Malicious
MS Office Document
MD5: dbec4cbbca0c6a96aa850f78d6d1d6f5
Size: 304.64 KB
application/vnd.ms-office
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Microsoft Office Document
Size
304.64 KB · 304,640 B
First seen
2026-08-21 08:15 · 2 months ago
Last seen
2026-08-21 08:15 · 2 months ago
Last analysis
2026-09-01 17:05 · one month ago
Hashes
MD5
dbec4cbbca0c6a96aa850f78d6d1d6f5
Sha1
033ccf7fed8225b18895632e22a4ab4a91cf4237
Sha256
ad146d279e3e91c5969831ead77123ada2c5a09bf5409810db843ed45e9b1cb8
Sha384
b30eb155660147b3acf3a2fe235eb0e6014a7cd925aeffbf080b3199fb08a111be4073b6ce343e5e1079ebc55037795e
Sha512
9f397e9d591a9389fbb999d86e2ee5a365c9146129245fcfdf1a43659f4030306f774e32cb7be7d43d43284fd9d31cb34cee73ec1c35ecc0a407c02069c5115a
SSDeep
6144:WxEtjPOtioVjDGUU1qfDlavx+U6g6777Ytneg3g7YX43RG:kYtne9
TLSH
2A5485C07B85C91EC61485758E9652DA7B72EC028B22E74731C3B7BF7EB25A09DC3285
9 malicious · 37 files
OFFdbec4cbbca0c6a96aa850f78d6d1d6f5T1059.005
BINRoot Entry
BINCompObj
BINWorkbook
BINSummaryInformation
BINDocumentSummaryInformation
BIN_VBA_PROJECT_CUR
BINPROJECT
BINPROJECTwm
BINVBA
BINdir
VBASheet1
VBS[Stored VBA]T1059.005
VBA[PCode]
VBS[Decompiled VBA]T1059.005
BIN__SRP_0
BIN__SRP_1
BIN__SRP_2
BIN__SRP_3
BIN__SRP_4
BIN__SRP_5
VBAUserForm1
VBS[Stored VBA]T1059.005
VBA[PCode]
VBS[Decompiled VBA]T1059.005
VBS_VBA_PROJECTT1059.005
VBSEmbedPictures_Macros
VBS[Stored VBA]T1059.005
VBA[PCode]
VBSClear_and_Compress_MacrosT1059.005
VBS[Stored VBA]T1059.005
VBA[PCode]
BINUserForm1
BINMsoDataStore
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
4 / 4
Path
ole:doc~T1059.005>bin
Shape
ole:doc>bin
technique2 nodes
Path
ole:doc~T1059.005>ole:vba~T1059.005
Shape
ole:doc>ole:vba
technique2 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 6huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée
UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential