Suspect
9bc8bb5e30b11d75bda59b56d0d16ff0
MS Excel Document
MD5: 9bc8bb5e30b11d75bda59b56d0d16ff0
Size: 621.87 KB
application/vnd.ms-excel
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
File
Type
Microsoft Office Document
Size
621.87 KB · 621,871 B
Hashes
MD5
9bc8bb5e30b11d75bda59b56d0d16ff0
Sha1
dbe42e7867d07f6589897095f5825b3949a3d7cb
Sha256
fc20f73759b79a5432950d130ca3236babe3a019375b00c78cd3bf9c46d34609
Sha384
a6ff6367a808eaeb6519d137d13301473f81f6cb7db10a8997a92ad6d4001bf45619f06e8c88d9f46033de11274ebcab
Sha512
c9977e36785cfefa7d8c4c451c02ed9d38ea94530d72a587683acc07c52870aa4e223346488b8a2b9b6db4ba65a8e877e358ed85122b1f03d01a5291e2fea2ef
SSDeep
12288:rplRO53uKCNdqCEkgTrGBMndGNwRIgAhOC0rb4kjI4cC1HT9ObZ5CHsP:/w8fEVA8wNwRWT0rbVlBeZcMP
TLSH
24D4232AE212DEBBFF6FC037C8860761FE7D646057990604BADA450DB36EA21345491F
15 files
XLS9bc8bb5e30b11d75bda59b56d0d16ff0
XML[Content_Types].xml
BIN_rels
XML.rels
BINxl
BIN_rels
XMLworkbook.xml.rels
XMLworkbook.xml
XMLstyles.xml
BINtheme
XMLtheme1.xml
BINworksheets
XMLsheet1.xml
BIN_rels
XMLsheet1.xml.rels
BINdrawings
VMLvmlDrawing1.vml
BINembeddings
OFFAXPIpaWXg.aLR0xZ
BINRoot Entry
BINOLE10nATIVE
BINuapSuF5G67OnJGqttAQeJ2ecoiS0
BINdocProps
XMLcore.xml
XMLapp.xml
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 7
STICH kept: 1secondary ignored: 6
bin
2oox:metadata
1oox:style
1oox:theme
1xml
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
oox:xlsx>oox:media>ole:doc
Shape
oox:xlsx>oox:media>ole:doc
3 nodes
15 files
XLS9bc8bb5e30b11d75bda59b56d0d16ff0
XML[Content_Types].xml
BIN_rels
BINxl
BINdocProps
No malware configuration was found at this point.
You must be signed in to view YARA rules.