Malicious
Malicious

05e0e552e0b9cc3e0ecf888880707a44

Share on LinkedIn
Print
MS Office Document
MD5: 05e0e552e0b9cc3e0ecf888880707a44
Size: 1.25 MB
application/vnd.ms-office
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 05e0e552e0b9cc3e0ecf888880707a44
Sha1 331f9a8c449669b087a5215bde4b422531150671
Sha256 f3668cb7b8748db4142d660a75f15bfa51936fbe6717093a770c57f51d33eb79
Sha384 a97d8803ad690d951c4d7d038f9a65d85525f62049f507bf0bb056e4f5aaf67ea386c54260831044916ef1312eb3a91a
Sha512 47378842bc5107066c5d7dc1d84c24d2c2d1d6a891374cfdad5da1e1be71070ce32bf8a7d47b8d42b4527d5e79b9cd84f1edb80b37c1ba2141365211d77c049c
SSDeep 24576:cyM1nFJAvliiqawQiXSSonBQPFFc6nYhqYIqLLNnNNgLM6L:kbRi+Q+JonBQPkwYhHIqXNnNqLM6L
TLSH 6045DF618BE1D706FBAC4A7C9967FD943AE8CC6E0AEC3AF83456B0D048F410864D65D7
file_B7106BF1594C
Root Entry
Malicious
䡀䌏䈯
䡀䈖䌧䠤
䡀䌋䄱䜵
䡀㬿䏲䐸䖱
䡀㽿䅤䈯䠶
䡀䈏䗤䕸䠨
䡀䓞䕪䇤䠨
䡀䕙䓲䕨䜷
䡀䌍䈵䗦䕲䠼
䡀䒌䓰䑲䑨䠷
䡀㼿䕷䑬㭪䗤䠤
䡀㼿䕷䑬㹪䒲䠯
䡀㿿䏤䇬䗤䒬䠱
䡀䖖㯬䏬㱨䖤䠫
䡀䘌䗶䐲䆊䌷䑲
䌋䄱䜵㿾䈬㭺㣥㩀䠃
䡀䄕䑸䋦䒌䇱䗬䒬䠱
䡀䇊䌰㾱㼒䔨䈸䆱䠨
䡀䈏䗤䕸㬨䐲䒳䈱䗱䠶
䡀䑒䗶䏤㾯㼒䔨䈸䆱䠨
䌋䄱䜵㲾䄰䈪䘋䗷䑲㧂㩀
Malicious
.executed
Malicious
䌋䄱䜵㼾䄷䇱䕤㸧䇯㦂䠂
䡀䇊䌰㮱䈻䘦䈷䈜䘴䑨䈦
䡀䇊䗹䛎䆨䗸㼨䔨䈸䆱䠨
䡀䑒䗶䏤㮯䈻䘦䈷䈜䘴䑨䈦
SummaryInformation
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path ole:doc>scr:vbs~T1027~T1059.005
Shape ole:doc>scr:vbs
malicious 2 nodes
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
An error has occurred. This application may no longer respond until reloaded. Reload 🗙