Suspicious
Suspect

e8760139cc6eaef04dd8e542a1922bcc

MS Office Document
MD5: e8760139cc6eaef04dd8e542a1922bcc
Size: 1.04 MB
application/vnd.ms-office

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
Microsoft Office Document
Size
1.04 MB · 1,040,384 B
Hashes
MD5 e8760139cc6eaef04dd8e542a1922bcc Sha1 74036099d916517f803ba421d25fee4d692f9b91 Sha256 0329c3dcb71f6ed5eed1d17f1e945612aeba5d67cc80699d734a2df64bba1cdf Sha384 ae322426a329114892413c3b141f41db754281f11af8468f6b4c9f717166b059608abb2cd2f97b99fdb7de67becc4270 Sha512 47524e8d18ee0640f27f78b8c6cba60f585a001269eab634abeeb32192803b02e3abde909124af9d8290f4d5e2808d5814219415173d10e67c0c2db5dd3bbf9c SSDeep 24576:3UDw2Qhxr113nW/LsMYrEP6MTWGKvd8t9uKkP:3UDwFXr1ByLzYr+6MLOdr/P TLSH 07253395752092FEC54E87B0458D8A74A3F68D741EB264DBB09DB32C3F322CC7A7185A
28 files
OFFe8760139cc6eaef04dd8e542a1922bcc
BINRoot Entry
BIN䡀䌏䈯
BIN䄦㡥䆾䅤
EXEfls7lzKST5eKBKChW_3ErWdAQle3VI
Structure
BIN䡀䈖䌧䠤
BIN䡀㬿䏲䐸䖱
BIN䡀㽿䅤䈯䠶
BIN䡀䈏䗤䕸䠨
BIN䡀䓞䕪䇤䠨
BIN䡀䕙䓲䕨䜷
BIN䡀䌍䈵䗦䕲䠼
BIN䡀䒌䓰䑲䑨䠷
BIN䡀㼿䕷䑬㭪䗤䠤
BIN䡀㼿䕷䑬㹪䒲䠯
BIN䡀㿿䏤䇬䗤䒬䠱
BIN䡀䖖㯬䏬㱨䖤䠫
BIN䡀䘌䗶䐲䆊䌷䑲
BIN䡀䄕䑸䋦䒌䇱䗬䒬䠱
BIN䡀䇊䌰㾱㼒䔨䈸䆱䠨
BIN䡀䈏䗤䕸㬨䐲䒳䈱䗱䠶
BIN䡀䑒䗶䏤㾯㼒䔨䈸䆱䠨
BIN䡀䇊䌰㮱䈻䘦䈷䈜䘴䑨䈦
BIN䡀䇊䗹䛎䆨䗸㼨䔨䈸䆱䠨
BIN䡀䑒䗶䏤㮯䈻䘦䈷䈜䘴䑨䈦
BINDigitalSignature
BINSummaryInformation
BINMsiDigitalSignatureEx
EXEfls7lzKST5eKBKChW_3ErWdAQle3VI
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 3 STICH kept: 2secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path ole:doc>bin>pe:exe
Shape ole:doc>bin>pe:exe
3 nodes
Path ole:doc>pe:exe
Shape ole:doc>pe:exe
2 nodes
PE Layout UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
28 files
OFFe8760139cc6eaef04dd8e542a1922bcc
EXEfls7lzKST5eKBKChW_3ErWdAQle3VI
No malware configuration was found at this point.
PE Layout UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
e8760139cc6eaef04dd8e542a1922bcc › fls7lzKST5eKBKChW_3ErWdAQle3VI
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙