Malicious
MS Office Document
MD5: 9a5ce1d031f03ea65a98f8df8babfef4
Size: 30.21 KB
application/vnd.ms-office
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | 9a5ce1d031f03ea65a98f8df8babfef4 |
| Sha1 | c031e7ff21dd5894083d2a2a86907c057041b2d6 |
| Sha256 | 77f88b1e95a9eefb2526b6b48579700ddbf1b93a66bb6299542c05ee43d26bb3 |
| Sha384 | 02c7107c7f672f9466b0727053816c1b7010045313b2971b9b8a109c13f52b80cce880382560d6d7b2f2af0669d17ccf |
| Sha512 | 69b734bf3cd7ce004654243a9303bfa0b08329b17aec8bc0ad1fc09f69c471d3d78c498477fe4375a4bbce340c982f06e4b11d0602c6713023de248d510c4b53 |
| SSDeep | 768:ZKk3hOdsylKlgryzc4bNhZFGzE+cL2knAJDb3f5eH5RLH/:kk3hOdsylKlgryzc4bNhZFGzE+cL2knN |
| TLSH | EED24EA2B3D6D80AC95503394CE7C6E66726FC225FA7834B3289F71E1F71AC08943657 |
ThisWorkbook
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
4 / 4
Path
ole:doc~T1059.005>bin
Shape
ole:doc>bin
technique2 nodes
Path
ole:doc~T1059.005>ole:vba~T1059.005
Shape
ole:doc>ole:vba
technique2 nodes
URLs in VB Code - #1
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #1
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential