Suspicious
Suspect

52236eede048d1330f753b46f6a0e321

MS Excel Document
MD5: 52236eede048d1330f753b46f6a0e321
Size: 609.04 KB
application/vnd.ms-excel

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 52236eede048d1330f753b46f6a0e321
Sha1 ceab1f575355237f7a9672f3442ee05ee9b5ac4b
Sha256 4bfbca35550abbba3013053ba1f5aab688e7b2a5ecbed4e8c207e42b609d6d17
Sha384 ed60331f2e0d9dac0c33092dbc0c0ac049e35630c7b0ecf6166390599be4a2d56099b02612028b0ab72af8e8f7d331b7
Sha512 0a8fbe82e2792b6f146266bc8f8ed49374e2cbdd252802faf3e919c19e9dc6a49ea1a0d9327c2719ab01b375a2dad8cb7f974e9baa65b0ded262189153354ffa
SSDeep 12288:OWW/2gkauhT6Rg3l/nv987ZMiRwzKlyiAOm+NbsXqbpwehLKcw443m:BgY4QNnvqarq1Nbs8wP3m
TLSH 1ED423D161A670EEF5C992B58B6D53256FB87A7C454D8B4B20A6EC14327F3201F32AC3
52236eede048d1330f753b46f6a0e321
[Content_Types].xml
_rels
.rels
xl
_rels
workbook.xml.rels
workbook.xml
styles.xml
theme
theme1.xml
worksheets
sheet1.xml
_rels
sheet1.xml.rels
drawings
vmlDrawing1.vml
embeddings
FbRAOz47J.nKloNUq
Root Entry
olE10NativE
M5rKUZ8jzB3oIppf
docProps
core.xml
app.xml
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 7 STICH kept: 1secondary ignored: 6
bin 2oox:metadata 1oox:style 1oox:theme 1xml 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path oox:xlsx>oox:media>ole:doc
Shape oox:xlsx>oox:media>ole:doc
3 nodes
52236eede048d1330f753b46f6a0e321
[Content_Types].xml
_rels
.rels
xl
_rels
workbook.xml.rels
workbook.xml
styles.xml
theme
theme1.xml
worksheets
sheet1.xml
_rels
sheet1.xml.rels
drawings
vmlDrawing1.vml
embeddings
FbRAOz47J.nKloNUq
Root Entry
olE10NativE
M5rKUZ8jzB3oIppf
docProps
core.xml
app.xml
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙