← Reports

Malicious Macros in Office Documents

Claim_732989680_03292021.xlsm

Author
Moise Medici
Updated
25 Oct 2025 · Completed
Difficulty
Easy
Platform
Windows
Capabilities
Dropping Secondary Payloads
Tags
vbscriptxml

Executive Summary

This sample is a malicious document that hides its execution in a series of hidden Excel sheets. Its purpose is to download and execute 3 DLLs coming from 3 different IP addresses.

The purpose of the DLLs cannot be confirmed, as there is no connectivity to those IP addresses.