Malicious
MS Office Document
MD5: 814ea85c51a57a897530288e66517d00
Size: 20.33 MB
application/vnd.ms-office
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | 814ea85c51a57a897530288e66517d00 |
| Sha1 | 39d7bc841c4c98c9972ba2d1985cd26fbbe14100 |
| Sha256 | 78f520a5c0eef1d087d0ca33624f4b06861fa23baa95a1cb343e9a88bb397b27 |
| Sha384 | 9fdd49ad1096979687dc2861da3c0ddf81a76dc55d77efa698ea2054f43cb2b890015cf6104f94de009cef2626e9817d |
| Sha512 | c9ff7004e61fc26c9675fca8e42028e4ed381a66e7cc99e27835acf37a35162fd6ce1a176fe6d5e0219d9e90ef06bfd63417fc371ab697fef73fcee0aab1d4a6 |
| SSDeep | 393216:b/0Nmd9kUSvglvSv87upG4GCAKUdKCu3et1xGYkvyliU:bnkUR606FA7dFIeJAU |
| TLSH | EF2733A628232E83CA5466BB23831342BF310DB37B1187512D79F92D1C7E1F95B5939B |
Malicious
Malicious
Malicious
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 14
STICH kept: 6secondary ignored: 8
bin
5img
3Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
6 / 6
Path
ole:doc>bin>scr:ps1~T1027~T1059.001
Shape
ole:doc>bin>scr:ps1
malicious
3 nodes
Path
ole:doc>bin>scr:vbs~T1059.005
Shape
ole:doc>bin>scr:vbs
technique3 nodes
Deobfuscated PowerShell
UNKNWOWNmalicious
Start-huhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
-argumhuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
-argumhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential