Suspicious
Suspect

274d8340ce67e52560a7133de5aaeccd

MS Excel Document
MD5: 274d8340ce67e52560a7133de5aaeccd
Size: 2.53 MB
application/vnd.ms-excel

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 274d8340ce67e52560a7133de5aaeccd
Sha1 73be6f870c7f7c0f014ba873ff049b1bfd718300
Sha256 757c0e2b0249cffd1afac3d1a69c81141ad060d04a38d51876cda074f9c46751
Sha384 ea1ced00469a031d7c9caf7666e76c93023509c1f0b7023f2941c6962c9fa113381c521d8b581f384e8db6808cfce910
Sha512 2952d2b3c9ce9de32259f5dd4edeec1850d47748967f2db03e18f62c9d49a5e271458142d86dd75ac0e70c2b5c107bf5432518af95382faf1b0caff6375a737a
SSDeep 49152:EOc2yD4lTPDIYnH0YfzHzxJUAsmqncnphVCAzBjvgg:EoyEFPDIYH08K7mtBgg
TLSH D2C502BB94B2A8576A504667EB4F2C1E339B29D13B64D341E901909C7F3B1D38E92733
274d8340ce67e52560a7133de5aaeccd
[Content_Types].xml
_rels
.rels
xl
_rels
workbook.xml.rels
workbook.xml
sharedStrings.xml
theme
theme1.xml
styles.xml
worksheets
sheet1.xml
_rels
sheet1.xml.rels
drawings
vmlDrawing1.vml
embeddings
Root Entry
k02
OlE10naTIVe
docProps
core.xml
app.xml
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 7 STICH kept: 1secondary ignored: 6
bin 2oox:metadata 1oox:style 1oox:theme 1xml 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path oox:xlsx>oox:media>ole:doc
Shape oox:xlsx>oox:media>ole:doc
3 nodes
274d8340ce67e52560a7133de5aaeccd
[Content_Types].xml
_rels
.rels
xl
_rels
workbook.xml.rels
workbook.xml
sharedStrings.xml
theme
theme1.xml
styles.xml
worksheets
sheet1.xml
_rels
sheet1.xml.rels
drawings
vmlDrawing1.vml
embeddings
Root Entry
k02
OlE10naTIVe
docProps
core.xml
app.xml
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙