Malicious
Malicious

997d3533aa9210c4091c19a25e3eef10

MS Excel Document
MD5: 997d3533aa9210c4091c19a25e3eef10
Size: 145.77 KB
application/vnd.ms-excel
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 997d3533aa9210c4091c19a25e3eef10
Sha1 d9788b9215a128f8c0090d011730bb97aecc9cd0
Sha256 4378723bbaa2ae5af38272974f1f5e2987ab05bbf52c0a64edd56f027be19bcd
Sha384 f4b2921bb5c9569032374f916b9edaae0a0d83812f37942084c2693acc7e28ec9c1937ee98675566ff301d7b1680a2f4
Sha512 75b4c37554d79382738ca601fe562445e2048c3d68001f136bfa15a9bc7b5decc7cd2d614065691352dd792bacf0b4895784b8e5f0b736300b1f9eadbe98a32d
SSDeep 3072:MERwd9zQq190bd+O3hnfd6ZclHy/8dalPr4BXHE3+v6uiOZ3ZGgToOqknO:ttg0b8OlgZAHNaZ0BU3+v6uFbFqknO
TLSH E7E312AEE93D5A07D5778831C5C8574AF926D2CC11A4B2390BC0872FB6CA0939F897D7
[Content_Types].xml
_rels
.rels
xl
workbook.xml
_rels
workbook.xml.rels
worksheets
sheet1.xml
sheet2.xml
theme
theme1.xml
styles.xml
sharedStrings.xml
vbaProject.bin
Root Entry
PROJECT
PROJECTwm
docProps
core.xml
app.xml
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 8 STICH kept: 3secondary ignored: 5
bin 1oox:metadata 1oox:style 1oox:theme 1xml 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
3 / 3
Path oox:xlsm>oox:vba~T1059.005
Shape oox:xlsm>oox:vba
technique2 nodes
Path oox:xlsm>ole:doc
Shape oox:xlsm>ole:doc
2 nodes
[Content_Types].xml
_rels
.rels
xl
workbook.xml
_rels
workbook.xml.rels
worksheets
sheet1.xml
sheet2.xml
theme
theme1.xml
styles.xml
sharedStrings.xml
vbaProject.bin
Root Entry
PROJECT
PROJECTwm
docProps
core.xml
app.xml

vbaDNA - VBA Stomping & Purging Stategy detection

Module Name
ThisWorkbook
Blacklist VBA
VBA Macro
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙