Malicious
Malicious

42a3722e04edd50317db1498b8576b4b

Share on LinkedIn
Print
MS Office Document
MD5: 42a3722e04edd50317db1498b8576b4b
Size: 802.82 KB
application/vnd.ms-office
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 42a3722e04edd50317db1498b8576b4b
Sha1 88e0b20e5b125e0e98b19c5236b56dd49d9ac3e5
Sha256 bd9473af26d1b51858979f97eb5ade588e959b8f8759d77cb14344606b3dbe9e
Sha384 5f13afee5362779f1bc5c944f7f863a136bf91143c043f7e2dc0f3edbb5a9e5ab0683e82a522a838ed3712d32b4bbf87
Sha512 bfa289fe1f96e9cb8886e985f620ab621cc849d089d258d234fb4b50b1594326392901d89ef3074ebac6fc4e75e3cfab6877ffaf0b39a439083f0d292e209304
SSDeep 12288:qNUHf+DmpodloEIZZTubamsvnKXC/WfmeDJ9x+j9fOQyFw4YpB3wNXcuwd/0OI:1/+DmpwKVv6p8nY9DBqcQCtYT3wwds
TLSH 240523147662E607E4950F35CB1F432B8BBF6DE38A17061CA6C1762D0C770284B9B9FA
Root Entry
Malicious
䡀䌏䈯
Overlay_ebf698f9.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.data
.rdata
.sxdata
.bss
.idata
.CRT
.tls
.rsrc
4
Resources
RT_MANIFEST
ID:0001
ID:0
䡀䈖䌧䠤
䡀㬿䏲䐸䖱
䡀㽿䅤䈯䠶
䡀䈏䗤䕸䠨
䡀䓞䕪䇤䠨
䡀䕙䓲䕨䜷
䡀䌍䈵䗦䕲䠼
䡀䒌䓰䑲䑨䠷
䡀㼿䕷䑬㭪䗤䠤
䡀㼿䕷䑬㹪䒲䠯
䡀㿿䏤䇬䗤䒬䠱
䡀䖖㯬䏬㱨䖤䠫
䡀䘌䗶䐲䆊䌷䑲
䡀䄕䑸䋦䒌䇱䗬䒬䠱
䡀䇊䌰㾱㼒䔨䈸䆱䠨
䡀䈏䗤䕸㬨䐲䒳䈱䗱䠶
䡀䑒䗶䏤㾯㼒䔨䈸䆱䠨
䡀䇊䌰㮱䈻䘦䈷䈜䘴䑨䈦
䡀䇊䗹䛎䆨䗸㼨䔨䈸䆱䠨
䡀䑒䗶䏤㮯䈻䘦䈷䈜䘴䑨䈦
SummaryInformation
MainExeFile
ScriptFile
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 4 STICH kept: 1secondary ignored: 3
bin 3

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path ole:doc>bin>scr:vbs~T1059.005
Shape ole:doc>bin>scr:vbs
technique3 nodes
An error has occurred. This application may no longer respond until reloaded. Reload 🗙