Malicious
MS Office Document
MD5: d7715ee3111ddf5455adacf025b05db1
Size: 20.37 MB
application/vnd.ms-office
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | d7715ee3111ddf5455adacf025b05db1 |
| Sha1 | 5b6e7cfc3639294664e5d1ea27b10ddbde85d533 |
| Sha256 | fe47917124b2e67066cabcca19784d62b48c5e4d657ef0fffb6faf668f998faf |
| Sha384 | 4631fa48f442b698f2e8259710e6ff02b20bcf0785172648e022e7b5def561384a9ced247e1bf7be5cd2ad3b3d97826d |
| Sha512 | 348d9dc03f7a78ed488e43ae0722f27f4198b7ca1d7eeceafd69c08bb611f0cc53d48377005dd4be9cdba670c3fb4c25bad8ba6ed0367edc8d976fd44c40c687 |
| SSDeep | 393216:Vx0GPEt6S3gllsv87upS4GCAKUdaCu3et1NGPy1iVie:Vi6pq06pA7dVIeiQe |
| TLSH | 072733A62C222E83CA6566BB23431342AF310DB33B1187152D7DE92D1C7E1F95B5D39B |
Malicious
Malicious
Malicious
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 14
STICH kept: 6secondary ignored: 8
bin
5img
3Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
6 / 6
Path
ole:doc>bin>scr:ps1~T1027~T1059.001
Shape
ole:doc>bin>scr:ps1
malicious
3 nodes
Path
ole:doc>bin>scr:vbs~T1059.005
Shape
ole:doc>bin>scr:vbs
technique3 nodes
Deobfuscated PowerShell
UNKNWOWNmalicious
Start-huhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
-argumhuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
-argumhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential