Malicious
MS Office Document
MD5:
Size: 0 B
application/vnd.ms-office
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Microsoft Office Document
2 malicious · 25 files
OFF23366ac08fa76f237ba90b3373e6cf91T1027 · T1059.005
BINRoot Entry
BINCtls
BINCompObj
BINWorkbook
BINSummaryInformation
BINDocumentSummaryInformation
BIN_VBA_PROJECT_CUR
BINPROJECT
BINPROJECTwm
BINVBA
BINdir
BIN__SRP_0
BIN__SRP_1
BIN__SRP_2
BIN__SRP_3
BIN__SRP_4
BIN__SRP_5
VBSThisWorkbookT1027 · T1059.005
VBS[Stored VBA]
VBA[PCode]
VBS[Decompiled VBA]
VBSThisWorkbook.deobfuscated.vbsT1059.005
BIN_VBA_PROJECT
BINUserForm1
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 3
STICH kept: 2secondary ignored: 1
bin
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
ole:doc>ole:vba~T1027~T1059.005
Shape
ole:doc>ole:vba
technique2 nodes
Path
ole:doc>ole:vba
Shape
ole:doc>ole:vba
2 nodes