7487e6f937ee305f24ec76a6b17475b9

MS Office Document

MD5: 7487e6f937ee305f24ec76a6b17475b9

Size: 69.63 KB

application/vnd.ms-office

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

MD5	7487e6f937ee305f24ec76a6b17475b9
Sha1	f0f9f6f139984e28176f5170a46bce663746ad30
Sha256	b05b21709350713ed40ed52381c7d2ff164de159e95f9c1d46ecf1b6cbd67671
Sha384	e4a1565f8c18e2277772f766e05eadaaaff5814147d88afe0c73889b67a05298820081cf6ed27639352486ec38f8923a
Sha512	431ad661e269c866425d422047c97e5f876df3537727694d45ef90dc340d63e438cc83b2f4d95e163cdb229675659d7bd71328c6d0837d7d9c1846baff0ac03a
SSDeep	768:LTWBPjwi8U0/0zqKu7eijdVanH+aMBl8lxxoVvq+RC7v/F6UYzvpS8kzyFm+y6JE:fWsi8LV7eijlcxx6vALY7IyJyufmNH
TLSH	1D63E024B341D02AC16ADD3E8CC5C2DB1B44FC52AE53CA0B71C4B75F187E9939727A6A

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

6 / 6

Path ole:doc~T1204~T1221>oox:xlsx>bin

Shape ole:doc>oox:xlsx>bin

malicious 3 nodes

Path ole:doc~T1204~T1221>oox:xlsx>oox:metadata

Shape ole:doc>oox:xlsx>oox:metadata

malicious 3 nodes

Config. Field	Value
URL distante (OLE moniker) #1	hTtP:/huhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
URL distante (OLE moniker) #1	hTtP:/huhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

You must be signed in to view YARA rules.