Malicious
Malicious

2df794e2fd8a7e230ed7c1c4f22f3e76

MS Office Document
MD5: 2df794e2fd8a7e230ed7c1c4f22f3e76
Size: 373.25 KB
application/vnd.ms-office
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 2df794e2fd8a7e230ed7c1c4f22f3e76
Sha1 809ea85fcfacf5bae5db84da28b5d3be5b07b3af
Sha256 1289888aeeb1185514df473a72dceb9d5651a95022f8abe66d767bad72f5462f
Sha384 5a4403f9a94bc7df45afadb7022c776b6bdeb23919cbee0be4b388a9369ac1b384ba4856ccc1448c9dca3a1bbcf97809
Sha512 f28569c9ffc971ccafd0014a527c68025773bc8477e371189b7a714e7bda31557c5d5402014dba071f17e8c9c95dc4953255ebd5fdb00fa33b68fb70918c9ef6
SSDeep 6144:ak3hbdlylKsgqopeJBWhZFVE+W2NdATZCn4zO2VkA8COimNCBaCqvoypPDy+nf7c:Qe4zDVH4gMoypG+jd+EOL
TLSH 14843786AFE2CA39CE95E1318CBD53903711DC045A6D938772C8F6397FFAA70E842194
Root Entry
CompObj
Workbook
SummaryInformation
DocumentSummaryInformation
_VBA_PROJECT_CUR
PROJECT
PROJECTwm
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
3 / 3
Path ole:doc~T1059.005>bin
Shape ole:doc>bin
technique2 nodes
Path ole:doc~T1059.005>ole:vba
Shape ole:doc>ole:vba
technique2 nodes
Root Entry
CompObj
Workbook
SummaryInformation
DocumentSummaryInformation
_VBA_PROJECT_CUR
PROJECT
PROJECTwm

vbaDNA - VBA Stomping & Purging Stategy detection

Module Name
ThisWorkbook
Blacklist VBA
VBA Macro
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙