Malicious
Malicious

8322869079dc5ec4cdb8e2e60adf8f5f

Share on LinkedIn
Print
MS Office Document
MD5: 8322869079dc5ec4cdb8e2e60adf8f5f
Size: 290.82 KB
application/vnd.ms-office
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 8322869079dc5ec4cdb8e2e60adf8f5f
Sha1 8c59121836bfb6f1864b68f78b2402652b5c13bb
Sha256 5b25ac29bc0dd944a14a2884b9b288b092d5e3652ba8d96f76e0cede74978c02
Sha384 8672ed1b7cd2f377ac5070c9aa2c7dc7610e2c819cad020c87a9273a882b3f7a52efe5beb9ac34f95bb5df37e4661b09
Sha512 373a7e372200876ff39997d849882d502d308ca46425634d2449d0095b9beb884f2992f3737d94890f4ff6b1af4ac39f58e941854af84ee2f643f6e1e7780a20
SSDeep 6144:OHsKKhxn6Pi0KP/9h2tFit9dlKdDgOYOVZZdI:OM/kPiH/9Yat9dXzOVZZdI
TLSH 9854F010FB21C673F451583479D492871265EDABB945CC1A22C2770F2B7BFB88E72D2A
Root Entry
CompObj
Workbook
SummaryInformation
DocumentSummaryInformation
MBD00094F83
[Content_Types].xml
_rels
.rels
xl
_rels
workbook.xml.rels
workbook.xml
sharedStrings.xml
drawings
_rels
vmlDrawing1.vml.rels
vmlDrawing1.vml
drawing1.xml
worksheets
_rels
sheet1.xml.rels
sheet1.xml
theme
theme1.xml
styles.xml
media
image1.emf
embeddings
oleObject1.bin
Root Entry
Ole
CompObj
CONTENTS
#Stream obj 6 0
#Stream obj 5 0
#Stream obj 5 0-preview.png
#Stream obj 10 0
#Stream obj 13 0
#Stream obj 16 0
#Stream obj 19 0
#Stream obj 22 0
#Stream obj 25 0
#Stream obj 28 0
#Stream obj 31 0
#Stream obj 34 0
#Stream obj 37 0
#Stream obj 41 0
#Stream obj 44 0
#Stream obj 47 0
#Stream obj 50 0
#Stream obj 53 0
#Stream obj 56 0
#Stream obj 59 0
#Stream obj 62 0
#Stream obj 65 0
#Stream obj 68 0
#Stream obj 72 0
#Stream obj 75 0
#Stream obj 78 0
#Stream obj 81 0
#Stream obj 84 0
#Stream obj 87 0
#Stream obj 90 0
#Stream obj 93 0
#Stream obj 96 0
#Stream obj 99 0
#Stream obj 103 0
#Stream obj 106 0
#Stream obj 109 0
Structure
printerSettings
printerSettings1.bin
docProps
core.xml
app.xml
CompObj
MBD00094F84
Ole
_VBA_PROJECT_CUR
PROJECT
PROJECTwm
VBA
dir
_VBA_PROJECT
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
10 / 10
Path ole:doc~T1204~T1221>oox:xlsx>oox:media>pdf>pdf:stream>bin
Shape ole:doc>oox:xlsx>oox:media>pdf>pdf:stream>bin
malicious 6 nodes
Path ole:doc~T1204~T1221>oox:xlsx>oox:media>pdf>pdf:stream>img
Shape ole:doc>oox:xlsx>oox:media>pdf>pdf:stream>img
malicious 6 nodes
Config. Field Value
URL distante (OLE moniker) #1 HtTp:/huhuhuhuhuhuhuhuhuhuhu
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with Essential
Name Value
Version
1.5
CreationDate
D:20261013113000Z
Creator
JasperReports Library version 6.20.0-2bc7ab61c56f459e8176eb05c7705e145cd400ad
ModifiedDate
D:20261013113000Z
Producer
iText 2.1.7 by 1T3XT
/ModDate
D:20261013113000Z
/Creator
JasperReports Library version 6.20.0-2bc7ab61c56f459e8176eb05c7705e145cd400ad
/CreationDate
D:20261013113000Z
/Producer
iText 2.1.7 by 1T3XT
An error has occurred. This application may no longer respond until reloaded. Reload 🗙