Malicious
Malicious

85e20c76381141fc826f31caf0c6803c

MS Office Document
MD5: 85e20c76381141fc826f31caf0c6803c
Size: 860.16 KB
application/vnd.ms-office
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 85e20c76381141fc826f31caf0c6803c
Sha1 93030c0c4996d19601b850e621abe48a3ef49180
Sha256 34062e36d964c778b9aa61ecebd0f2e75961b2d771d30cd5b6ffa7d272c372fd
Sha384 3db3acde3745c4a20802927e5a09a9352a818c7430bf4b900bfd077faea8738af48061bea58a0abc061ea832fca12604
Sha512 9f6dccad97511891620dbdcddc5de6ad566763d1200aaa4fe6aec0725c3914fbe8b33fe5c2816a4fd566cd4577bbbd92a36f11370493406cffbd6960b8e47005
SSDeep 12288:iuUHf+Dmpodgii0berGdcd3w2UAjjZXy/ZpUUxvXfjpSe3wHv:W/+DmpwgiD69AlctEAQ3IeC
TLSH 8B0523842332C5BBD147033486BE55EF5A597D204F670E1D6A48FB883EBE6B8071B9B4
MainExeFile
ScriptFile
Root Entry
Malicious
䡀䌏䈯
Overlay_ebf698f9.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.data
.rdata
.sxdata
.bss
.idata
.CRT
.tls
.rsrc
4
Resources
RT_MANIFEST
ID:0001
ID:0
䡀䈖䌧䠤
䡀㬿䏲䐸䖱
䡀㽿䅤䈯䠶
䡀䈏䗤䕸䠨
䡀䓞䕪䇤䠨
䡀䕙䓲䕨䜷
䡀䌍䈵䗦䕲䠼
䡀䒌䓰䑲䑨䠷
䡀㼿䕷䑬㭪䗤䠤
䡀㼿䕷䑬㹪䒲䠯
䡀㿿䏤䇬䗤䒬䠱
䡀䖖㯬䏬㱨䖤䠫
䡀䘌䗶䐲䆊䌷䑲
䡀䄕䑸䋦䒌䇱䗬䒬䠱
䡀䇊䌰㾱㼒䔨䈸䆱䠨
䡀䈏䗤䕸㬨䐲䒳䈱䗱䠶
䡀䑒䗶䏤㾯㼒䔨䈸䆱䠨
䡀䇊䌰㮱䈻䘦䈷䈜䘴䑨䈦
䡀䇊䗹䛎䆨䗸㼨䔨䈸䆱䠨
䡀䑒䗶䏤㮯䈻䘦䈷䈜䘴䑨䈦
SummaryInformation
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 4 STICH kept: 1secondary ignored: 3
bin 3

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path ole:doc>bin>scr:vbs~T1059.005
Shape ole:doc>bin>scr:vbs
technique3 nodes
MainExeFile
ScriptFile
Root Entry
Malicious
䡀䌏䈯
Overlay_ebf698f9.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.data
.rdata
.sxdata
.bss
.idata
.CRT
.tls
.rsrc
4
Resources
RT_MANIFEST
ID:0001
ID:0
䡀䈖䌧䠤
䡀㬿䏲䐸䖱
䡀㽿䅤䈯䠶
䡀䈏䗤䕸䠨
䡀䓞䕪䇤䠨
䡀䕙䓲䕨䜷
䡀䌍䈵䗦䕲䠼
䡀䒌䓰䑲䑨䠷
䡀㼿䕷䑬㭪䗤䠤
䡀㼿䕷䑬㹪䒲䠯
䡀㿿䏤䇬䗤䒬䠱
䡀䖖㯬䏬㱨䖤䠫
䡀䘌䗶䐲䆊䌷䑲
䡀䄕䑸䋦䒌䇱䗬䒬䠱
䡀䇊䌰㾱㼒䔨䈸䆱䠨
䡀䈏䗤䕸㬨䐲䒳䈱䗱䠶
䡀䑒䗶䏤㾯㼒䔨䈸䆱䠨
䡀䇊䌰㮱䈻䘦䈷䈜䘴䑨䈦
䡀䇊䗹䛎䆨䗸㼨䔨䈸䆱䠨
䡀䑒䗶䏤㮯䈻䘦䈷䈜䘴䑨䈦
SummaryInformation
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙