Suspicious
Suspect

270e9e153900db30a154432c2c1ac718

MS Office Document
MD5: 270e9e153900db30a154432c2c1ac718
Size: 1 MB
application/vnd.ms-office

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 270e9e153900db30a154432c2c1ac718
Sha1 5198b2dde70d424b2d04eb55867ede78e824e11b
Sha256 acc3c30b719a76092ce0fde7c73cd628909f72668e1b36294a7cacdbea4e5391
Sha384 a082ac5af670080c8265ed652915a22aafcd882ee8981c0ae815d3c8a849b818dc2bcfd0b2553a24af1b6779d6e5f601
Sha512 b39f163d992950a0625144b151684418fcf2c1812b52dcb1c8c89f6b34496b42ff3a3541f1a3fbeeb2a93f388be5bac6c44e430cd56bca69fce2e41b80d31bf8
SSDeep 24576:bfwI/uySsIFiLLflEBputK1zKRlKUsw3u6jnVaS0qbp:bfwIRxOo8xqljsAPjneqb
TLSH A4252328FEE09333D1B684349ACCCD9B125CED197B07816B31B9F30D29706B856EB599
270e9e153900db30a154432c2c1ac718
Root Entry
CompObj
Workbook
SummaryInformation
DocumentSummaryInformation
MBD00076C63
[Content_Types].xml
_rels
.rels
xl
_rels
workbook.xml.rels
workbook.xml
sharedStrings.xml
styles.xml
theme
theme1.xml
worksheets
_rels
sheet1.xml.rels
sheet1.xml
drawings
_rels
vmlDrawing1.vml.rels
vmlDrawing1.vml
media
image2.emf
image1.emf
embeddings
oleObject2.bin
Root Entry
Ole
CompObj
CONTENTS
Text (Preview)
#Stream obj 5 0
#Stream obj 10 0
#Stream obj 11 0
#Stream obj 15 0
#Stream obj 16 0
#Stream obj 17 0
oleObject1.bin
Root Entry
CONTENTS
Text (Preview)
#Stream obj 5 0
#Stream obj 7 0
#Stream obj 11 0
#Stream obj 15 0
#Stream obj 19 0
Structure
printerSettings
printerSettings1.bin
docProps
thumbnail.wmf
core.xml
app.xml
CompObj
MBD00076C64
Ole
_VBA_PROJECT_CUR
PROJECT
PROJECTwm
VBA
dir
_VBA_PROJECT
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 9 STICH kept: 1secondary ignored: 8
bin 4oox:metadata 1oox:style 1oox:theme 1xml 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path ole:doc>oox:xlsx>oox:media>ole:doc
Shape ole:doc>oox:xlsx>oox:media>ole:doc
4 nodes
Name Value
Version
1.7
CreationDate
D:20250908110839
Creator
PDFium
Producer
PDFium
/CreationDate
D:20250908110839
/Creator
PDFium
/Producer
PDFium
Version
1.7
CreationDate
D:20250908111410
Creator
PDFium
Producer
PDFium
/CreationDate
D:20250908111410
/Creator
PDFium
/Producer
PDFium
270e9e153900db30a154432c2c1ac718
Root Entry
CompObj
Workbook
SummaryInformation
DocumentSummaryInformation
MBD00076C63
[Content_Types].xml
_rels
.rels
xl
_rels
workbook.xml.rels
workbook.xml
sharedStrings.xml
styles.xml
theme
theme1.xml
worksheets
_rels
sheet1.xml.rels
sheet1.xml
drawings
_rels
vmlDrawing1.vml.rels
vmlDrawing1.vml
media
image2.emf
image1.emf
embeddings
oleObject2.bin
Root Entry
Ole
CompObj
CONTENTS
Text (Preview)
#Stream obj 5 0
#Stream obj 10 0
#Stream obj 11 0
#Stream obj 15 0
#Stream obj 16 0
#Stream obj 17 0
oleObject1.bin
Root Entry
CONTENTS
Text (Preview)
#Stream obj 5 0
#Stream obj 7 0
#Stream obj 11 0
#Stream obj 15 0
#Stream obj 19 0
Structure
printerSettings
printerSettings1.bin
docProps
thumbnail.wmf
core.xml
app.xml
CompObj
MBD00076C64
Ole
_VBA_PROJECT_CUR
PROJECT
PROJECTwm
VBA
dir
_VBA_PROJECT
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙