Malicious
Malicious

ce830fadf6c59ffb59f9e97454c53098

MS Excel Document
MD5: ce830fadf6c59ffb59f9e97454c53098
Size: 70.95 KB
application/vnd.ms-excel
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 ce830fadf6c59ffb59f9e97454c53098
Sha1 1787f9cbf7a542afa7d385816330e1a378f57f26
Sha256 70da7a1fec73a921fd15209e21c29d14d50c0ad66f8d27f91bcb6b5a114685bc
Sha384 2bc8c6c46f23427e64d490efb07ddf40ebed1b21c0be9c099e93a00f6f904d5d0de461298df5c1fad73fb92095d88b82
Sha512 a6299eed0d5d0a901ebe8ce56aa07df9fdce36d6447120ae7d963865d2eeee748b5b0566d8d79ad81f6cc60541ec289b880cad48e620c3146504670c32c16212
SSDeep 1536:MQy1lU59fSuxBgafhL9eHXhbMt+JTlkonj1pgGaeLYjqUzt+yaEXKDZn:M9M9aufvJLgHrD1pJbLWR+REWt
TLSH 7863024FC423973CDD29CF7396DA36B59AECB30E98187C65B096988433D129743589CC
[Content_Types].xml
_rels
.rels
xl
workbook.xml
_rels
workbook.xml.rels
worksheets
sheet1.xml
sheet2.xml
theme
theme1.xml
styles.xml
sharedStrings.xml
vbaProject.bin
Root Entry
PROJECT
PROJECTwm
docProps
core.xml
app.xml
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
8 / 8
Path oox:xlsm~T1059.005>bin
Shape oox:xlsm>bin
technique2 nodes
Path oox:xlsm~T1059.005>ole:doc
Shape oox:xlsm>ole:doc
technique2 nodes
[Content_Types].xml
_rels
.rels
xl
workbook.xml
_rels
workbook.xml.rels
worksheets
sheet1.xml
sheet2.xml
theme
theme1.xml
styles.xml
sharedStrings.xml
vbaProject.bin
Root Entry
PROJECT
PROJECTwm
docProps
core.xml
app.xml

vbaDNA - VBA Stomping & Purging Stategy detection

Module Name
ThisWorkbook
Blacklist VBA
VBA Macro
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙