Malicious
7b25cc80d06e510844e6e7986feda7d1
MS Office Document
MD5: 7b25cc80d06e510844e6e7986feda7d1
Size: 30.21 KB
application/vnd.ms-office
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Microsoft Office Document
Size
30.21 KB · 30,208 B
First seen
2026-08-31 08:15 · one month ago
Last seen
2026-08-31 08:15 · one month ago
Last analysis
2026-08-31 08:15 · one month ago
Hashes
MD5
7b25cc80d06e510844e6e7986feda7d1
Sha1
72030687232fb309f83c781b19940c143b63f080
Sha256
be592d36972e47ba32ba4a1cd82e2450249fd07e0752289c844e61c6dc568715
Sha384
27cd6caf497692471141227a0771bb02efad6a94d3c7df23f1c0252cd1c675c7ed84bb7ec7650ae3501c131fe0c07979
Sha512
1614520dea028fd0c81c74937c9d3c915340d790187faa62d9ac02bd848d4acc043ca06a5a13649e47f5d892e510ced4aeae99b0d6dd288648062c663d76f57e
SSDeep
768:UKk3hOdsylKlgryzc4bNhZFGzE+cL2knAJDTqfxetY5OzX:/k3hOdsylKlgryzc4bNhZFGzE+cL2knk
TLSH
5AD250A6B2C6DC0AC95503394DE7C6E66726FC225F67838B3289F31E1F71AC08913657
5 malicious · 17 files
OFF7b25cc80d06e510844e6e7986feda7d1T1059.005
BINRoot Entry
BINCompObj
BINWorkbook
BINSummaryInformation
BINDocumentSummaryInformation
BIN_VBA_PROJECT_CUR
BINPROJECT
BINPROJECTwm
BINVBA
BINdir
VBSModule1
VBS[Stored VBA]T1059.005
VBA[PCode]
VBS[Decompiled VBA]T1059.005
VBAThisWorkbook
VBS[Stored VBA]T1059.005
VBA[PCode]
VBS[Decompiled VBA]T1059.005
VBS_VBA_PROJECT
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
4 / 4
Path
ole:doc~T1059.005>bin
Shape
ole:doc>bin
technique2 nodes
Path
ole:doc~T1059.005>ole:vba~T1059.005
Shape
ole:doc>ole:vba
technique2 nodes
URLs in VB Code - #1
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential5 malicious · 17 files
OFF7b25cc80d06e510844e6e7986feda7d1T1059.005
BINRoot Entry
BINCompObj
BINWorkbook
BINSummaryInformation
BINDocumentSummaryInformation
BIN_VBA_PROJECT_CUR
BINPROJECT
BINPROJECTwm
BINVBA
BINdir
VBSModule1
VBS[Stored VBA]T1059.005
VBA[PCode]
VBS[Decompiled VBA]T1059.005
VBAThisWorkbook
VBS[Stored VBA]T1059.005
VBA[PCode]
VBS[Decompiled VBA]T1059.005
VBS_VBA_PROJECT
No malware configuration was found at this point.
URLs in VB Code - #1
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
7b25cc80d06e510844e6e7986feda7d1 › Root Entry › _VBA_PROJECT_CUR › VBA › Module1 › [Decompiled VBA]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account