Malicious
dbec4cbbca0c6a96aa850f78d6d1d6f5
MS Office Document
MD5: dbec4cbbca0c6a96aa850f78d6d1d6f5
Size: 304.64 KB
application/vnd.ms-office
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Microsoft Office Document
Size
304.64 KB · 304,640 B
First seen
2026-08-21 08:15 · 2 months ago
Last seen
2026-08-21 08:15 · 2 months ago
Last analysis
2026-09-01 17:05 · one month ago
Hashes
MD5
dbec4cbbca0c6a96aa850f78d6d1d6f5
Sha1
033ccf7fed8225b18895632e22a4ab4a91cf4237
Sha256
ad146d279e3e91c5969831ead77123ada2c5a09bf5409810db843ed45e9b1cb8
Sha384
b30eb155660147b3acf3a2fe235eb0e6014a7cd925aeffbf080b3199fb08a111be4073b6ce343e5e1079ebc55037795e
Sha512
9f397e9d591a9389fbb999d86e2ee5a365c9146129245fcfdf1a43659f4030306f774e32cb7be7d43d43284fd9d31cb34cee73ec1c35ecc0a407c02069c5115a
SSDeep
6144:WxEtjPOtioVjDGUU1qfDlavx+U6g6777Ytneg3g7YX43RG:kYtne9
TLSH
2A5485C07B85C91EC61485758E9652DA7B72EC028B22E74731C3B7BF7EB25A09DC3285
9 malicious · 37 files
OFFdbec4cbbca0c6a96aa850f78d6d1d6f5T1059.005
BINRoot Entry
BINCompObj
BINWorkbook
BINSummaryInformation
BINDocumentSummaryInformation
BIN_VBA_PROJECT_CUR
BINPROJECT
BINPROJECTwm
BINVBA
BINdir
VBASheet1
VBS[Stored VBA]T1059.005
VBA[PCode]
VBS[Decompiled VBA]T1059.005
BIN__SRP_0
BIN__SRP_1
BIN__SRP_2
BIN__SRP_3
BIN__SRP_4
BIN__SRP_5
VBAUserForm1
VBS[Stored VBA]T1059.005
VBA[PCode]
VBS[Decompiled VBA]T1059.005
VBS_VBA_PROJECTT1059.005
VBSEmbedPictures_Macros
VBS[Stored VBA]T1059.005
VBA[PCode]
VBSClear_and_Compress_MacrosT1059.005
VBS[Stored VBA]T1059.005
VBA[PCode]
BINUserForm1
BINf
BINo
BINCompObj
BINVBFrame
BINMsoDataStore
BINÈÇÍØFÂÚSÐÔOÞJ4FÍÅGÂÜÄQ==
BINItem
BINProperties
BINÛÆÌJÞMØÝÆÔ0ÏACÜÅ1ÛSVGA==
BINItem
BINProperties
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
4 / 4
Path
ole:doc~T1059.005>bin
Shape
ole:doc>bin
technique2 nodes
Path
ole:doc~T1059.005>ole:vba~T1059.005
Shape
ole:doc>ole:vba
technique2 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 6huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée
UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential9 malicious · 37 files
OFFdbec4cbbca0c6a96aa850f78d6d1d6f5T1059.005
BINRoot Entry
BINCompObj
BINWorkbook
BINSummaryInformation
BINDocumentSummaryInformation
BIN_VBA_PROJECT_CUR
BINPROJECT
BINPROJECTwm
BINVBA
BINdir
VBASheet1
VBS[Stored VBA]T1059.005
VBA[PCode]
VBS[Decompiled VBA]T1059.005
BIN__SRP_0
BIN__SRP_1
BIN__SRP_2
BIN__SRP_3
BIN__SRP_4
BIN__SRP_5
VBAUserForm1
VBS[Stored VBA]T1059.005
VBA[PCode]
VBS[Decompiled VBA]T1059.005
VBS_VBA_PROJECTT1059.005
VBSEmbedPictures_Macros
VBS[Stored VBA]T1059.005
VBA[PCode]
VBSClear_and_Compress_MacrosT1059.005
VBS[Stored VBA]T1059.005
VBA[PCode]
BINUserForm1
BINMsoDataStore
No malware configuration was found at this point.
Trace COM ordonnée
UNKNWOWNmalicious
line 6huhuhuhuhuhuhuhuhuhuhu
dbec4cbbca0c6a96aa850f78d6d1d6f5 › Root Entry › _VBA_PROJECT_CUR › VBA › Clear_and_Compress_Macros › [Stored VBA]
Trace COM ordonnée
UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
dbec4cbbca0c6a96aa850f78d6d1d6f5 › Root Entry › _VBA_PROJECT_CUR › VBA › EmbedPictures_Macros › [Stored VBA]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account