Malicious
Malicious

6550fc3346216b8cda870d4448e8076e

MS Excel Document
MD5: 6550fc3346216b8cda870d4448e8076e
Size: 2.2 MB
application/vnd.ms-excel
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 6550fc3346216b8cda870d4448e8076e
Sha1 02eec00f841f82f09f71ddc4b34e6e90e276c565
Sha256 55ca939df21d1486628a2801ea28d0b8e1eb63e624218dbb42348e36cbadfbfd
Sha384 bfa8a31bff6ce0cf815e4b647f2cab31b866f392fa44b71ad8f8c7d54c7715403215acc256af66ea7fb86d721548f4c8
Sha512 2dfd9020d0c2ad21ae8ed644e959a719128a14e0e5b2d049efcb7fe51d5e9aa2a3de90375f574ec81ad512a4ebb7f8001bf27a1d6f4a99f7f075fa37d88a036b
SSDeep 49152:1hQ9WTXmL4immucWAI+attvbQSmjgRn6kFAF+FRqwd3zohCRFf46cbT:DTXmci/ucNI+aDMv8q+XqwdMcRFfgbT
TLSH B8A53341AC227E13C10E0037899983AC5FF19D7C6360BEDF787A57DADCE61D52EA4898
[Content_Types].xml
_rels
.rels
xl
workbook.xml
_rels
workbook.xml.rels
worksheets
sheet1.xml
sheet2.xml
_rels
sheet1.xml.rels
theme
theme1.xml
styles.xml
sharedStrings.xml
vbaProject.bin
Root Entry
PROJECT
PROJECTwm
printerSettings
printerSettings1.bin
docProps
core.xml
app.xml
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
8 / 8
Path oox:xlsm~T1059.005>bin
Shape oox:xlsm>bin
technique2 nodes
Path oox:xlsm~T1059.005>ole:doc
Shape oox:xlsm>ole:doc
technique2 nodes
[Content_Types].xml
_rels
.rels
xl
workbook.xml
_rels
workbook.xml.rels
worksheets
sheet1.xml
sheet2.xml
_rels
sheet1.xml.rels
theme
theme1.xml
styles.xml
sharedStrings.xml
vbaProject.bin
Root Entry
PROJECT
PROJECTwm
printerSettings
printerSettings1.bin
docProps
core.xml
app.xml

vbaDNA - VBA Stomping & Purging Stategy detection

Module Name
ThisWorkbook
Blacklist VBA
VBA Macro
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙