Malicious
9a5ce1d031f03ea65a98f8df8babfef4
MS Office Document
MD5: 9a5ce1d031f03ea65a98f8df8babfef4
Size: 30.21 KB
application/vnd.ms-office
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Microsoft Office Document
Size
30.21 KB · 30,208 B
First seen
2026-08-31 08:15 · one month ago
Last seen
2026-08-31 08:15 · one month ago
Last analysis
2026-08-31 08:15 · one month ago
Hashes
MD5
9a5ce1d031f03ea65a98f8df8babfef4
Sha1
c031e7ff21dd5894083d2a2a86907c057041b2d6
Sha256
77f88b1e95a9eefb2526b6b48579700ddbf1b93a66bb6299542c05ee43d26bb3
Sha384
02c7107c7f672f9466b0727053816c1b7010045313b2971b9b8a109c13f52b80cce880382560d6d7b2f2af0669d17ccf
Sha512
69b734bf3cd7ce004654243a9303bfa0b08329b17aec8bc0ad1fc09f69c471d3d78c498477fe4375a4bbce340c982f06e4b11d0602c6713023de248d510c4b53
SSDeep
768:ZKk3hOdsylKlgryzc4bNhZFGzE+cL2knAJDb3f5eH5RLH/:kk3hOdsylKlgryzc4bNhZFGzE+cL2knN
TLSH
EED24EA2B3D6D80AC95503394CE7C6E66726FC225FA7834B3289F71E1F71AC08943657
5 malicious · 17 files
OFF9a5ce1d031f03ea65a98f8df8babfef4T1059.005
BINRoot Entry
BINCompObj
BINWorkbook
BINSummaryInformation
BINDocumentSummaryInformation
BIN_VBA_PROJECT_CUR
BINPROJECT
BINPROJECTwm
BINVBA
BINdir
VBAModule1
VBS[Stored VBA]T1059.005
VBA[PCode]
VBS[Decompiled VBA]T1059.005
VBAThisWorkbook
VBS[Stored VBA]T1059.005
VBA[PCode]
VBS[Decompiled VBA]T1059.005
VBS_VBA_PROJECT
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
4 / 4
Path
ole:doc~T1059.005>bin
Shape
ole:doc>bin
technique2 nodes
Path
ole:doc~T1059.005>ole:vba~T1059.005
Shape
ole:doc>ole:vba
technique2 nodes
URLs in VB Code - #1
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential5 malicious · 17 files
OFF9a5ce1d031f03ea65a98f8df8babfef4T1059.005
BINRoot Entry
BINCompObj
BINWorkbook
BINSummaryInformation
BINDocumentSummaryInformation
BIN_VBA_PROJECT_CUR
BINPROJECT
BINPROJECTwm
BINVBA
BINdir
VBAModule1
VBS[Stored VBA]T1059.005
VBA[PCode]
VBS[Decompiled VBA]T1059.005
VBAThisWorkbook
VBS[Stored VBA]T1059.005
VBA[PCode]
VBS[Decompiled VBA]T1059.005
VBS_VBA_PROJECT
No malware configuration was found at this point.
URLs in VB Code - #1
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
9a5ce1d031f03ea65a98f8df8babfef4 › Root Entry › _VBA_PROJECT_CUR › VBA › Module1 › [Stored VBA]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account