Malicious
22a59065d5c3ae5bf8dd841d6042de07
MS Office Document
MD5: 22a59065d5c3ae5bf8dd841d6042de07
Size: 2.27 MB
application/vnd.ms-office
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Microsoft Office Document
Size
2.27 MB · 2,270,720 B
First seen
2026-10-21 11:31 · 4 days ago
Last seen
2026-10-21 11:31 · 4 days ago
Last analysis
2026-10-21 11:31 · 4 days ago
Hashes
MD5
22a59065d5c3ae5bf8dd841d6042de07
Sha1
b834c1169a2ebad3bc47c0b9b3e286121f484e1f
Sha256
1f98de58b5d5e2cf4ec49eafb35991ea21b6b39af36448c876c8ca9935a0fd2e
Sha384
42b65c6cfd24a868202aaf47d2469568098812789decc562783991ef3fce073d9312353286be53a452ee609f4211fba1
Sha512
ff03350017fe1aa7ddedd80b24b6efb869c435be33f0ae8a7d32cd72873e5d3e9de65ca1e4d83bd41f396ad5397ddb476c3ea1ce40d2ee28e789eb6dd2280886
SSDeep
24576:hDcs+zkuBYCbM6UEVfofhGVo59FqYGauw4o4Y01qZtLoNmkf1:hn8YQuF8VozA3rqZ5ozt
TLSH
B1B54C636A50600552B5A8FABEBD5E37694F3409102AD98EFFD30B86F52E6F44C02D1F
3 malicious · 25 files
OFF22a59065d5c3ae5bf8dd841d6042de07T1059.001
BINRoot Entry
BIN䄦㡥䆾䅤
BIN䡀䈖䌧䠤
BIN䡀䌋䄱䜵
BIN䡀㬿䏲䐸䖱
BIN䡀㽿䅤䈯䠶
BIN䡀䈏䗤䕸䠨
BIN䡀䈛䌪䗶䜵
BIN䡀䕙䓲䕨䜷
BIN䡀䌍䈵䗦䕲䠼
BIN䡀䒌䓰䑲䑨䠷
PS1䡀㼿䕷䑬㭪䗤䠤T1059.001
PS1[PowerShell Command]T1059.001
PS1[Base64-Block]T1059.001
BIN䡀㼿䕷䑬㹪䒲䠯
BIN䡀䘌䗶䐲䆊䌷䑲
BIN䌋䄱䜵䝾㩒㠳㡤䠹
BIN䡀䇊䌰㾱㼒䔨䈸䆱䠨
PS1䌋䄱䜵䎾䀘䔏䌦䙒㩗䠽T1059.001
BIN䡀䈏䗤䕸㬨䐲䒳䈱䗱䠶
BIN䡀䑒䗶䏤㾯㼒䔨䈸䆱䠨
BIN䡀䇊䌰㮱䈻䘦䈷䈜䘴䑨䈦
BIN䡀䇊䗹䛎䆨䗸㼨䔨䈸䆱䠨
BIN䡀䑒䗶䏤㮯䈻䘦䈷䈜䘴䑨䈦
BINSummaryInformation
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 2
STICH kept: 1secondary ignored: 1
bin
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
ole:doc>scr:ps1~T1059.001
Shape
ole:doc>scr:ps1
technique2 nodes
3 malicious · 25 files
OFF22a59065d5c3ae5bf8dd841d6042de07T1059.001
BINRoot Entry
BIN䄦㡥䆾䅤
BIN䡀䈖䌧䠤
BIN䡀䌋䄱䜵
BIN䡀㬿䏲䐸䖱
BIN䡀㽿䅤䈯䠶
BIN䡀䈏䗤䕸䠨
BIN䡀䈛䌪䗶䜵
BIN䡀䕙䓲䕨䜷
BIN䡀䌍䈵䗦䕲䠼
BIN䡀䒌䓰䑲䑨䠷
PS1䡀㼿䕷䑬㭪䗤䠤T1059.001
PS1[PowerShell Command]T1059.001
PS1[Base64-Block]T1059.001
BIN䡀㼿䕷䑬㹪䒲䠯
BIN䡀䘌䗶䐲䆊䌷䑲
BIN䌋䄱䜵䝾㩒㠳㡤䠹
BIN䡀䇊䌰㾱㼒䔨䈸䆱䠨
PS1䌋䄱䜵䎾䀘䔏䌦䙒㩗䠽T1059.001
BIN䡀䈏䗤䕸㬨䐲䒳䈱䗱䠶
BIN䡀䑒䗶䏤㾯㼒䔨䈸䆱䠨
BIN䡀䇊䌰㮱䈻䘦䈷䈜䘴䑨䈦
BIN䡀䇊䗹䛎䆨䗸㼨䔨䈸䆱䠨
BIN䡀䑒䗶䏤㮯䈻䘦䈷䈜䘴䑨䈦
BINSummaryInformation
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account