malicious
VBA
Malicious
dir
חלון
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
Obfuscated
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
קודש
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
Obfuscated
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
מנצפך
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
Obfuscated
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
סימון
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
Obfuscated
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
שונות
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Scripting.FileSystemObject
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Decompiled
Scripting.FileSystemObject
DeObfuscated
VBScript
Obfuscated
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Scripting.FileSystemObject
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Full Diff].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Malicious
החלפות
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
הפנייה
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Decompiled
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Full Diff].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Malicious
כותרות
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
Obfuscated
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
install
Blacklist VBA
VBA Macro
Malicious
[Stored VBA]
Blacklist VBA
VBA Macro
Visual Basic
Scripting.FileSystemObject
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
Blacklist VBA
VBA Macro
VBA P-Code
Disassembly
Module1
VBA Macro
[Stored VBA]
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
[PCode]
VBA Macro
VBA P-Code
Disassembly
__SRP_0
__SRP_1
__SRP_2
__SRP_3
__SRP_8
__SRP_9
__SRP_a
__SRP_b
__SRP_c
__SRP_d
טקסט_רץ
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
Obfuscated
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
לך_לקטע
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Decompiled VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Full Diff].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
סוגריים
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
Searcher
VBA Macro
[Stored VBA]
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
[PCode]
VBA Macro
VBA P-Code
Disassembly
[Decompiled VBA]
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
T1059.005
Obfuscated
[Decompiled VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
styleref
VBA Macro
[Stored VBA]
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
[PCode]
VBA Macro
VBA P-Code
Disassembly
[Decompiled VBA]
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
T1059.005
Obfuscated
[Decompiled VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
כותרת_צד
VBA Macro
[Stored VBA]
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
[PCode]
VBA Macro
VBA P-Code
Disassembly
[Decompiled VBA]
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
T1059.005
Obfuscated
[Decompiled VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Footnotes
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
UserForm1
VBA Macro
[Stored VBA]
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
[PCode]
VBA Macro
VBA P-Code
Disassembly
[Decompiled VBA]
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
T1059.005
Obfuscated
[Decompiled VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
רצף_הערות
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Decompiled
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Malicious
linetoline
VBA Macro
[Stored VBA]
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
[PCode]
VBA Macro
VBA P-Code
Disassembly
[Decompiled VBA]
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
Obfuscated
PleaseWait
VBA Macro
[Stored VBA]
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
[PCode]
VBA Macro
VBA P-Code
Disassembly
[Decompiled VBA]
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
T1059.005
Obfuscated
[Decompiled VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
הערות_ברצף
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
Obfuscated
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
כותרות_צד2
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
Obfuscated
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Full Diff].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
מעצב_טורים
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Decompiled
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Malicious
FindReplace
Blacklist VBA
VBA Macro
Malicious
[Stored VBA]
Blacklist VBA
VBA Macro
Visual Basic
Scripting.FileSystemObject
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
Blacklist VBA
VBA Macro
VBA P-Code
Disassembly
[Decompiled VBA]
Blacklist VBA
VBA Macro
Visual Basic
Decompiled
Scripting.FileSystemObject
DeObfuscated
VBScript
Obfuscated
Malicious
open_link_1
Blacklist VBA
VBA Macro
[Stored VBA]
Blacklist VBA
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
[PCode]
Blacklist VBA
VBA Macro
VBA P-Code
Disassembly
open_link_2
Blacklist VBA
VBA Macro
[Stored VBA]
Blacklist VBA
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
[PCode]
Blacklist VBA
VBA Macro
VBA P-Code
Disassembly
Parenthesis
VBA Macro
[Stored VBA]
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
[PCode]
VBA Macro
VBA P-Code
Disassembly
[Decompiled VBA]
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
T1059.005
Obfuscated
[Decompiled VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
מילה_ראשונה
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
שורה_אחרונה
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Decompiled
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Malicious
modPopupMenu
Blacklist VBA
VBA Macro
[Stored VBA]
Blacklist VBA
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
[PCode]
Blacklist VBA
VBA Macro
VBA P-Code
Disassembly
Update_Cross
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Decompiled VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Full Diff].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
_VBA_PROJECT
מאקרו_לטאבים
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Decompiled VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Full Diff].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
תיקון_שגיאות
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
Obfuscated
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
MyParenthesis
VBA Macro
[Stored VBA]
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
[PCode]
VBA Macro
VBA P-Code
Disassembly
[Decompiled VBA]
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
T1059.005
Obfuscated
[Decompiled VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
RibbonControl
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
Obfuscated
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Malicious
TransfomToSeq
Blacklist VBA
VBA Macro
Malicious
[Stored VBA]
Blacklist VBA
VBA Macro
Visual Basic
Scripting.FileSystemObject
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
Blacklist VBA
VBA Macro
VBA P-Code
Disassembly
[Decompiled VBA]
Blacklist VBA
VBA Macro
Visual Basic
Decompiled
Scripting.FileSystemObject
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Decompiled VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
אינדקס_והערות
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
כותרת_מתעדכנת
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
Obfuscated
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
מספור_אוטומטי
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
Obfuscated
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
סוגריים_שגיאה
VBA Macro
[Stored VBA]
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
[PCode]
VBA Macro
VBA P-Code
Disassembly
פסקאות_כפולות
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
Obfuscated
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
SearchManyFiles
VBA Macro
[Stored VBA]
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
[PCode]
VBA Macro
VBA P-Code
Disassembly
[Decompiled VBA]
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
T1059.005
Obfuscated
[Decompiled VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
export_CR_to_tag
VBA Macro
[Stored VBA]
VBA Macro
Visual Basic
[PCode]
VBA Macro
VBA P-Code
Disassembly
[Decompiled VBA]
VBA Macro
Visual Basic
Decompiled
הקטן_הגדל_רווחים
VBA Macro
[Stored VBA]
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
[PCode]
VBA Macro
VBA P-Code
Disassembly
[Decompiled VBA]
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
T1059.005
Obfuscated
[Decompiled VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
מספור_עברי_הערות
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
Obfuscated
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
נקודה_בסוף_פיסקה
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
Obfuscated
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
תיקון_שגיאות_שפה
VBA Macro
[Stored VBA]
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
[PCode]
VBA Macro
VBA P-Code
Disassembly
החלפה_באבני_בניין
VBA Macro
[Stored VBA]
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
[PCode]
VBA Macro
VBA P-Code
Disassembly
[Decompiled VBA]
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
T1059.005
Obfuscated
[Decompiled VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
החלפת_כמה_מילים_1
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
Obfuscated
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
הערות_יותר_משצב_2
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Decompiled
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Malicious
יישר_כל_המסמך_חדש
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
Obfuscated
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Full Diff].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Malicious
מציג_קיצורי_מקשים
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
Obfuscated
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
תיקון_שגיאות_מקור
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
Obfuscated
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
FirstWordStyleHelp
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Decompiled VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
יישור_טור_בעמוד_זה
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
Obfuscated
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Full Diff].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
עיצוב_תורני_גרסה_3
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
Obfuscated
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Full Diff].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
תיקון_שגיאות_מנצפך
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
Obfuscated
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
המרת_מספרים_לאותיות
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
חיפוש_והחלפה_מרובים
VBA Macro
[Stored VBA]
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
[PCode]
VBA Macro
VBA P-Code
Disassembly
[Decompiled VBA]
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
T1059.005
Obfuscated
[Decompiled VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
חיפוש_והחלפה_משודרג
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Decompiled VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
מעבר_עמוד_לפי_סגנון
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
Obfuscated
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
עיצוב_פיסקה_החל_הכל
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
Obfuscated
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Malicious
חיפוש_והחלפה_פרטניים
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Full Diff].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
עיצוב_כותרות_צד_הוראות
VBA Macro
[Stored VBA]
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
[PCode]
VBA Macro
VBA P-Code
Disassembly
[Decompiled VBA]
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
T1059.005
Obfuscated
[Decompiled VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
חילוץ_טקסטים_פירוק_מסמך
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
Obfuscated
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Malicious
יישר_ממיקום_זה_עד_סוף_המסמך
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
Obfuscated
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
DeObfuscated
VBScript
Obfuscated
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Malicious
תיקון_שגיאות_רווחים_וסימנים
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
Obfuscated
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
ישור_טורים_מאמר_זה_מכותרתלכותרת
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
Obfuscated
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Full Diff].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Malicious
הפנייה
f
o
i101
f
o
CompObj
i115
f
o
CompObj
VBFrame
PROJECT
לך_לקטע
f
o
VBFrame
Searcher
f
o
VBFrame
styleref
f
o
i14
f
o
i16
f
o
i18
f
o
VBFrame
כותרת_צד
f
o
VBFrame
PROJECTlk
PROJECTwm
UserForm1
f
o
i03
f
o
VBFrame
PleaseWait
f
o
VBFrame
Parenthesis
f
o
i04
f
o
i11
f
o
i17
f
o
i29
f
o
VBFrame
Update_Cross
f
o
i36
f
o
VBFrame
מאקרו_לטאבים
f
o
i21
f
o
i55
f
o
i77
f
o
i79
f
o
i65
f
o
VBFrame
MyParenthesis
f
o
i11
f
o
i17
f
o
i44
f
o
i66
f
o
i70
f
o
VBFrame
TransfomToSeq
f
i19
f
o
i22
f
o
i24
f
o
VBFrame
SearchManyFiles
f
o
VBFrame
export_CR_to_tag
f
o
VBFrame
הקטן_הגדל_רווחים
f
o
i73
f
o
i122
f
o
i130
f
o
i172
f
o
i203
f
o
VBFrame
החלפה_באבני_בניין
f
o
VBFrame
FirstWordStyleHelp
f
o
VBFrame
חיפוש_והחלפה_מרובים
f
o
VBFrame
חיפוש_והחלפה_משודרג
f
o
VBFrame
עיצוב_כותרות_צד_הוראות
f
o
VBFrame
theme
theme1.xml
Xml
vbaData.xml
Xml
settings.xml
Xml
glossary
document.xml
Xml
settings.xml
Xml
_rels
document.xml.rels
Xml
styles.xml
Xml
webSettings.xml
Xml
fontTable.xml
Xml
styles.xml
Xml
webSettings.xml
Xml
numbering.xml
Xml
fontTable.xml
Xml
customXml
item1.xml
Xml
itemProps1.xml
Xml
_rels
item1.xml.rels
Xml
docProps
core.xml
Xml
app.xml
Xml
custom.xml
Xml
customUI
images
window.png
window.png-preview.png
firstworddelete.png
firstworddelete.png-preview.png
centerlastlinedelete.png
centerlastlinedelete.png-preview.png
windowdelete.png
windowdelete.png-preview.png
install.png
install.png-preview.png
all.png
all.png-preview.png
alldelete.png
alldelete.png-preview.png
centerlastline.png
centerlastline.png-preview.png
firstwordaddanddelete.png
firstwordaddanddelete.png-preview.png
firstword.png
firstword.png-preview.png
customUI14.xml
Xml
_rels
customUI14.xml.rels
Xml
Malware Configuration - Remote Template
|
Config. Field0 | Value |
|---|---|
| Target | https://mitmachim.top/post/632852 |
| Path | document.xml.rels |
| XPath | /Relationships/Relationship[17] |
| Outer XML | <Relationship Id="rId9" Type="http://schemas.openxmlformats.org/officeDocument/2006/relationships/hyperlink" Target="https://mitmachim.top/post/632852" TargetMode="External" xmlns="http://schemas.openxmlformats.org/package/2006/relationships" /> |
Malware Configuration - URLs in VBA/VBS Code
|
Config. Field0 | Value |
|---|---|
| URL #1 | https://mitmachim.top/post/626904 |
| URL #2 | https://mitmachim.top/post/632852 |
Malware Configuration - URLs in VBA/VBS Code
|
Config. Field0 | Value |
|---|---|
| URL #1 | https://mitmachim.top/post/626904 |
Malware Configuration - URLs in VBA/VBS Code
|
Config. Field0 | Value |
|---|---|
| URL #1 | https://mitmachim.top/post/632852 |
Artefacts
|
Name0 | Value |
|---|---|
| Remote Template - Highly Suspicious Document RelationShip | https://mitmachim.top/post/632852 |
eb9715a5304e3dd9c2756ac51ab3234e (543.55 KB)
File Structure
eb9715a5304e3dd9c2756ac51ab3234e
Office Document
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
T1221
Remote Template Injection
DeObfuscated
VBScript
T1059.005
Obfuscated
Scripting.FileSystemObject
Malicious
[Content_Types].xml
Xml
_rels
.rels
Xml
word
Malicious
document.xml
Xml
_rels
Malicious
document.xml.rels
Xml
T1221
Remote Template Injection
Malicious
vbaProject.bin.rels
Xml
endnotes.xml
Xml
header1.xml
Xml
header2.xml
Xml
footer1.xml
Xml
footer2.xml
Xml
header3.xml
Xml
footer3.xml
Xml
footnotes.xml
Xml
vbaProject.bin
Office Document
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Malicious
.
Malicious
Root Entry
Malicious
VBA
Malicious
dir
חלון
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
Obfuscated
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
קודש
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
Obfuscated
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
מנצפך
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
Obfuscated
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
סימון
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
Obfuscated
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
שונות
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Scripting.FileSystemObject
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Decompiled
Scripting.FileSystemObject
DeObfuscated
VBScript
Obfuscated
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Scripting.FileSystemObject
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Full Diff].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Malicious
החלפות
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
הפנייה
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Decompiled
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Full Diff].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Malicious
כותרות
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
Obfuscated
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
install
Blacklist VBA
VBA Macro
Malicious
[Stored VBA]
Blacklist VBA
VBA Macro
Visual Basic
Scripting.FileSystemObject
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
Blacklist VBA
VBA Macro
VBA P-Code
Disassembly
Module1
VBA Macro
[Stored VBA]
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
[PCode]
VBA Macro
VBA P-Code
Disassembly
__SRP_0
__SRP_1
__SRP_2
__SRP_3
__SRP_8
__SRP_9
__SRP_a
__SRP_b
__SRP_c
__SRP_d
טקסט_רץ
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
Obfuscated
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
לך_לקטע
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Decompiled VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Full Diff].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
סוגריים
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
Searcher
VBA Macro
[Stored VBA]
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
[PCode]
VBA Macro
VBA P-Code
Disassembly
[Decompiled VBA]
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
T1059.005
Obfuscated
[Decompiled VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
styleref
VBA Macro
[Stored VBA]
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
[PCode]
VBA Macro
VBA P-Code
Disassembly
[Decompiled VBA]
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
T1059.005
Obfuscated
[Decompiled VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
כותרת_צד
VBA Macro
[Stored VBA]
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
[PCode]
VBA Macro
VBA P-Code
Disassembly
[Decompiled VBA]
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
T1059.005
Obfuscated
[Decompiled VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Footnotes
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
UserForm1
VBA Macro
[Stored VBA]
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
[PCode]
VBA Macro
VBA P-Code
Disassembly
[Decompiled VBA]
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
T1059.005
Obfuscated
[Decompiled VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
רצף_הערות
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Decompiled
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Malicious
linetoline
VBA Macro
[Stored VBA]
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
[PCode]
VBA Macro
VBA P-Code
Disassembly
[Decompiled VBA]
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
Obfuscated
PleaseWait
VBA Macro
[Stored VBA]
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
[PCode]
VBA Macro
VBA P-Code
Disassembly
[Decompiled VBA]
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
T1059.005
Obfuscated
[Decompiled VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
הערות_ברצף
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
Obfuscated
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
כותרות_צד2
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
Obfuscated
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Full Diff].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
מעצב_טורים
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Decompiled
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Malicious
FindReplace
Blacklist VBA
VBA Macro
Malicious
[Stored VBA]
Blacklist VBA
VBA Macro
Visual Basic
Scripting.FileSystemObject
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
Blacklist VBA
VBA Macro
VBA P-Code
Disassembly
[Decompiled VBA]
Blacklist VBA
VBA Macro
Visual Basic
Decompiled
Scripting.FileSystemObject
DeObfuscated
VBScript
Obfuscated
Malicious
open_link_1
Blacklist VBA
VBA Macro
[Stored VBA]
Blacklist VBA
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
[PCode]
Blacklist VBA
VBA Macro
VBA P-Code
Disassembly
open_link_2
Blacklist VBA
VBA Macro
[Stored VBA]
Blacklist VBA
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
[PCode]
Blacklist VBA
VBA Macro
VBA P-Code
Disassembly
Parenthesis
VBA Macro
[Stored VBA]
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
[PCode]
VBA Macro
VBA P-Code
Disassembly
[Decompiled VBA]
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
T1059.005
Obfuscated
[Decompiled VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
מילה_ראשונה
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
שורה_אחרונה
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Decompiled
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Malicious
modPopupMenu
Blacklist VBA
VBA Macro
[Stored VBA]
Blacklist VBA
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
[PCode]
Blacklist VBA
VBA Macro
VBA P-Code
Disassembly
Update_Cross
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Decompiled VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Full Diff].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
_VBA_PROJECT
מאקרו_לטאבים
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Decompiled VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Full Diff].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
תיקון_שגיאות
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
Obfuscated
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
MyParenthesis
VBA Macro
[Stored VBA]
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
[PCode]
VBA Macro
VBA P-Code
Disassembly
[Decompiled VBA]
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
T1059.005
Obfuscated
[Decompiled VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
RibbonControl
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
Obfuscated
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Malicious
TransfomToSeq
Blacklist VBA
VBA Macro
Malicious
[Stored VBA]
Blacklist VBA
VBA Macro
Visual Basic
Scripting.FileSystemObject
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
Blacklist VBA
VBA Macro
VBA P-Code
Disassembly
[Decompiled VBA]
Blacklist VBA
VBA Macro
Visual Basic
Decompiled
Scripting.FileSystemObject
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Decompiled VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
אינדקס_והערות
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
כותרת_מתעדכנת
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
Obfuscated
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
מספור_אוטומטי
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
Obfuscated
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
סוגריים_שגיאה
VBA Macro
[Stored VBA]
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
[PCode]
VBA Macro
VBA P-Code
Disassembly
פסקאות_כפולות
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
Obfuscated
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
SearchManyFiles
VBA Macro
[Stored VBA]
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
[PCode]
VBA Macro
VBA P-Code
Disassembly
[Decompiled VBA]
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
T1059.005
Obfuscated
[Decompiled VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
export_CR_to_tag
VBA Macro
[Stored VBA]
VBA Macro
Visual Basic
[PCode]
VBA Macro
VBA P-Code
Disassembly
[Decompiled VBA]
VBA Macro
Visual Basic
Decompiled
הקטן_הגדל_רווחים
VBA Macro
[Stored VBA]
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
[PCode]
VBA Macro
VBA P-Code
Disassembly
[Decompiled VBA]
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
T1059.005
Obfuscated
[Decompiled VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
מספור_עברי_הערות
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
Obfuscated
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
נקודה_בסוף_פיסקה
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
Obfuscated
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
תיקון_שגיאות_שפה
VBA Macro
[Stored VBA]
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
[PCode]
VBA Macro
VBA P-Code
Disassembly
החלפה_באבני_בניין
VBA Macro
[Stored VBA]
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
[PCode]
VBA Macro
VBA P-Code
Disassembly
[Decompiled VBA]
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
T1059.005
Obfuscated
[Decompiled VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
החלפת_כמה_מילים_1
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
Obfuscated
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
הערות_יותר_משצב_2
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Decompiled
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Malicious
יישר_כל_המסמך_חדש
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
Obfuscated
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Full Diff].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Malicious
מציג_קיצורי_מקשים
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
Obfuscated
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
תיקון_שגיאות_מקור
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
Obfuscated
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
FirstWordStyleHelp
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Decompiled VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
יישור_טור_בעמוד_זה
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
Obfuscated
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Full Diff].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
עיצוב_תורני_גרסה_3
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
Obfuscated
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Full Diff].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
תיקון_שגיאות_מנצפך
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
Obfuscated
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
המרת_מספרים_לאותיות
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
חיפוש_והחלפה_מרובים
VBA Macro
[Stored VBA]
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
[PCode]
VBA Macro
VBA P-Code
Disassembly
[Decompiled VBA]
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
T1059.005
Obfuscated
[Decompiled VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
חיפוש_והחלפה_משודרג
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Decompiled VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
מעבר_עמוד_לפי_סגנון
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
Obfuscated
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
עיצוב_פיסקה_החל_הכל
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
Obfuscated
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Malicious
חיפוש_והחלפה_פרטניים
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Full Diff].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
עיצוב_כותרות_צד_הוראות
VBA Macro
[Stored VBA]
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
[PCode]
VBA Macro
VBA P-Code
Disassembly
[Decompiled VBA]
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
T1059.005
Obfuscated
[Decompiled VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
חילוץ_טקסטים_פירוק_מסמך
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
Obfuscated
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Malicious
יישר_ממיקום_זה_עד_סוף_המסמך
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
Obfuscated
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
DeObfuscated
VBScript
Obfuscated
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Malicious
תיקון_שגיאות_רווחים_וסימנים
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
Obfuscated
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
VBA Macro
Visual Basic
Malicious
ישור_טורים_מאמר_זה_מכותרתלכותרת
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Malicious
[Stored VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Stored VBA].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[PCode]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
VBA P-Code
Disassembly
Malicious
[Decompiled VBA]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Decompiled
DeObfuscated
VBScript
Obfuscated
Malicious
[Full Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
DeObfuscated
VBScript
T1059.005
Obfuscated
Malicious
[Full Diff].deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
[Partial Diff]
VBA Stomping
ATT&CK T1564.007
Malicious
Malicious Document
Blacklist VBA
VBA Macro
Visual Basic
Malicious
הפנייה
f
o
i101
f
o
CompObj
i115
f
o
CompObj
VBFrame
PROJECT
לך_לקטע
f
o
VBFrame
Searcher
f
o
VBFrame
styleref
f
o
i14
f
o
i16
f
o
i18
f
o
VBFrame
כותרת_צד
f
o
VBFrame
PROJECTlk
PROJECTwm
UserForm1
f
o
i03
f
o
VBFrame
PleaseWait
f
o
VBFrame
Parenthesis
f
o
i04
f
o
i11
f
o
i17
f
o
i29
f
o
VBFrame
Update_Cross
f
o
i36
f
o
VBFrame
מאקרו_לטאבים
f
o
i21
f
o
i55
f
o
i77
f
o
i79
f
o
i65
f
o
VBFrame
MyParenthesis
f
o
i11
f
o
i17
f
o
i44
f
o
i66
f
o
i70
f
o
VBFrame
TransfomToSeq
f
i19
f
o
i22
f
o
i24
f
o
VBFrame
SearchManyFiles
f
o
VBFrame
export_CR_to_tag
f
o
VBFrame
הקטן_הגדל_רווחים
f
o
i73
f
o
i122
f
o
i130
f
o
i172
f
o
i203
f
o
VBFrame
החלפה_באבני_בניין
f
o
VBFrame
FirstWordStyleHelp
f
o
VBFrame
חיפוש_והחלפה_מרובים
f
o
VBFrame
חיפוש_והחלפה_משודרג
f
o
VBFrame
עיצוב_כותרות_צד_הוראות
f
o
VBFrame
theme
theme1.xml
Xml
vbaData.xml
Xml
settings.xml
Xml
glossary
document.xml
Xml
settings.xml
Xml
_rels
document.xml.rels
Xml
styles.xml
Xml
webSettings.xml
Xml
fontTable.xml
Xml
styles.xml
Xml
webSettings.xml
Xml
numbering.xml
Xml
fontTable.xml
Xml
customXml
item1.xml
Xml
itemProps1.xml
Xml
_rels
item1.xml.rels
Xml
docProps
core.xml
Xml
app.xml
Xml
custom.xml
Xml
customUI
images
window.png
window.png-preview.png
firstworddelete.png
firstworddelete.png-preview.png
centerlastlinedelete.png
centerlastlinedelete.png-preview.png
windowdelete.png
windowdelete.png-preview.png
install.png
install.png-preview.png
all.png
all.png-preview.png
alldelete.png
alldelete.png-preview.png
centerlastline.png
centerlastline.png-preview.png
firstwordaddanddelete.png
firstwordaddanddelete.png-preview.png
firstword.png
firstword.png-preview.png
customUI14.xml
Xml
_rels
customUI14.xml.rels
Xml
Characteristics
vbaDNA - VBA Stomping & Purging Stategy detection
|
Module Name0 | ||
|---|---|---|
| חלון | VBA Stomping ATT&CK T1564.007 Malicious Malicious Document VBA Macro |
|
| קודש | VBA Stomping ATT&CK T1564.007 Malicious Malicious Document VBA Macro |
|
| מנצפך | VBA Stomping ATT&CK T1564.007 Malicious Malicious Document VBA Macro |
|
| סימון | VBA Stomping ATT&CK T1564.007 Malicious Malicious Document VBA Macro |
|
| שונות | VBA Stomping ATT&CK T1564.007 Malicious Malicious Document Blacklist VBA VBA Macro |
|
| החלפות | VBA Stomping ATT&CK T1564.007 Malicious Malicious Document VBA Macro |
|
| הפנייה | VBA Stomping ATT&CK T1564.007 Malicious Malicious Document Blacklist VBA VBA Macro |
|
| כותרות | VBA Stomping ATT&CK T1564.007 Malicious Malicious Document VBA Macro |
|
| install | Blacklist VBA VBA Macro |
|
| Module1 | VBA Macro |
|
| טקסט_רץ | VBA Stomping ATT&CK T1564.007 Malicious Malicious Document VBA Macro |
|
| לך_לקטע | VBA Stomping ATT&CK T1564.007 Malicious Malicious Document VBA Macro |
|
| סוגריים | VBA Stomping ATT&CK T1564.007 Malicious Malicious Document VBA Macro |
|
| Searcher | VBA Macro |
|
| styleref | VBA Macro |
|
| כותרת_צד | VBA Macro |
|
| Footnotes | VBA Stomping ATT&CK T1564.007 Malicious Malicious Document VBA Macro |
|
| UserForm1 | VBA Macro |
|
| רצף_הערות | VBA Stomping ATT&CK T1564.007 Malicious Malicious Document Blacklist VBA VBA Macro |
|
| linetoline | VBA Macro |
|
| PleaseWait | VBA Macro |
|
| הערות_ברצף | VBA Stomping ATT&CK T1564.007 Malicious Malicious Document VBA Macro |
|
| כותרות_צד2 | VBA Stomping ATT&CK T1564.007 Malicious Malicious Document VBA Macro |
|
| מעצב_טורים | VBA Stomping ATT&CK T1564.007 Malicious Malicious Document Blacklist VBA VBA Macro |
|
| FindReplace | Blacklist VBA VBA Macro |
|
| open_link_1 | Blacklist VBA VBA Macro |
|
| open_link_2 | Blacklist VBA VBA Macro |
|
| Parenthesis | VBA Macro |
|
| מילה_ראשונה | VBA Stomping ATT&CK T1564.007 Malicious Malicious Document VBA Macro |
|
| שורה_אחרונה | VBA Stomping ATT&CK T1564.007 Malicious Malicious Document Blacklist VBA VBA Macro |
|
| modPopupMenu | Blacklist VBA VBA Macro |
|
| Update_Cross | VBA Stomping ATT&CK T1564.007 Malicious Malicious Document VBA Macro |
|
| מאקרו_לטאבים | VBA Stomping ATT&CK T1564.007 Malicious Malicious Document VBA Macro |
|
| תיקון_שגיאות | VBA Stomping ATT&CK T1564.007 Malicious Malicious Document VBA Macro |
|
| MyParenthesis | VBA Macro |
|
| RibbonControl | VBA Stomping ATT&CK T1564.007 Malicious Malicious Document Blacklist VBA VBA Macro |
|
| TransfomToSeq | Blacklist VBA VBA Macro |
|
| אינדקס_והערות | VBA Stomping ATT&CK T1564.007 Malicious Malicious Document VBA Macro |
|
| כותרת_מתעדכנת | VBA Stomping ATT&CK T1564.007 Malicious Malicious Document VBA Macro |
|
| מספור_אוטומטי | VBA Stomping ATT&CK T1564.007 Malicious Malicious Document VBA Macro |
|
| סוגריים_שגיאה | VBA Macro |
|
| פסקאות_כפולות | VBA Stomping ATT&CK T1564.007 Malicious Malicious Document VBA Macro |
|
| SearchManyFiles | VBA Macro |
|
| export_CR_to_tag | VBA Macro |
|
| הקטן_הגדל_רווחים | VBA Macro |
|
| מספור_עברי_הערות | VBA Stomping ATT&CK T1564.007 Malicious Malicious Document VBA Macro |
|
| נקודה_בסוף_פיסקה | VBA Stomping ATT&CK T1564.007 Malicious Malicious Document VBA Macro |
|
| תיקון_שגיאות_שפה | VBA Macro |
|
| החלפה_באבני_בניין | VBA Macro |
|
| החלפת_כמה_מילים_1 | VBA Stomping ATT&CK T1564.007 Malicious Malicious Document VBA Macro |
|
| הערות_יותר_משצב_2 | VBA Stomping ATT&CK T1564.007 Malicious Malicious Document Blacklist VBA VBA Macro |
|
| יישר_כל_המסמך_חדש | VBA Stomping ATT&CK T1564.007 Malicious Malicious Document Blacklist VBA VBA Macro |
|
| מציג_קיצורי_מקשים | VBA Stomping ATT&CK T1564.007 Malicious Malicious Document VBA Macro |
|
| תיקון_שגיאות_מקור | VBA Stomping ATT&CK T1564.007 Malicious Malicious Document VBA Macro |
|
| FirstWordStyleHelp | VBA Stomping ATT&CK T1564.007 Malicious Malicious Document VBA Macro |
|
| יישור_טור_בעמוד_זה | VBA Stomping ATT&CK T1564.007 Malicious Malicious Document VBA Macro |
|
| עיצוב_תורני_גרסה_3 | VBA Stomping ATT&CK T1564.007 Malicious Malicious Document VBA Macro |
|
| תיקון_שגיאות_מנצפך | VBA Stomping ATT&CK T1564.007 Malicious Malicious Document VBA Macro |
|
| המרת_מספרים_לאותיות | VBA Stomping ATT&CK T1564.007 Malicious Malicious Document VBA Macro |
|
| חיפוש_והחלפה_מרובים | VBA Macro |
|
| חיפוש_והחלפה_משודרג | VBA Stomping ATT&CK T1564.007 Malicious Malicious Document VBA Macro |
|
| מעבר_עמוד_לפי_סגנון | VBA Stomping ATT&CK T1564.007 Malicious Malicious Document VBA Macro |
|
| עיצוב_פיסקה_החל_הכל | VBA Stomping ATT&CK T1564.007 Malicious Malicious Document Blacklist VBA VBA Macro |
|
| חיפוש_והחלפה_פרטניים | VBA Stomping ATT&CK T1564.007 Malicious Malicious Document VBA Macro |
|
| עיצוב_כותרות_צד_הוראות | VBA Macro |
|
| חילוץ_טקסטים_פירוק_מסמך | VBA Stomping ATT&CK T1564.007 Malicious Malicious Document Blacklist VBA VBA Macro |
|
| יישר_ממיקום_זה_עד_סוף_המסמך | VBA Stomping ATT&CK T1564.007 Malicious Malicious Document Blacklist VBA VBA Macro |
|
| תיקון_שגיאות_רווחים_וסימנים | VBA Stomping ATT&CK T1564.007 Malicious Malicious Document VBA Macro |
|
| ישור_טורים_מאמר_זה_מכותרתלכותרת | VBA Stomping ATT&CK T1564.007 Malicious Malicious Document Blacklist VBA VBA Macro |
|
Malware Configuration - Remote Template
|
Config. Field0 | Value |
|---|---|
| Target | https://mitmachim.top/post/632852 |
| Path | document.xml.rels |
| XPath | /Relationships/Relationship[17] |
| Outer XML | <Relationship Id="rId9" Type="http://schemas.openxmlformats.org/officeDocument/2006/relationships/hyperlink" Target="https://mitmachim.top/post/632852" TargetMode="External" xmlns="http://schemas.openxmlformats.org/package/2006/relationships" /> |
Malware Configuration - URLs in VBA/VBS Code
|
Config. Field0 | Value |
|---|---|
| URL #1 | https://mitmachim.top/post/626904 |
| URL #2 | https://mitmachim.top/post/632852 |
Malware Configuration - URLs in VBA/VBS Code
|
Config. Field0 | Value |
|---|---|
| URL #1 | https://mitmachim.top/post/626904 |
Malware Configuration - URLs in VBA/VBS Code
|
Config. Field0 | Value |
|---|---|
| URL #1 | https://mitmachim.top/post/632852 |
Artefacts
|
Name0 | Value | Location |
|---|---|---|
| Remote Template - Highly Suspicious Document RelationShip | https://mitmachim.top/post/632852 Malicious |
eb9715a5304e3dd9c2756ac51ab3234e > word > _rels > document.xml.rels |
You must be signed in to post a comment.
You need a premium account to access this feature.
You must be signed in to post a comment.