Malicious
Malicious

ddc8b61db5c6f4d7ab83170cc74f4d03

MS Excel Document
MD5: ddc8b61db5c6f4d7ab83170cc74f4d03
Size: 176.4 KB
application/vnd.ms-excel
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 ddc8b61db5c6f4d7ab83170cc74f4d03
Sha1 b4ac046cec50082f68dec7b5a3e5af51710331a5
Sha256 0bb875dcb216560f3a1d0b8034d290c10e7c15a25a7d5a805152cd3784b9e7b5
Sha384 5f03e6ff2ea5b2aefeabbe9e29a995d1d5616aed25b0945262b64d37b288a6d9da7105b7f78ca502827588cb35884003
Sha512 da6a265074b2d5056119ef4b5860d61edd899669ff067d3367994200e9af790c627e94a5df67e16688baef0b72d1bf7633aedb01a86a7a88fe476fc90128f394
SSDeep 3072:Msjl1Ruh7z9CCfzVHJtFtaduBlvLfYmd8ur1Vp09c6R54bkZu67nO4h83Lw4PHcg:tjzsH9vfzVbxb98U1R65Qp7V7blUDG
TLSH A804127D692517E3D1FD543DEB8D0A32341810961265368F1680736382BFA63A39EBEF
[Content_Types].xml
_rels
.rels
xl
workbook.xml
_rels
workbook.xml.rels
worksheets
sheet1.xml
sheet2.xml
theme
theme1.xml
styles.xml
sharedStrings.xml
vbaProject.bin
Root Entry
PROJECT
PROJECTwm
docProps
core.xml
app.xml
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
8 / 8
Path oox:xlsm~T1059.005>bin
Shape oox:xlsm>bin
technique2 nodes
Path oox:xlsm~T1059.005>ole:doc
Shape oox:xlsm>ole:doc
technique2 nodes
[Content_Types].xml
_rels
.rels
xl
workbook.xml
_rels
workbook.xml.rels
worksheets
sheet1.xml
sheet2.xml
theme
theme1.xml
styles.xml
sharedStrings.xml
vbaProject.bin
Root Entry
PROJECT
PROJECTwm
docProps
core.xml
app.xml

vbaDNA - VBA Stomping & Purging Stategy detection

Module Name
ThisWorkbook
Blacklist VBA
VBA Macro
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙