Malicious
MS Office Document
MD5:
Size: 0 B
application/vnd.ms-office
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Microsoft Office Document
5 malicious · 1329 files
OFFf1ff38606c229834a91d48f484568782
BINRoot Entry
IMG0x00023ED1.svg
IMG0x0004B844.svg
EXEghjgjkgl.exe
Structure
BIN[NSIS Installer] @ #00015608
BMPmodern-wizard.bmp
DLLnsDialogs.dll
DLLSystem.dll
BMPmodern-header.bmp
INFOemVista.inf
CATtap0901.cat
EXEtap0901.sys
EXEtapinstall.exe
EXEUpdate.exe
EXELetsPRO.exe
INILetsPRO.ini
DLLCommunityToolkit.Mvvm.dll
DLLDeltaCompressionDotNet.MsDelta.dll
DLLDeltaCompressionDotNet.PatchApi.dll
DLLDeltaCompressionDotNet.dll
DLLFontAwesome.WPF.dll
DLLHardcodet.Wpf.TaskbarNotification.dll
DLLICSharpCode.AvalonEdit.dll
DLLINIFileParser.dll
DLLLetsGoogleAnalytics.dll
EXELetsGoogleAnalytics.exe
BINLetsPRO.exe.config
DLLLetsVPNDomainModel.dll
DLLLetsVPNInfraStructure.dll
DLLMdXaml.dll
DLLMicrosoft.Bcl.AsyncInterfaces.dll
DLLMicrosoft.Expression.Interactions.dll
DLLMicrosoft.Toolkit.Uwp.Notifications.dll
DLLMicrosoft.Web.WebView2.Core.dll
DLLMicrosoft.Web.WebView2.WinForms.dll
DLLMicrosoft.Web.WebView2.Wpf.dll
DLLMicrosoft.Win32.Primitives.dll
DLLMicrosoft.Win32.Registry.AccessControl.dll
DLLMicrosoft.Win32.Registry.dll
DLLMicrosoft.Win32.SystemEvents.dll
DLLMono.Cecil.Mdb.dll
DLLMono.Cecil.Pdb.dll
DLLMono.Cecil.Rocks.dll
DLLMono.Cecil.dll
DLLNewtonsoft.Json.dll
DLLNuGet.Squirrel.dll
DLLPusherClient.dll
DLLSQLite-net.dll
DLLSQLiteNetExtensions.dll
DLLSQLiteNetExtensionsAsync.dll
DLLSQLitePCLRaw.batteries_v2.dll
DLLSQLitePCLRaw.core.dll
DLLSQLitePCLRaw.nativelibrary.dll
DLLSQLitePCLRaw.provider.dynamic_cdecl.dll
DLLSVGImage.dll
DLLSentry.dll
DLLSharpCompress.dll
DLLSquirrel.dll
DLLSuperSocket.ClientEngine.dll
DLLSystem.AppContext.dll
DLLSystem.Buffers.dll
DLLSystem.CodeDom.dll
DLLSystem.Collections.Concurrent.dll
DLLSystem.Collections.Immutable.dll
DLLSystem.Collections.NonGeneric.dll
DLLSystem.Collections.Specialized.dll
DLLSystem.Collections.dll
DLLSystem.ComponentModel.Annotations.dll
DLLSystem.ComponentModel.EventBasedAsync.dll
DLLSystem.ComponentModel.Primitives.dll
DLLSystem.ComponentModel.TypeConverter.dll
DLLSystem.ComponentModel.dll
DLLSystem.Configuration.ConfigurationManager.dll
DLLSystem.Console.dll
DLLSystem.Data.Common.dll
DLLSystem.Data.Odbc.dll
DLLSystem.Data.OleDb.dll
DLLSystem.Data.SqlClient.dll
DLLSystem.Diagnostics.Contracts.dll
DLLSystem.Diagnostics.Debug.dll
DLLSystem.Diagnostics.EventLog.dll
DLLSystem.Diagnostics.FileVersionInfo.dll
DLLSystem.Diagnostics.PerformanceCounter.dll
DLLSystem.Diagnostics.Process.dll
DLLSystem.Diagnostics.StackTrace.dll
DLLSystem.Diagnostics.TextWriterTraceListener.dll
DLLSystem.Diagnostics.Tools.dll
DLLSystem.Diagnostics.TraceSource.dll
DLLSystem.Diagnostics.Tracing.dll
DLLSystem.Drawing.Common.dll
DLLSystem.Drawing.Primitives.dll
DLLSystem.Dynamic.Runtime.dll
DLLSystem.Globalization.Calendars.dll
DLLSystem.Globalization.Extensions.dll
DLLSystem.Globalization.dll
DLLSystem.IO.Compression.ZipFile.dll
DLLSystem.IO.Compression.dll
DLLSystem.IO.FileSystem.AccessControl.dll
DLLSystem.IO.FileSystem.DriveInfo.dll
DLLSystem.IO.FileSystem.Primitives.dll
DLLSystem.IO.FileSystem.Watcher.dll
DLLSystem.IO.FileSystem.dll
DLLSystem.IO.IsolatedStorage.dll
DLLSystem.IO.MemoryMappedFiles.dll
DLLSystem.IO.Packaging.dll
DLLSystem.IO.Pipes.AccessControl.dll
DLLSystem.IO.Pipes.dll
DLLSystem.IO.Ports.dll
DLLSystem.IO.UnmanagedMemoryStream.dll
DLLSystem.IO.dll
DLLSystem.Linq.Expressions.dll
DLLSystem.Linq.Parallel.dll
DLLSystem.Linq.Queryable.dll
DLLSystem.Linq.dll
DLLSystem.Management.Automation.dll
DLLSystem.Memory.dll
DLLSystem.Net.Http.dll
DLLSystem.Net.IPNetwork.dll
DLLSystem.Net.NameResolution.dll
DLLSystem.Net.NetworkInformation.dll
DLLSystem.Net.Ping.dll
DLLSystem.Net.Primitives.dll
DLLSystem.Net.Requests.dll
DLLSystem.Net.Security.dll
DLLSystem.Net.Sockets.dll
DLLSystem.Net.WebHeaderCollection.dll
DLLSystem.Net.WebSockets.Client.dll
DLLSystem.Net.WebSockets.dll
DLLSystem.Numerics.Vectors.dll
DLLSystem.ObjectModel.dll
DLLSystem.Reflection.Extensions.dll
DLLSystem.Reflection.Metadata.dll
DLLSystem.Reflection.Primitives.dll
DLLSystem.Reflection.dll
DLLSystem.Resources.Reader.dll
DLLSystem.Resources.ResourceManager.dll
DLLSystem.Resources.Writer.dll
DLLSystem.Runtime.CompilerServices.Unsafe.dll
DLLSystem.Runtime.CompilerServices.VisualC.dll
DLLSystem.Runtime.Extensions.dll
DLLSystem.Runtime.Handles.dll
DLLSystem.Runtime.InteropServices.RuntimeInformation.dll
DLLSystem.Runtime.InteropServices.dll
DLLSystem.Runtime.Numerics.dll
DLLSystem.Runtime.Serialization.Formatters.dll
DLLSystem.Runtime.Serialization.Json.dll
DLLSystem.Runtime.Serialization.Primitives.dll
DLLSystem.Runtime.Serialization.Xml.dll
DLLSystem.Runtime.dll
DLLSystem.Security.AccessControl.dll
DLLSystem.Security.Claims.dll
DLLSystem.Security.Cryptography.Algorithms.dll
DLLSystem.Security.Cryptography.Cng.dll
DLLSystem.Security.Cryptography.Csp.dll
DLLSystem.Security.Cryptography.Encoding.dll
DLLSystem.Security.Cryptography.Pkcs.dll
DLLSystem.Security.Cryptography.Primitives.dll
DLLSystem.Security.Cryptography.ProtectedData.dll
DLLSystem.Security.Cryptography.X509Certificates.dll
DLLSystem.Security.Cryptography.Xml.dll
DLLSystem.Security.Permissions.dll
DLLSystem.Security.Principal.Windows.dll
DLLSystem.Security.Principal.dll
DLLSystem.Security.SecureString.dll
DLLSystem.ServiceModel.Duplex.dll
DLLSystem.ServiceModel.Http.dll
DLLSystem.ServiceModel.NetTcp.dll
DLLSystem.ServiceModel.Primitives.dll
DLLSystem.ServiceModel.Security.dll
DLLSystem.ServiceModel.Syndication.dll
DLLSystem.ServiceProcess.ServiceController.dll
DLLSystem.Text.Encoding.CodePages.dll
DLLSystem.Text.Encoding.Extensions.dll
DLLSystem.Text.Encoding.dll
DLLSystem.Text.Encodings.Web.dll
DLLSystem.Text.Json.dll
DLLSystem.Text.RegularExpressions.dll
DLLSystem.Threading.AccessControl.dll
DLLSystem.Threading.Overlapped.dll
DLLSystem.Threading.Tasks.Extensions.dll
DLLSystem.Threading.Tasks.Parallel.dll
DLLSystem.Threading.Tasks.dll
DLLSystem.Threading.Thread.dll
DLLSystem.Threading.ThreadPool.dll
DLLSystem.Threading.Timer.dll
DLLSystem.Threading.dll
DLLSystem.ValueTuple.dll
DLLSystem.Web.Services.Description.dll
DLLSystem.Windows.Interactivity.dll
DLLSystem.Xml.ReaderWriter.dll
DLLSystem.Xml.XDocument.dll
DLLSystem.Xml.XPath.XDocument.dll
DLLSystem.Xml.XPath.dll
DLLSystem.Xml.XmlDocument.dll
DLLSystem.Xml.XmlSerializer.dll
DLLToastNotifications.Messages.dll
DLLToastNotifications.dll
DLLUtils.dll
DLLWebSocket4Net.dll
DLLWpfAnimatedGif.dll
DLLlibwin.dll
BINlog4net.config
DLLlog4net.dll
DLLmicrosoft.identitymodel.dll
DLLnetstandard.dll
DLLwintun.dll
IMGnotification_icon.png
DLLWebView2Loader.dll
DLLSystem.Web.Services.Description.resources.dll
DLLLetsPRO.resources.dll
DLLe_sqlite3.dll
EXEndp462-web.exe
DLLnsExec.dll
DLLnsProcess.dll
DLLINetC.dll
PS1[SETUP_DECOMPILED.NSI]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
BIN[NSIS Uninstaller] @ #00FBEF5D
P7B[Authenticode]_ff702429.p7b
BINResources
EXEweicha.exe
URLs in VB Code - #1
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #2
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #3
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #4
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #5
URIsuspect
http:/huhuhuhuhuhuhu
URLs in VB Code - #6
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #7
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #8
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #9
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #10
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #11
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #12
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #13
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #14
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #15
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #16
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #17
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #18
URIsuspect
http:/huhuhuhuhuhuhu
URLs in VB Code - #19
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #20
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #21
URIsuspect
http:/huhuhuhuhuhuhu
URLs in VB Code - #22
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #23
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #24
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #25
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #26
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #27
URIsuspect
http:/huhuhuhuhuhuhu
URLs in VB Code - #28
URIsuspect
http:/huhuhuhuhuhuhu
URLs in VB Code - #29
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #30
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #31
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #32
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #33
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #34
URIsuspect
https:huhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential