Office (OLE) / .EXE malware analysis — malicious · 3f43c0f41f7e6ef5

MALICIOUS

Office (OLE) / .EXE

115.0 KB Created: 1998-06-24 09:51:21 Authoring application: Microsoft Excel

MD5: eb3c3eab65d5ebacd8e9a7a690d785a7 SHA-1: 2db00cd5c6e518fe38adf2a22824d86b5a5883bf SHA-256: 3f43c0f41f7e6ef5bb0d452423f6b2d1dde6aa3e467435adbf99ef7bfe9b03fc

60 Risk Score

Malware Insights

MITRE ATT&CK

T1059.005 Visual Basic

The file is an Excel OLE executable containing a VBA macro. The presence of an Auto_Open macro indicates that malicious code will execute automatically upon opening the document. No specific IOCs were extracted, but the macro's presence strongly suggests a malicious intent, likely to download and execute a secondary payload.

Heuristics 2

Auto_Open macro high OLE_VBA_AUTO

Auto_Open macro
VBA macros detected medium OLE_VBA_MACROS

Document contains VBA macro code

Extracted artifacts 1

Files carved from inside the sample during analysis.

Filename	Kind	Source	Size
`macros.bas` `ec3239518f413d2d986b0e520d27a3784207bd3a04f4c8366e4f37f7c966efd6`	vba-macro	oletools.olevba.extract_macros (decoded VBA source)	1850 bytes

Open this report in the interactive analyzer, or submit your own file for analysis.