Malicious
Malicious

66517819d6c332c0dc095fb77edc0f2f

Share on LinkedIn
Print
MS Word Document
MD5: 66517819d6c332c0dc095fb77edc0f2f
Size: 490.82 KB
application/msword
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 66517819d6c332c0dc095fb77edc0f2f
Sha1 f074cdb307d4a05a0701aa2009ee91785e6134a4
Sha256 2d8f5187a6208fbb269abfd072663d03adffec6c77a24a5c5af31ca52778089d
Sha384 f8a39af8143e18f393a2d175c1c88f407c3c790a8d724eb645b873997d887fcb70ea72464a8fb7ef15bdcedddedbc62a
Sha512 a97d5a4ae36373bcd5dae7438ce7d48856963084588467b1a1d2f812a5ba01d682a85703e50e6cb8f0d4fc3a8b04c54d19482954a5626ea26fb84a5036664cf7
SSDeep 6144:fAEzVzgSC6by/qv2a1ZjE+r+Dm3cjEbLMyoh7esXGG8kkDGQPIOAlxwHO3HPPhD:o4C6yCOa/4M+7jlyo4QSk8xIrSeP5
TLSH C4A4E119F6A61C7ADD7B8179C4030D02FB727C5146A0D66F07A08AE5DF1F7A0AB2E712
66517819d6c332c0dc095fb77edc0f2f
Malicious
[Content_Types].xml
_rels
.rels
word
Malicious
document.xml
_rels
document.xml.rels
vbaProject.bin.rels
vbaProject.bin
Malicious
Root Entry
Malicious
PROJECT
PROJECTwm
VBA
Malicious
dir
Module1

Module1

[Stored VBA]
Malicious
[PCode]
Module2
Malicious

Module2

Malicious
[Stored VBA]
Malicious
[PCode]
Malicious
[Decompiled VBA]
Malicious
[Full Diff]
Malicious
[Partial Diff]
Malicious
Module3

Module3

[Stored VBA]
Malicious
[PCode]
Module4

Module4

[Stored VBA]
Malicious
[PCode]
Module5

Module5

[Stored VBA]
Malicious
[PCode]
Module6

Module6

[Stored VBA]
Malicious
[PCode]
[Decompiled VBA]
Malicious
Module7
Malicious

Module7

Malicious
[Stored VBA]
Malicious
[PCode]
Malicious
[Decompiled VBA]
Malicious
[Full Diff]
Malicious
Module8

Module8

[Stored VBA]
Malicious
[PCode]
Module9

Module9

[Stored VBA]
Malicious
[PCode]
__SRP_0
__SRP_1
__SRP_2
__SRP_3
__SRP_4
__SRP_5
__SRP_6
__SRP_7
__SRP_8
__SRP_9
__SRP_c
__SRP_d
__SRP_e
__SRP_f
Module10
Malicious

Module10

Malicious
[Stored VBA]
Malicious
[PCode]
Malicious
[Decompiled VBA]
Malicious
[Full Diff]
Malicious
[Partial Diff]
Malicious
Module11
Malicious

Module11

Malicious
[Stored VBA]
Malicious
[PCode]
Malicious
[Decompiled VBA]
Malicious
[Full Diff]
Malicious
[Partial Diff]
Malicious
__SRP_10
__SRP_11
__SRP_12
__SRP_13
__SRP_14
__SRP_15
__SRP_16
__SRP_17
__SRP_18
__SRP_19
ThisDocument

ThisDocument

[Stored VBA]
Malicious
[PCode]
[Decompiled VBA]
Malicious
_VBA_PROJECT
media
image1.png
image1.png-preview.png
theme
theme1.xml
vbaData.xml
settings.xml
styles.xml
webSettings.xml
fontTable.xml
docProps
core.xml
app.xml
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
13 / 13
Path oox:docm~T1027~T1059.005~T1564.007>oox:media>img
Shape oox:docm>oox:media>img
malicious 3 nodes
Path oox:docm~T1027~T1059.005~T1564.007>bin
Shape oox:docm>bin
malicious 2 nodes
Trace COM ordonnée UNKNWOWNmalicious
line 6huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 4huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 4huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 4huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 4huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 4huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 4huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
An error has occurred. This application may no longer respond until reloaded. Reload 🗙