Malicious
3c136f72cfc2006f5e9c0f652347e520
MS Office Document
MD5: 3c136f72cfc2006f5e9c0f652347e520
Size: 507.9 KB
application/vnd.ms-office
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Microsoft Office Document
Size
507.9 KB · 507,904 B
First seen
2026-08-26 17:45 · 2 months ago
Last seen
2026-08-26 17:45 · 2 months ago
Last analysis
2026-09-02 11:01 · one month ago
Hashes
MD5
3c136f72cfc2006f5e9c0f652347e520
Sha1
9588afe462fa011f2c428e4af83da5d8c1fdec3f
Sha256
e9f2f42ea3611096879f4152a7d78bb3a78a4dbead1c3b7e366dce485207551f
Sha384
8570be57a0899129e90fd756145ff8c33b5148739f181e863b415e7ec45bec2fbbb2e4a044e4f013d00a7af12b553969
Sha512
36ef109cd27f640f70ac30d7a218e0c7b610fffbbbbea052dc4da7743870b7a9ac25bdb978964b780b2717e108bf24ec45858917043b91b8907267769866acb7
SSDeep
12288:hVRsGEHP1Ifk7FM2RwwkXdC0UDPEVOlDcZtYUV00NqozOT:hVwvSs7FM2RwbCBHD9oBqoaT
TLSH
0BB41221BA858373C5120373990FA3D00F699DAD0BB70283261DF59C1EB19B676F79E6
2 malicious · 27 files
OFF3c136f72cfc2006f5e9c0f652347e520T1027 · T1059.005
BINFile_1_hhc
EXEFile_2_hhc_exe
Structure
P7B[Authenticode]_40598ab2.p7b
BINResources
BINRT_STRING
BINID:0007
BINID:1033
BINRT_VERSION
BINID:0001
BINID:1033
BINRT_MANIFEST
BINID:0001
BINID:1033
EXEFile_3_MSVCR110_dll
Structure
BINResources
BINRT_MANIFEST
BINID:0002
BINID:1033
BINRoot Entry
BIN䓊㬳䅤
BIN䡀䌏䈯
BIN䡀䈖䌧䠤
BIN䡀㬿䏲䐸䖱
BIN䡀㽿䅤䈯䠶
BIN䡀䈏䗤䕸䠨
BIN䡀䕙䓲䕨䜷
BIN䡀䌍䈵䗦䕲䠼
BIN䡀䒌䓰䑲䑨䠷
VBS䡀㼿䕷䑬㭪䗤䠤T1027 · T1059.005
VBS䡀㼿䕷䑬㭪䗤䠤.deobfuscated.vbsT1059.005
BIN䡀㼿䕷䑬㹪䒲䠯
BIN䡀㿿䏤䇬䗤䒬䠱
BIN䡀䘌䗶䐲䆊䌷䑲
BIN䡀䈏䗤䕸㬨䐲䒳䈱䗱䠶
BIN䡀䑒䗶䏤㾯㼒䔨䈸䆱䠨
BIN䡀䑒䗶䏤㮯䈻䘦䈷䈜䘴䑨䈦
BINSummaryInformation
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 5
STICH kept: 1secondary ignored: 4
bin
4Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
ole:doc>scr:vbs~T1027~T1059.005
Shape
ole:doc>scr:vbs
technique2 nodes
2 malicious · 27 files
OFF3c136f72cfc2006f5e9c0f652347e520T1027 · T1059.005
BINFile_1_hhc
EXEFile_2_hhc_exe
EXEFile_3_MSVCR110_dll
BINRoot Entry
BIN䓊㬳䅤
BIN䡀䌏䈯
BIN䡀䈖䌧䠤
BIN䡀㬿䏲䐸䖱
BIN䡀㽿䅤䈯䠶
BIN䡀䈏䗤䕸䠨
BIN䡀䕙䓲䕨䜷
BIN䡀䌍䈵䗦䕲䠼
BIN䡀䒌䓰䑲䑨䠷
VBS䡀㼿䕷䑬㭪䗤䠤T1027 · T1059.005
VBS䡀㼿䕷䑬㭪䗤䠤.deobfuscated.vbsT1059.005
BIN䡀㼿䕷䑬㹪䒲䠯
BIN䡀㿿䏤䇬䗤䒬䠱
BIN䡀䘌䗶䐲䆊䌷䑲
BIN䡀䈏䗤䕸㬨䐲䒳䈱䗱䠶
BIN䡀䑒䗶䏤㾯㼒䔨䈸䆱䠨
BIN䡀䑒䗶䏤㮯䈻䘦䈷䈜䘴䑨䈦
BINSummaryInformation
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account