Malicious
2df794e2fd8a7e230ed7c1c4f22f3e76
MS Office Document
MD5: 2df794e2fd8a7e230ed7c1c4f22f3e76
Size: 373.25 KB
application/vnd.ms-office
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Microsoft Office Document
Size
373.25 KB · 373,248 B
First seen
2026-08-26 07:15 · 2 months ago
Last seen
2026-08-26 07:15 · 2 months ago
Last analysis
2026-08-26 07:20 · 2 months ago
Hashes
MD5
2df794e2fd8a7e230ed7c1c4f22f3e76
Sha1
809ea85fcfacf5bae5db84da28b5d3be5b07b3af
Sha256
1289888aeeb1185514df473a72dceb9d5651a95022f8abe66d767bad72f5462f
Sha384
5a4403f9a94bc7df45afadb7022c776b6bdeb23919cbee0be4b388a9369ac1b384ba4856ccc1448c9dca3a1bbcf97809
Sha512
f28569c9ffc971ccafd0014a527c68025773bc8477e371189b7a714e7bda31557c5d5402014dba071f17e8c9c95dc4953255ebd5fdb00fa33b68fb70918c9ef6
SSDeep
6144:ak3hbdlylKsgqopeJBWhZFVE+W2NdATZCn4zO2VkA8COimNCBaCqvoypPDy+nf7c:Qe4zDVH4gMoypG+jd+EOL
TLSH
14843786AFE2CA39CE95E1318CBD53903711DC045A6D938772C8F6397FFAA70E842194
3 malicious · 17 files
OFF2df794e2fd8a7e230ed7c1c4f22f3e76T1059.005
BINRoot Entry
BINCompObj
BINWorkbook
BINSummaryInformation
BINDocumentSummaryInformation
BIN_VBA_PROJECT_CUR
BINPROJECT
BINPROJECTwm
BINVBA
BINdir
BIN__SRP_0
BIN__SRP_1
BIN__SRP_2
BIN__SRP_3
VBAThisWorkbook
VBS[Stored VBA]T1059.005
VBA[PCode]
VBS[Decompiled VBA]T1059.005
BIN_VBA_PROJECT
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
3 / 3
Path
ole:doc~T1059.005>bin
Shape
ole:doc>bin
technique2 nodes
Path
ole:doc~T1059.005>ole:vba
Shape
ole:doc>ole:vba
technique2 nodes
3 malicious · 17 files
OFF2df794e2fd8a7e230ed7c1c4f22f3e76T1059.005
BINRoot Entry
BINCompObj
BINWorkbook
BINSummaryInformation
BINDocumentSummaryInformation
BIN_VBA_PROJECT_CUR
BINPROJECT
BINPROJECTwm
BINVBA
BINdir
BIN__SRP_0
BIN__SRP_1
BIN__SRP_2
BIN__SRP_3
VBAThisWorkbook
VBS[Stored VBA]T1059.005
VBA[PCode]
VBS[Decompiled VBA]T1059.005
BIN_VBA_PROJECT
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account