Malicious
Malicious

7487e6f937ee305f24ec76a6b17475b9

Share on LinkedIn
Print
MS Office Document
MD5: 7487e6f937ee305f24ec76a6b17475b9
Size: 69.63 KB
application/vnd.ms-office
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 7487e6f937ee305f24ec76a6b17475b9
Sha1 f0f9f6f139984e28176f5170a46bce663746ad30
Sha256 b05b21709350713ed40ed52381c7d2ff164de159e95f9c1d46ecf1b6cbd67671
Sha384 e4a1565f8c18e2277772f766e05eadaaaff5814147d88afe0c73889b67a05298820081cf6ed27639352486ec38f8923a
Sha512 431ad661e269c866425d422047c97e5f876df3537727694d45ef90dc340d63e438cc83b2f4d95e163cdb229675659d7bd71328c6d0837d7d9c1846baff0ac03a
SSDeep 768:LTWBPjwi8U0/0zqKu7eijdVanH+aMBl8lxxoVvq+RC7v/F6UYzvpS8kzyFm+y6JE:fWsi8LV7eijlcxx6vALY7IyJyufmNH
TLSH 1D63E024B341D02AC16ADD3E8CC5C2DB1B44FC52AE53CA0B71C4B75F187E9939727A6A
Root Entry
CompObj
Workbook
SummaryInformation
DocumentSummaryInformation
MBD01829828
[Content_Types].xml
_rels
.rels
xl
_rels
workbook.xml.rels
workbook.xml
sharedStrings.xml
worksheets
_rels
sheet1.xml.rels
sheet1.xml
theme
theme1.xml
styles.xml
drawings
drawing1.xml
printerSettings
printerSettings1.bin
docProps
thumbnail.wmf
core.xml
app.xml
CompObj
MBD01829829
Ole
_VBA_PROJECT_CUR
PROJECT
PROJECTwm
VBA
dir
_VBA_PROJECT
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
6 / 6
Path ole:doc~T1204~T1221>oox:xlsx>bin
Shape ole:doc>oox:xlsx>bin
malicious 3 nodes
Path ole:doc~T1204~T1221>oox:xlsx>oox:metadata
Shape ole:doc>oox:xlsx>oox:metadata
malicious 3 nodes
Config. Field Value
URL distante (OLE moniker) #1 hTtP:/huhuhuhuhuhuhuhuhuhuhu
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with Essential
An error has occurred. This application may no longer respond until reloaded. Reload 🗙