Suspicious
Suspect

2efb5e9fa018fad5bf23d1ffdce679cc

MS Office Document
MD5: 2efb5e9fa018fad5bf23d1ffdce679cc
Size: 998.91 KB
application/vnd.ms-office

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 2efb5e9fa018fad5bf23d1ffdce679cc
Sha1 d9fc9e38fda83fc9e5251c08f2fb2ba70d8cfac4
Sha256 db003e402d882001c2cecc9a71c718ace2c4a6d61fe8e2915af73ebbc70d5d3b
Sha384 0d1622ecf2b4a1b0542647526d470df3373b0336c73faa779f1b3c3aa2843ee7507da316990b4db2f10d55cdfd00e8b0
Sha512 e879ec1e31e1500bd6e1da22f5d7fa8342e08fd5d90f9a9b8cf812d7b1ed709c30258a46d24bae04c1feb43fa6b86426c754c843a45eea796b4b59fa00731352
SSDeep 12288:/GfwI82f2Q7TezN4ee+KahN0QwKF2UElH7k1kyaNsUrS/WVQl6QsuQmdGc1iCLKe:ufwI/uweR4eNK1QwKFgEmQs3sGc1ibr
TLSH 4B252315F6EEE722E17642390CA9D44E5B9EFE58B73EA10B31A4330C2675B3E314E425
2efb5e9fa018fad5bf23d1ffdce679cc
Root Entry
CompObj
Workbook
SummaryInformation
DocumentSummaryInformation
MBD00113328
[Content_Types].xml
_rels
.rels
xl
_rels
workbook.xml.rels
workbook.xml
sharedStrings.xml
styles.xml
theme
theme1.xml
worksheets
_rels
sheet1.xml.rels
sheet1.xml
drawings
_rels
vmlDrawing1.vml.rels
vmlDrawing1.vml
media
image2.emf
image1.emf
embeddings
oleObject2.bin
Root Entry
Ole
CompObj
CONTENTS
Text (Preview)
#Stream obj 5 0
#Stream obj 10 0
#Stream obj 11 0
#Stream obj 15 0
#Stream obj 16 0
#Stream obj 17 0
oleObject1.bin
Root Entry
CONTENTS
Text (Preview)
#Stream obj 5 0
#Stream obj 7 0
#Stream obj 11 0
#Stream obj 15 0
#Stream obj 19 0
Structure
printerSettings
printerSettings1.bin
docProps
thumbnail.wmf
core.xml
app.xml
CompObj
MBD00113329
Ole
_VBA_PROJECT_CUR
PROJECT
PROJECTwm
VBA
dir
_VBA_PROJECT
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 9 STICH kept: 1secondary ignored: 8
bin 4oox:metadata 1oox:style 1oox:theme 1xml 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path ole:doc>oox:xlsx>oox:media>ole:doc
Shape ole:doc>oox:xlsx>oox:media>ole:doc
4 nodes
Name Value
Version
1.7
CreationDate
D:20250908110839
Creator
PDFium
Producer
PDFium
/CreationDate
D:20250908110839
/Creator
PDFium
/Producer
PDFium
Version
1.7
CreationDate
D:20250908111410
Creator
PDFium
Producer
PDFium
/CreationDate
D:20250908111410
/Creator
PDFium
/Producer
PDFium
2efb5e9fa018fad5bf23d1ffdce679cc
Root Entry
CompObj
Workbook
SummaryInformation
DocumentSummaryInformation
MBD00113328
[Content_Types].xml
_rels
.rels
xl
_rels
workbook.xml.rels
workbook.xml
sharedStrings.xml
styles.xml
theme
theme1.xml
worksheets
_rels
sheet1.xml.rels
sheet1.xml
drawings
_rels
vmlDrawing1.vml.rels
vmlDrawing1.vml
media
image2.emf
image1.emf
embeddings
oleObject2.bin
Root Entry
Ole
CompObj
CONTENTS
Text (Preview)
#Stream obj 5 0
#Stream obj 10 0
#Stream obj 11 0
#Stream obj 15 0
#Stream obj 16 0
#Stream obj 17 0
oleObject1.bin
Root Entry
CONTENTS
Text (Preview)
#Stream obj 5 0
#Stream obj 7 0
#Stream obj 11 0
#Stream obj 15 0
#Stream obj 19 0
Structure
printerSettings
printerSettings1.bin
docProps
thumbnail.wmf
core.xml
app.xml
CompObj
MBD00113329
Ole
_VBA_PROJECT_CUR
PROJECT
PROJECTwm
VBA
dir
_VBA_PROJECT
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙