Malicious
Malicious

5ddc4dfcdc82f6378239541c0517cbff

Share on LinkedIn
Print
MS Office Document
MD5: 5ddc4dfcdc82f6378239541c0517cbff
Size: 405.5 KB
application/vnd.ms-office
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
Microsoft Office Document
Size
405.5 KB · 405,504 B
First seen
2026-08-26 17:45 · 2 months ago
Last seen
2026-08-26 17:45 · 2 months ago
Last analysis
2026-09-02 11:01 · one month ago
Hashes
MD5 5ddc4dfcdc82f6378239541c0517cbff Sha1 d9455955be12e055a1cbd587c99e742af8d55513 Sha256 b379d07ba81d4190490d9893b2d6d830ff594e042dce26053ef07794d0403787 Sha384 1431ee0eb4147ee0f29e4712b3562c245711583d4092a69f035ad79ff3e4388291749f2758e19a44340bf90520d10533 Sha512 5bfbdedbebe0c069a7637e3d0e8d9e8d709a31c63fa3daff4da2fa715f8a7197452aa5140be245cf3543bc00368941733b7d42b9270c0a3d44b6ca15040e5689 SSDeep 12288:1rRvSNZpuJfs9vOHvLLcV9wSGwhz136E:1r8Nyts9vOzgrGQzp TLSH 358402167A485373D18302725A2FA3D8CF399C8C4BF66112A65BF2EC1DB1E6062F74E5
2 malicious · 28 files
OFF5ddc4dfcdc82f6378239541c0517cbff
BINFile_1_hhc
BINRoot Entry
BIN䓊㬳䅤
BIN䡀䌏䈯
BIN䡀䈖䌧䠤
BIN䡀㬿䏲䐸䖱
BIN䡀㽿䅤䈯䠶
BIN䡀䈏䗤䕸䠨
BIN䡀䕙䓲䕨䜷
BIN䡀䌍䈵䗦䕲䠼
BIN䡀䒌䓰䑲䑨䠷
VBS䡀㼿䕷䑬㭪䗤䠤
VBS䡀㼿䕷䑬㭪䗤䠤.deobfuscated.vbs
BIN䡀㼿䕷䑬㹪䒲䠯
BIN䡀㿿䏤䇬䗤䒬䠱
BIN䡀䘌䗶䐲䆊䌷䑲
BIN䡀䈏䗤䕸㬨䐲䒳䈱䗱䠶
BIN䡀䑒䗶䏤㾯㼒䔨䈸䆱䠨
BIN䡀䑒䗶䏤㮯䈻䘦䈷䈜䘴䑨䈦
BINSummaryInformation
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 5 STICH kept: 1secondary ignored: 4
bin 4

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path ole:doc>scr:vbs~T1027~T1059.005
Shape ole:doc>scr:vbs
technique2 nodes
An error has occurred. This application may no longer respond until reloaded. Reload 🗙