Malicious
cb7b7e270bb178ec02d183d93b31db69
MS Office Document
MD5: cb7b7e270bb178ec02d183d93b31db69
Size: 671.23 KB
application/vnd.ms-office
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | cb7b7e270bb178ec02d183d93b31db69 |
| Sha1 | a1a2161171db8131fc674580d0dca37fd3c569bc |
| Sha256 | c891e76b7888c28d5cc7bfc49d2208816409f6f3c62746f613dbde7e4698ee01 |
| Sha384 | dd2a5f34d49aa9958ef5a930db2eccb033462e6029875e191680c34762d5142c5fd491058aff96d9319685da713dff85 |
| Sha512 | 21364b2ca73f1a11fdb05103f777b60d8248d620356ba42b7e7835b4f69d37abec0584e51bef8937ffa5e6f60a8028ff8fd275a271252035d2c35c6776339e05 |
| SSDeep | 12288:eVfavl/6kAosjelwm2w00000000000S02tGboH39zH+bymj3VbZ/MRWvl8ihc:kytiqKm2xoX9zSymj3VW8d8ihc |
| TLSH | CCE4230BF38CDCD9E6C30A7A47CBB0D555295D628A09C62F3F44B36E2E727A1D067219 |
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
11 / 11
Path
ole:doc~T1204~T1221>oox:xlsx>oox:media>pdf>pdf:stream>bin
Shape
ole:doc>oox:xlsx>oox:media>pdf>pdf:stream>bin
malicious
6 nodes
Path
ole:doc~T1204~T1221>oox:xlsx>oox:media>pdf>pdf:stream>img
Shape
ole:doc>oox:xlsx>oox:media>pdf>pdf:stream>img
malicious
6 nodes
| Config. Field | Value |
|---|---|
| URL distante (OLE moniker) #1 | htTp:/huhuhuhuhuhuhuhuhuhuhu |
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with Essential
| Name | Value |
|---|---|
| Version | 1.4 |
| CreationDate | D:20260910044932+00'00' |
| Creator | |
| ModifiedDate | D:20260910044932+00'00' |
| Title | SLES CALIBRATION PRIVATE LIMITED |
| Producer | Skia/PDF m152 |
| /Title | SLES CALIBRATION PRIVATE LIMITED |
| /Creator | |
| /Producer | Skia/PDF m152 |
| /CreationDate | D:20260910044932+00'00' |
| /ModDate | D:20260910044932+00'00' |
| Config. Field | Value |
|---|---|
| URL distante (OLE moniker) #1 | htTp:/huhuhuhuhuhuhuhuhuhuhu |
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with Essential
You must be signed in to view YARA rules.