Suspect
a241c1546e96b3c507297ae6774d8cd1
MS Office Document
MD5: a241c1546e96b3c507297ae6774d8cd1
Size: 5.48 MB
application/vnd.ms-office
This sample is a 5.2 MB MS Office Document for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 722 embedded or derived files. It matches 7 YARA rules. Observed behaviours map to MITRE ATT&CK T1059.007. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- ee6e8977d1a6bcef6ce48592396ebec7e1acf7c7217ebe8649b940e5a6703d84
- MD5
- a241c1546e96b3c507297ae6774d8cd1
- Verdict
- Inconclusive
- File type
- MS Office Document · 5.2 MB
- MITRE ATT&CK
- T1059.007
Cite this report: https://app.malva.re/sha256/ee6e8977d1a6bcef6ce48592396ebec7e1acf7c7217ebe8649b940e5a6703d84
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Microsoft Office Document
Size
5.48 MB · 5,480,960 B
First seen
2026-10-01 19:45 · 29 days ago
Last seen
2026-10-01 19:45 · 29 days ago
Last analysis
2026-10-01 19:45 · 29 days ago
Hashes
MD5
a241c1546e96b3c507297ae6774d8cd1
Sha1
063029900d9e1474c6456cf60a34a3d760e22604
Sha256
ee6e8977d1a6bcef6ce48592396ebec7e1acf7c7217ebe8649b940e5a6703d84
Sha384
a844c95a4af4b9fb443460357396bc0d3f53b9a2b2dba2d72ab40f8ad7bebaad1b5506836f1a8900a580e1ade1a3f1b3
Sha512
70b58ed189b67ea413945137a3de5ec5a6cf0eb182fdaf8c2bdd50cd2564aeba7fc05de595527915bcaaf49666103d0b82e13d279b9dfef7afe71aa133927092
SSDeep
98304:YDz3IGvjINMpY5AlWV0BvACE5fyt5iwkZFxJI0rHpSNWm1uI7JrN/43jYMeUgWM4:Yz33jzFo0BvACNtqxJnpzm1uuZiY/IS
TLSH
884612223E9EC537D65E12B0192EDB9BA12E7E744B7284C763D8BD592C720C21376E43
723 files
OFFa241c1546e96b3c507297ae6774d8cd1T1059.007
BINtxt
PNGctypes32.png
EXEpython.exe
Structure
P7B[Authenticode]_d1e6ca40.p7b
BINResources
BINRT_ICON
BINID:0001
IMGID:1033
IMGID:1033-preview.png
BINID:0002
BINID:1033
BINID:0003
BINID:1033
BINID:0004
BINID:1033
BINID:0005
BINID:1033
BINID:0006
BINID:1033
BINID:0007
IMGID:1033
IMGID:1033-preview.png
BINID:0008
BINID:1033
BINID:0009
BINID:1033
BINID:000A
BINID:1033
BINID:000B
BINID:1033
BINID:000C
BINID:1033
BINRT_GROUP_CURSOR4
BINID:0001
BINID:1033
BINRT_VERSION
BINID:0001
BINID:1033
DLLpython3.dll
Structure
P7B[Authenticode]_e05dc79c.p7b
BINResources
BINRT_STRING
BINID:003F
BINID:1033
BINRT_VERSION
BINID:0001
BINID:1033
BINRT_MANIFEST
BINID:0002
BINID:1033
DLLpython37.dll
Structure
P7B[Authenticode]_186cb075.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
ZIPpython37.zip
PYCabc.pyc
PYCaifc.pyc
PYCantigravity.pyc
PYCargparse.pyc
PYCast.pyc
PYCasynchat.pyc
PYCasyncore.pyc
PYCbase64.pyc
PYCbdb.pyc
PYCbinhex.pyc
PYCbisect.pyc
PYCbz2.pyc
PYCcalendar.pyc
PYCcgi.pyc
PYCcgitb.pyc
PYCchunk.pyc
PYCcmd.pyc
PYCcode.pyc
PYCcodecs.pyc
PYCcodeop.pyc
PYCcolorsys.pyc
PYCcompileall.pyc
PYCconfigparser.pyc
PYCcontextlib.pyc
PYCcontextvars.pyc
PYCcopy.pyc
PYCcopyreg.pyc
PYCcProfile.pyc
PYCcrypt.pyc
PYCcsv.pyc
PYCdataclasses.pyc
PYCdatetime.pyc
PYCdecimal.pyc
PYCdifflib.pyc
PYCdis.pyc
PYCdoctest.pyc
PYCdummy_threading.pyc
PYCenum.pyc
PYCfilecmp.pyc
PYCfileinput.pyc
PYCfnmatch.pyc
PYCformatter.pyc
PYCfractions.pyc
PYCftplib.pyc
PYCfunctools.pyc
PYCgenericpath.pyc
PYCgetopt.pyc
PYCgetpass.pyc
PYCgettext.pyc
PYCglob.pyc
PYCgzip.pyc
PYChashlib.pyc
PYCheapq.pyc
PYChmac.pyc
PYCimaplib.pyc
PYCimghdr.pyc
PYCimp.pyc
PYCinspect.pyc
PYCio.pyc
PYCipaddress.pyc
PYCkeyword.pyc
PYClinecache.pyc
PYClocale.pyc
PYClzma.pyc
PYCmacpath.pyc
PYCmailbox.pyc
PYCmailcap.pyc
PYCmimetypes.pyc
PYCmodulefinder.pyc
PYCnetrc.pyc
PYCnntplib.pyc
PYCntpath.pyc
PYCnturl2path.pyc
PYCnumbers.pyc
PYCopcode.pyc
PYCoperator.pyc
PYCoptparse.pyc
PYCos.pyc
PYCpathlib.pyc
PYCpdb.pyc
PYCpickle.pyc
PYCpickletools.pyc
PYCpipes.pyc
PYCpkgutil.pyc
PYCplatform.pyc
PYCplistlib.pyc
PYCpoplib.pyc
PYCposixpath.pyc
PYCpprint.pyc
PYCprofile.pyc
PYCpstats.pyc
PYCpty.pyc
PYCpyclbr.pyc
PYCpydoc.pyc
PYCpy_compile.pyc
PYCqueue.pyc
PYCquopri.pyc
PYCrandom.pyc
PYCre.pyc
PYCreprlib.pyc
PYCrlcompleter.pyc
PYCrunpy.pyc
PYCsched.pyc
PYCsecrets.pyc
PYCselectors.pyc
PYCshelve.pyc
PYCshlex.pyc
PYCshutil.pyc
PYCsignal.pyc
PYCsite.pyc
PYCsmtpd.pyc
PYCsmtplib.pyc
PYCsndhdr.pyc
PYCsocket.pyc
PYCsocketserver.pyc
PYCsre_compile.pyc
PYCsre_constants.pyc
PYCsre_parse.pyc
PYCssl.pyc
PYCstat.pyc
PYCstatistics.pyc
PYCstring.pyc
PYCstringprep.pyc
PYCstruct.pyc
PYCsubprocess.pyc
PYCsunau.pyc
PYCsymbol.pyc
PYCsymtable.pyc
PYCsysconfig.pyc
PYCtabnanny.pyc
PYCtarfile.pyc
PYCtelnetlib.pyc
PYCtempfile.pyc
PYCtextwrap.pyc
PYCthis.pyc
PYCthreading.pyc
PYCtimeit.pyc
PYCtoken.pyc
PYCtokenize.pyc
PYCtrace.pyc
PYCtraceback.pyc
PYCtracemalloc.pyc
PYCtty.pyc
PYCtypes.pyc
PYCtyping.pyc
PYCuu.pyc
PYCuuid.pyc
PYCwarnings.pyc
PYCwave.pyc
PYCweakref.pyc
PYCwebbrowser.pyc
PYCxdrlib.pyc
PYCzipapp.pyc
PYCzipfile.pyc
PYC_bootlocale.pyc
PYC_collections_abc.pyc
PYC_compat_pickle.pyc
PYC_compression.pyc
PYC_dummy_thread.pyc
PYC_markupbase.pyc
PYC_osx_support.pyc
PYC_pydecimal.pyc
PYC_pyio.pyc
PYC_py_abc.pyc
PYC_sitebuiltins.pyc
PYC_strptime.pyc
PYC_threading_local.pyc
PYC_weakrefset.pyc
PYC__future__.pyc
PYC__phello__.foo.pyc
BINasyncio
VBSbase_events.pyc
PYCbase_futures.pyc
PYCbase_subprocess.pyc
PYCbase_tasks.pyc
PYCconstants.pyc
PYCcoroutines.pyc
PYCevents.pyc
PYCformat_helpers.pyc
PYCfutures.pyc
PYClocks.pyc
PYClog.pyc
PYCproactor_events.pyc
PYCprotocols.pyc
PYCqueues.pyc
PYCrunners.pyc
PYCselector_events.pyc
PYCsslproto.pyc
PYCstreams.pyc
PYCsubprocess.pyc
PYCtasks.pyc
PYCtransports.pyc
PYCunix_events.pyc
PYCwindows_events.pyc
PYCwindows_utils.pyc
PYC__init__.pyc
BINcollections
PYCabc.pyc
PYC__init__.pyc
BINconcurrent
PYC__init__.pyc
BINfutures
PYCprocess.pyc
PYCthread.pyc
PYC_base.pyc
PYC__init__.pyc
BINctypes
PYCutil.pyc
PYCwintypes.pyc
PYC_aix.pyc
PYC_endian.pyc
PYC__init__.pyc
BINmacholib
PYCdyld.pyc
PYCdylib.pyc
BINfetch_macholib
BATfetch_macholib.bat
PYCframework.pyc
BINREADME.ctypes
PYC__init__.pyc
BINcurses
PYCascii.pyc
PYChas_key.pyc
PYCpanel.pyc
PYCtextpad.pyc
PYC__init__.pyc
BINdbm
PYCdumb.pyc
PYCgnu.pyc
PYCndbm.pyc
PYC__init__.pyc
BINdistutils
PYCarchive_util.pyc
PYCbcppcompiler.pyc
PYCccompiler.pyc
PYCcmd.pyc
PYCconfig.pyc
PYCcore.pyc
PYCcygwinccompiler.pyc
PYCdebug.pyc
PYCdep_util.pyc
PYCdir_util.pyc
PYCdist.pyc
PYCerrors.pyc
PYCextension.pyc
PYCfancy_getopt.pyc
PYCfilelist.pyc
PYCfile_util.pyc
PYClog.pyc
PYCmsvc9compiler.pyc
PYCmsvccompiler.pyc
BINREADME
PYCspawn.pyc
PYCsysconfig.pyc
PYCtext_file.pyc
PYCunixccompiler.pyc
PYCutil.pyc
PYCversion.pyc
PYCversionpredicate.pyc
PYC_msvccompiler.pyc
PYC__init__.pyc
BINcommand
PYCbdist.pyc
PYCbdist_dumb.pyc
PYCbdist_msi.pyc
PYCbdist_rpm.pyc
PYCbuild.pyc
PYCbuild_clib.pyc
PYCbuild_ext.pyc
PYCbuild_py.pyc
PYCbuild_scripts.pyc
PYCcheck.pyc
PYCclean.pyc
BINcommand_template
PYCconfig.pyc
PYCinstall.pyc
PYCinstall_data.pyc
PYCinstall_egg_info.pyc
PYCinstall_headers.pyc
PYCinstall_lib.pyc
PYCinstall_scripts.pyc
PYCregister.pyc
PYCsdist.pyc
PYCupload.pyc
PYC__init__.pyc
PYCbdist_wininst.pyc
BINemail
RSTarchitecture.rst
PYCbase64mime.pyc
PYCcharset.pyc
PYCcontentmanager.pyc
PYCencoders.pyc
PYCerrors.pyc
PYCfeedparser.pyc
PYCgenerator.pyc
PYCheader.pyc
PYCheaderregistry.pyc
PYCiterators.pyc
PYCmessage.pyc
PYCparser.pyc
PYCpolicy.pyc
PYCquoprimime.pyc
PYCutils.pyc
PYC_encoded_words.pyc
PYC_header_value_parser.pyc
PYC_parseaddr.pyc
PYC_policybase.pyc
PYC__init__.pyc
BINmime
PYCapplication.pyc
PYCaudio.pyc
PYCbase.pyc
PYCimage.pyc
PYCmessage.pyc
PYCmultipart.pyc
PYCnonmultipart.pyc
PYCtext.pyc
BINencodings
PYCaliases.pyc
PYCascii.pyc
PYCbase64_codec.pyc
PYCbig5.pyc
PYCbig5hkscs.pyc
PYCbz2_codec.pyc
PYCcharmap.pyc
PYCcp037.pyc
PYCcp1006.pyc
PYCcp1026.pyc
PYCcp1125.pyc
PYCcp1140.pyc
PYCcp1250.pyc
PYCcp1251.pyc
PYCcp1252.pyc
PYCcp1253.pyc
PYCcp1254.pyc
PYCcp1255.pyc
PYCcp1256.pyc
PYCcp1257.pyc
PYCcp1258.pyc
PYCcp273.pyc
PYCcp424.pyc
PYCcp437.pyc
PYCcp500.pyc
PYCcp65001.pyc
PYCcp720.pyc
PYCcp737.pyc
PYCcp775.pyc
PYCcp850.pyc
PYCcp852.pyc
PYCcp855.pyc
PYCcp856.pyc
PYCcp857.pyc
PYCcp858.pyc
PYCcp860.pyc
PYCcp861.pyc
PYCcp862.pyc
PYCcp863.pyc
PYCcp864.pyc
PYCcp865.pyc
PYCcp866.pyc
PYCcp869.pyc
PYCcp874.pyc
PYCcp875.pyc
PYCcp932.pyc
PYCcp949.pyc
PYCcp950.pyc
PYCeuc_jisx0213.pyc
PYCeuc_jis_2004.pyc
PYCeuc_jp.pyc
PYCeuc_kr.pyc
PYCgb18030.pyc
PYCgb2312.pyc
PYCgbk.pyc
PYChex_codec.pyc
PYChp_roman8.pyc
PYChz.pyc
PYCidna.pyc
PYCiso2022_jp.pyc
PYCiso2022_jp_1.pyc
PYCiso2022_jp_2.pyc
PYCiso2022_jp_2004.pyc
PYCiso2022_jp_3.pyc
PYCiso2022_jp_ext.pyc
PYCiso2022_kr.pyc
PYCiso8859_1.pyc
PYCiso8859_10.pyc
PYCiso8859_11.pyc
PYCiso8859_13.pyc
PYCiso8859_14.pyc
PYCiso8859_15.pyc
PYCiso8859_16.pyc
PYCiso8859_2.pyc
PYCiso8859_3.pyc
PYCiso8859_4.pyc
PYCiso8859_5.pyc
PYCiso8859_6.pyc
PYCiso8859_7.pyc
PYCiso8859_8.pyc
PYCiso8859_9.pyc
PYCjohab.pyc
PYCkoi8_r.pyc
PYCkoi8_t.pyc
PYCkoi8_u.pyc
PYCkz1048.pyc
PYClatin_1.pyc
PYCmac_arabic.pyc
PYCmac_centeuro.pyc
PYCmac_croatian.pyc
PYCmac_cyrillic.pyc
PYCmac_farsi.pyc
PYCmac_greek.pyc
PYCmac_iceland.pyc
PYCmac_latin2.pyc
PYCmac_roman.pyc
PYCmac_romanian.pyc
PYCmac_turkish.pyc
PYCmbcs.pyc
PYCoem.pyc
PYCpalmos.pyc
PYCptcp154.pyc
PYCpunycode.pyc
PYCquopri_codec.pyc
PYCraw_unicode_escape.pyc
PYCrot_13.pyc
PYCshift_jis.pyc
PYCshift_jisx0213.pyc
PYCshift_jis_2004.pyc
PYCtis_620.pyc
PYCundefined.pyc
PYCunicode_escape.pyc
PYCunicode_internal.pyc
PYCutf_16.pyc
PYCutf_16_be.pyc
PYCutf_16_le.pyc
PYCutf_32.pyc
PYCutf_32_be.pyc
PYCutf_32_le.pyc
PYCutf_7.pyc
PYCutf_8.pyc
PYCutf_8_sig.pyc
PYCuu_codec.pyc
PYCzlib_codec.pyc
PYC__init__.pyc
BINhtml
PYCentities.pyc
PYCparser.pyc
PYC__init__.pyc
BINhttp
PYCclient.pyc
PYCcookiejar.pyc
HTMcookies.pyc
PYCserver.pyc
PYC__init__.pyc
BINimportlib
PYCabc.pyc
PYCmachinery.pyc
PYCresources.pyc
PYCutil.pyc
PYC_bootstrap.pyc
PYC_bootstrap_external.pyc
PYC__init__.pyc
BINjson
PYCdecoder.pyc
PYCencoder.pyc
PYCscanner.pyc
PYCtool.pyc
PYC__init__.pyc
BINlib2to3
PYCbtm_matcher.pyc
PYCbtm_utils.pyc
PYCfixer_base.pyc
PYCfixer_util.pyc
BINGrammar3.7.3.final.0.pickle
TXTGrammar.txt
PYCmain.pyc
PYCpatcomp.pyc
BINPatternGrammar3.7.3.final.0.pickle
TXTPatternGrammar.txt
PYCpygram.pyc
PYCpytree.pyc
PYCrefactor.pyc
PYC__init__.pyc
PYC__main__.pyc
BINfixes
PYCfix_apply.pyc
PYCfix_asserts.pyc
PYCfix_basestring.pyc
PYCfix_buffer.pyc
PYCfix_dict.pyc
PYCfix_except.pyc
PYCfix_exec.pyc
PYCfix_execfile.pyc
PYCfix_exitfunc.pyc
PYCfix_filter.pyc
PYCfix_funcattrs.pyc
PYCfix_future.pyc
PYCfix_getcwdu.pyc
PYCfix_has_key.pyc
PYCfix_idioms.pyc
PYCfix_import.pyc
PYCfix_imports.pyc
PYCfix_imports2.pyc
PYCfix_input.pyc
PYCfix_intern.pyc
PYCfix_isinstance.pyc
PYCfix_itertools.pyc
PYCfix_itertools_imports.pyc
PYCfix_long.pyc
PYCfix_map.pyc
PYCfix_metaclass.pyc
PYCfix_methodattrs.pyc
PYCfix_ne.pyc
PYCfix_next.pyc
PYCfix_nonzero.pyc
PYCfix_numliterals.pyc
PYCfix_operator.pyc
PYCfix_paren.pyc
PYCfix_print.pyc
PYCfix_raise.pyc
PYCfix_raw_input.pyc
PYCfix_reduce.pyc
PYCfix_reload.pyc
PYCfix_renames.pyc
PYCfix_repr.pyc
PYCfix_set_literal.pyc
PYCfix_standarderror.pyc
PYCfix_sys_exc.pyc
PYCfix_throw.pyc
PYCfix_tuple_params.pyc
PYCfix_types.pyc
PYCfix_unicode.pyc
PYCfix_urllib.pyc
PYCfix_ws_comma.pyc
PYCfix_xrange.pyc
PYCfix_xreadlines.pyc
PYCfix_zip.pyc
PYC__init__.pyc
BINpgen2
PYCconv.pyc
PYCdriver.pyc
PYCgrammar.pyc
PYCliterals.pyc
PYCparse.pyc
PYCpgen.pyc
PYCtoken.pyc
PYCtokenize.pyc
PYC__init__.pyc
BINlogging
PYCconfig.pyc
PYChandlers.pyc
PYC__init__.pyc
BINmsilib
PYCschema.pyc
PYCsequence.pyc
PYCtext.pyc
PYC__init__.pyc
BINmultiprocessing
PYCconnection.pyc
PYCcontext.pyc
PYCforkserver.pyc
PYCheap.pyc
PYCmanagers.pyc
PYCpool.pyc
PYCpopen_fork.pyc
PYCpopen_forkserver.pyc
PYCpopen_spawn_posix.pyc
PYCpopen_spawn_win32.pyc
PYCprocess.pyc
PYCqueues.pyc
PYCreduction.pyc
PYCresource_sharer.pyc
PYCsemaphore_tracker.pyc
PYCsharedctypes.pyc
PYCspawn.pyc
PYCsynchronize.pyc
PYCutil.pyc
PYC__init__.pyc
BINdummy
PYCconnection.pyc
PYC__init__.pyc
BINpydoc_data
VBStopics.pyc
CSS_pydoc.css
PYC__init__.pyc
BINsite-packages
TXTREADME.txt
BINsqlite3
PYCdbapi2.pyc
PYCdump.pyc
PYC__init__.pyc
BINunittest
PYCcase.pyc
PYCloader.pyc
PYCmain.pyc
PYCmock.pyc
PYCresult.pyc
PYCrunner.pyc
PYCsignals.pyc
PYCsuite.pyc
PYCutil.pyc
PYC__init__.pyc
PYC__main__.pyc
BINurllib
PYCerror.pyc
PYCparse.pyc
PYCrequest.pyc
PYCresponse.pyc
PYCrobotparser.pyc
BINwsgiref
PYChandlers.pyc
PYCheaders.pyc
PYCsimple_server.pyc
PYCutil.pyc
PYCvalidate.pyc
PYC__init__.pyc
BINxml
PYC__init__.pyc
BINdom
PYCdomreg.pyc
PYCexpatbuilder.pyc
PYCminicompat.pyc
PYCminidom.pyc
PYCNodeFilter.pyc
PYCpulldom.pyc
PYCxmlbuilder.pyc
PYC__init__.pyc
BINetree
PYCcElementTree.pyc
PYCElementInclude.pyc
PYCElementPath.pyc
PYCElementTree.pyc
PYC__init__.pyc
BINparsers
PYCexpat.pyc
PYC__init__.pyc
BINsax
PYCexpatreader.pyc
PYChandler.pyc
PYCsaxutils.pyc
PYCxmlreader.pyc
PYC_exceptions.pyc
PYC__init__.pyc
BINxmlrpc
PYCclient.pyc
PYCserver.pyc
EXEpythonw.exe
Structure
P7B[Authenticode]_721f5447.p7b
BINResources
BINRT_ICON
BINID:0001
IMGID:1033
IMGID:1033-preview.png
BINID:0002
BINID:1033
BINID:0003
BINID:1033
BINID:0004
BINID:1033
BINID:0005
BINID:1033
BINID:0006
BINID:1033
BINID:0007
IMGID:1033
IMGID:1033-preview.png
BINID:0008
BINID:1033
BINID:0009
BINID:1033
BINID:000A
BINID:1033
BINID:000B
BINID:1033
BINID:000C
BINID:1033
BINRT_GROUP_CURSOR4
BINID:0001
BINID:1033
BINRT_VERSION
BINID:0001
BINID:1033
DLLvcruntime140.dll
Structure
P7B[Authenticode]_8625f7a2.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
EXE_ctypes.pyd
Structure
P7B[Authenticode]_856648e4.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
BINsmss_pth
BINRoot Entry
BIN䡀䌏䈯
BIN䡀㲞䈝䗻
BIN䡀䈖䌧䠤
BIN䡀䌋䄱䜵
BIN䡀䌍䏤䊲
BIN䡀䕎䒵䠵
BIN䌋䄱䜵㷾䚨
BIN䌋䄱䜵㾾䠳
BIN䌧䎶䞁䄦䠥
BIN䡀㬿䏲䐸䖱
BIN䡀㽿䅤䈯䠶
BIN䡀䈏䗤䕸䠨
BIN䡀䈛䌪䗶䜵
BIN䡀䋌䆨㫮䛲
BIN䡀䋜䕲䆷䗸
BIN䡀䒌䗱䒵䠯
BIN䡀䕙䓲䕨䜷
BIN䌋䄱䜵䌾䉱䠲
BIN䡀䆊䌷䑲䈝䗻
BIN䡀䈝䗻䗜䏼䠨
BIN䡀䌍䈵䗦䕲䠼
BIN䡀䒌䓰䑲䑨䠷
IMG䌋䄱䜵䅾䑤䈱䠵
IMG䌋䄱䜵䅾䑤䈱䠵-preview.png
IMG䌋䄱䜵䇾䄬䒯䠪
IMG䌋䄱䜵䇾䄬䒯䠪-preview.png
BIN䌋䄱䜵䗾䅤䄥䎦
BIN䡀㼿䕷䑬㭪䗤䠤
BIN䡀㼿䕷䑬㹪䒲䠯
BIN䡀㿿䏤䇬䗤䒬䠱
BIN䡀䄛䌧㫲䗸䒷䠱
BIN䡀䒌䗱䒵㮯䈹䗱
BIN䡀䕌䄨䈷䒏䇯䕨
BIN䡀䘌䗶䐲䆊䌷䑲
BIN䡀䙎䑨㶷䓤䌳䊱
BIN䌋䄱䜵䆾䐲䏳䗨䠬
BIN䌋䄱䜵䆾䖸䌷䒦䠱
BIN䌋䄱䜵䈾䆻䄯䌰䠦
BIN䌋䄱䜵䌾䖱䌷䒦䠱
BIN䌋䄱䜵䕾䐨䙲䆬䠲
BIN䌋䄱䜵䕾䓨䌤䌵䠦
BIN䡀䄕䑸䋦䒌䇱䗬䒬䠱
BIN䡀䇊䌰㾱㼒䔨䈸䆱䠨
BIN䡀䒌䗱䒵㬯䑲䌧䌷䑲
JS䌋䄱䜵䄾䆬䖸䄷䗦䇾䏯T1059.007
Structure
P7B[Authenticode]_fd1952a3.p7b
BINResources
BINREGISTRY
BINID:27DA
BINID:1033
BINRT_DIALOG
BINID:2AB7
BINID:1033
BINRT_STRING
BINID:09C5
BINID:1033
BINRT_VERSION
BINID:0001
BINID:1033
BINRT_MANIFEST
BINID:0002
BINID:1033
BIN䌋䄱䜵䆾䇰䌯䎱䕤䒵䠺
BIN䡀䈏䗤䕸㬨䐲䒳䈱䗱䠶
BIN䡀䑒䗶䏤㾯㼒䔨䈸䆱䠨
BIN䡀䇊䌰㮱䈻䘦䈷䈜䘴䑨䈦
BIN䡀䇊䗹䛎䆨䗸㼨䔨䈸䆱䠨
BIN䡀䑒䗶䏤㮯䈻䘦䈷䈜䘴䑨䈦
BIN䡀䒋䗲䗶䄵䓳䕨㲞䈜䘴䑨䈦
BINSummaryInformation
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 12
STICH kept: 4secondary ignored: 8
bin
6img
2Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
4 / 4
Path
ole:doc>pe:dll~T1059.007>pe:rsrc>bin
Shape
ole:doc>pe:dll>pe:rsrc>bin
technique4 nodes
Path
ole:doc>pe:dll~T1059.007>bin
Shape
ole:doc>pe:dll>bin
technique3 nodes
723 files
OFFa241c1546e96b3c507297ae6774d8cd1T1059.007
BINtxt
PNGctypes32.png
EXEpython.exe
DLLpython3.dll
DLLpython37.dll
ZIPpython37.zip
EXEpythonw.exe
DLLvcruntime140.dll
EXE_ctypes.pyd
BINsmss_pth
BINRoot Entry
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account