Malicious
Game.msi
MS Office Document
MD5: bcc1a05ac1ee37883bbefd13683b6047
Size: 13.43 MB
application/vnd.ms-office
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Microsoft Office Document
Size
13.43 MB · 13,430,784 B
First seen
2026-08-07 09:11 · 2 months ago
Last seen
2026-08-07 09:11 · 2 months ago
Last analysis
2026-08-07 09:13 · 2 months ago
Hashes
MD5
bcc1a05ac1ee37883bbefd13683b6047
Sha1
ab740c71f91e6a7fa6785b9884069f0b2e97d5cd
Sha256
325a6f283587b73d5ff6e9b3f1d82507bfb9ad96d0b31660abdb39792646dc84
Sha384
f13b1e7b72b36d002d3976e69a54ebc6db094fefff5b3c0ea2974e2c275c6d1f6b4d190e4bb76649665f9da133bebbfb
Sha512
e3979b8dab6c0610ce1871a91229359f831975ba468ab84e7e350bd67354ecc9ba6036fe711e498043f3ce73b97b38f9116ed3d8b97430fefec42f8d2c6f3c0f
SSDeep
393216:9xsh1Ud0YYbPuCebZ9f8Ar7e6FoBKZpYDxZW:9Ohq6YUGZZVr7e6/r
TLSH
FED633C0ED54BF19E4FB94B34E4DD3647B61FD35BA04E424FEA83B291A32BA140A61C4
2 malicious · 56 files
OFFGame.msiT1059.005
BINRoot Entry
BIN䡀䌏䈯
BIN䡀䈖䌧䠤
BIN䡀㬿䏲䐸䖱
BIN䡀㽿䅤䈯䠶
BIN䡀䈏䗤䕸䠨
BIN䡀䕙䓲䕨䜷
BIN䇼䇼䊱䓨䆾䅤
BINfilA3E01361C19F9119AA61D13BD2337117
BINfilBE0D38B9447EBE515474DFD28225BD96
BINfilD1073DF8FCCB127CCCB9FFEECA50D318
VBSfilDC3AFD07CC6B84650F829CF93F61B3CC
Structure
B64[Base64-Block@0x011FF81A]
BIN[Base64-Block-Decoded]
P7B[Authenticode]_74416516.p7b
BINResources
BINWEVT_TEMPLATE
BINID:0001
BINID:1033
BINRT_ICON
BINID:0001
BINID:1033
BINID:0002
BINID:1033
BINID:0003
BINID:1033
BINID:0004
BINID:1033
BINID:0005
BINID:1033
BINID:0006
IMGID:1033
IMGID:1033-preview.png
BINRT_MESSAGETABLE
BINID:0001
BINID:1033
BINRT_GROUP_CURSOR4
BINID:0001
BINID:1033
BINRT_VERSION
BINID:0001
BINID:1033
BINRT_MANIFEST
BINID:0001
BINID:1033
EXEfilE2B6F24377E399A5F690C3B3F219F983
Structure
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
BINfilECA8C1BA375155901533BEC85AA85BC3
BINfilF823EE2AFCB2873CE8ACF265F6E9039E
BIN䡀䌍䈵䗦䕲䠼
BIN䡀䒌䓰䑲䑨䠷
BIN䡀㼿䕷䑬㭪䗤䠤
BIN䡀㼿䕷䑬㹪䒲䠯
BIN䡀㿿䏤䇬䗤䒬䠱
BIN䡀䖖㯬䏬㱨䖤䠫
BIN䡀䘌䗶䐲䆊䌷䑲
BIN䡀䇊䌰㾱㼒䔨䈸䆱䠨
BIN䡀䈏䗤䕸㬨䐲䒳䈱䗱䠶
BIN䡀䑒䗶䏤㾯㼒䔨䈸䆱䠨
BIN䡀䇊䌰㮱䈻䘦䈷䈜䘴䑨䈦
BIN䡀䇊䗹䛎䆨䗸㼨䔨䈸䆱䠨
BIN䡀䑒䗶䏤㮯䈻䘦䈷䈜䘴䑨䈦
BINDigitalSignature
BINSummaryInformation
BINMsiDigitalSignatureEx
BINfil07522DDC5130644E131F0583E826306E
VBSfil7DCAE4815E2576B62698511C4BBB8A7BT1059.005
BINfilA3E01361C19F9119AA61D13BD2337117
BINfilBE0D38B9447EBE515474DFD28225BD96
BINfilD1073DF8FCCB127CCCB9FFEECA50D318
BINfilDC3AFD07CC6B84650F829CF93F61B3CC
BINfilE2B6F24377E399A5F690C3B3F219F983
BINfilECA8C1BA375155901533BEC85AA85BC3
BINfilF823EE2AFCB2873CE8ACF265F6E9039E
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 8
STICH kept: 2secondary ignored: 6
bin
5img
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
ole:doc>scr:vbs~T1059.005
Shape
ole:doc>scr:vbs
technique2 nodes
Path
ole:doc>bin>pe:exe>enc:b64
Shape
ole:doc>bin>pe:exe>enc:b64
4 nodes
2 malicious · 56 files
OFFGame.msiT1059.005
BINRoot Entry
BINfil07522DDC5130644E131F0583E826306E
VBSfil7DCAE4815E2576B62698511C4BBB8A7BT1059.005
BINfilA3E01361C19F9119AA61D13BD2337117
BINfilBE0D38B9447EBE515474DFD28225BD96
BINfilD1073DF8FCCB127CCCB9FFEECA50D318
BINfilDC3AFD07CC6B84650F829CF93F61B3CC
BINfilE2B6F24377E399A5F690C3B3F219F983
BINfilECA8C1BA375155901533BEC85AA85BC3
BINfilF823EE2AFCB2873CE8ACF265F6E9039E
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account