Malicious
Malicious

856350f27768a1ac3943efe5c73444a9

MS Excel Document
MD5: 856350f27768a1ac3943efe5c73444a9
Size: 2.23 MB
application/vnd.ms-excel
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 856350f27768a1ac3943efe5c73444a9
Sha1 4546e315040d85b5ff7097e274d790d9d2a1a354
Sha256 9b53181baa1988e0bb078c899a1abb149bc796347badabd9a7b687f4d1905aa1
Sha384 dfaf72740033c23e967081fe8cd56d0a63aeee5fe71a9c55b42dd13a43132e563708993f21e98e1f7f7ddee5922bd152
Sha512 1bbe2c3a73a86874cdeb22d47407d3bb1d9ce02f86bee00f26e1d40caad5791f16decd2ed494399fb2275b29a4ac4582af902596b0ba6fb64206f8e6c498b0ee
SSDeep 49152:DoE6NWkZqjWot3+/jrPV6EptAA6+z02WTMlS3/+kzfOvo/Xd00z2QIr+JsVI:0E6oUmp3IrPBAX2WTMkGkjOg/Xd0069A
TLSH 7AA53391ED334E22D01200B79DE1A10DBA1E2BB5F231F65F50F76E65E8821FBE8C5649
[Content_Types].xml
_rels
.rels
xl
workbook.xml
_rels
workbook.xml.rels
worksheets
sheet1.xml
sheet2.xml
theme
theme1.xml
styles.xml
sharedStrings.xml
vbaProject.bin
Root Entry
PROJECT
PROJECTwm
docProps
core.xml
app.xml
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
8 / 8
Path oox:xlsm~T1059.005>bin
Shape oox:xlsm>bin
technique2 nodes
Path oox:xlsm~T1059.005>ole:doc
Shape oox:xlsm>ole:doc
technique2 nodes
[Content_Types].xml
_rels
.rels
xl
workbook.xml
_rels
workbook.xml.rels
worksheets
sheet1.xml
sheet2.xml
theme
theme1.xml
styles.xml
sharedStrings.xml
vbaProject.bin
Root Entry
PROJECT
PROJECTwm
docProps
core.xml
app.xml

vbaDNA - VBA Stomping & Purging Stategy detection

Module Name
ThisWorkbook
Blacklist VBA
VBA Macro
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙