Suspicious
Suspect

80e9ca77acf0a4b6b7855ec611ffcdc9

MS Office Document
MD5: 80e9ca77acf0a4b6b7855ec611ffcdc9
Size: 989.18 KB
application/vnd.ms-office

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 80e9ca77acf0a4b6b7855ec611ffcdc9
Sha1 853af125603bb663c9470a1acc9f87009de1a26d
Sha256 be29fd39faecf5fa2e62bd4857390a93ef52ff90e70813cf6a0654f1991a09d2
Sha384 a0660b00c9be51ff6fa4bcb4b03b6d2521459cea7c4ce13c6bee73d25fbf33e7e3dd4b8e553b9badd837f71a14b4eaed
Sha512 27b7511d9f69d042c3472917a4924762b332474e4a0fe1d5b50891ed69e679f5fa46efba42e81b2aaed6592dcd3bbc3e517dbbba3153b66d8d2c5130ad5c72ed
SSDeep 12288:2GfwI82f2XfjTezN4ee+KahN0QwKF2UElH7k1kyaNsUrS/rb6nz/n2hSFCQIb:vfwI/uveR4eNK1QwKFgEjbCz/agCj
TLSH 462523177AFEE713E1B793348A22941D86DDDE5C772A814732A87105127DB3F228F928
80e9ca77acf0a4b6b7855ec611ffcdc9
Root Entry
CompObj
Workbook
SummaryInformation
DocumentSummaryInformation
MBD00126AA7
[Content_Types].xml
_rels
.rels
xl
_rels
workbook.xml.rels
workbook.xml
sharedStrings.xml
styles.xml
theme
theme1.xml
worksheets
_rels
sheet1.xml.rels
sheet1.xml
drawings
_rels
vmlDrawing1.vml.rels
vmlDrawing1.vml
media
image2.emf
image1.emf
embeddings
oleObject2.bin
Root Entry
Ole
CompObj
CONTENTS
Text (Preview)
#Stream obj 5 0
#Stream obj 10 0
#Stream obj 11 0
#Stream obj 15 0
#Stream obj 16 0
#Stream obj 17 0
oleObject1.bin
Root Entry
CONTENTS
Text (Preview)
#Stream obj 5 0
#Stream obj 7 0
#Stream obj 11 0
#Stream obj 15 0
#Stream obj 19 0
Structure
printerSettings
printerSettings1.bin
docProps
thumbnail.wmf
core.xml
app.xml
CompObj
MBD009B2E5E
Ole
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 9 STICH kept: 1secondary ignored: 8
bin 4oox:metadata 1oox:style 1oox:theme 1xml 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path ole:doc>oox:xlsx>oox:media>ole:doc
Shape ole:doc>oox:xlsx>oox:media>ole:doc
4 nodes
Name Value
Version
1.7
CreationDate
D:20250908110839
Creator
PDFium
Producer
PDFium
/CreationDate
D:20250908110839
/Creator
PDFium
/Producer
PDFium
Version
1.7
CreationDate
D:20250908111410
Creator
PDFium
Producer
PDFium
/CreationDate
D:20250908111410
/Creator
PDFium
/Producer
PDFium
80e9ca77acf0a4b6b7855ec611ffcdc9
Root Entry
CompObj
Workbook
SummaryInformation
DocumentSummaryInformation
MBD00126AA7
[Content_Types].xml
_rels
.rels
xl
_rels
workbook.xml.rels
workbook.xml
sharedStrings.xml
styles.xml
theme
theme1.xml
worksheets
_rels
sheet1.xml.rels
sheet1.xml
drawings
_rels
vmlDrawing1.vml.rels
vmlDrawing1.vml
media
image2.emf
image1.emf
embeddings
oleObject2.bin
Root Entry
Ole
CompObj
CONTENTS
Text (Preview)
#Stream obj 5 0
#Stream obj 10 0
#Stream obj 11 0
#Stream obj 15 0
#Stream obj 16 0
#Stream obj 17 0
oleObject1.bin
Root Entry
CONTENTS
Text (Preview)
#Stream obj 5 0
#Stream obj 7 0
#Stream obj 11 0
#Stream obj 15 0
#Stream obj 19 0
Structure
printerSettings
printerSettings1.bin
docProps
thumbnail.wmf
core.xml
app.xml
CompObj
MBD009B2E5E
Ole
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙