Malicious
e87eb0b055f81acd5167b817b6c4bd96
MS Excel Document
MD5: e87eb0b055f81acd5167b817b6c4bd96
Size: 2.22 MB
application/vnd.ms-excel
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Microsoft Office Document
Size
2.22 MB · 2,215,144 B
First seen
2026-07-13 17:32 · 3 months ago
Last seen
2026-07-13 17:32 · 3 months ago
Last analysis
2026-07-13 17:32 · 3 months ago
Hashes
MD5
e87eb0b055f81acd5167b817b6c4bd96
Sha1
19b550354b493af8be565a3c30b927bb6588b6ea
Sha256
42255ff1914882e20ddb9116b521287dccd2bee944e056bc8f1bd1c2970299a6
Sha384
1e16b01cb5d9323e5c5611826d173707f92282561b1715fba6390ba340f0a236900140183c5739d85724d2546fd81a0a
Sha512
254942220e689417fb2a7c40524e91ce658bf8bd932b523489b318cb1ed1b87f50769655544bc5478f1f26aad4c4b544c415fdc31c3d52b537efd929e4ae4633
SSDeep
49152:xPyqcb1KIss6Ri1CB2Cw8oYRq75Npv8SNlbDPLP7mPFFaoz9GW3r45:xaqcb1KIT6nB2Cw8675XkSNdzfmjdRGN
TLSH
34A533607C760FD5C12D00FB82417269696A05FAF72097FF897B93E89CD50A76EC06E8
3 malicious · 25 files
XLSe87eb0b055f81acd5167b817b6c4bd96T1059.005
XML[Content_Types].xml
BIN_rels
XML.rels
BINxl
XMLworkbook.xml
BIN_rels
XMLworkbook.xml.rels
BINworksheets
XMLsheet1.xml
XMLsheet2.xml
BINtheme
XMLtheme1.xml
XMLstyles.xml
XMLsharedStrings.xml
OFFvbaProject.bin
BINRoot Entry
BINPROJECT
BINPROJECTwm
BINVBA
BINdir
BIN__SRP_0
BIN__SRP_1
BIN__SRP_2
BIN__SRP_3
VBAThisWorkbook
VBS[Stored VBA]T1059.005
VBA[PCode]
VBS[Decompiled VBA]T1059.005
BIN_VBA_PROJECT
BINdocProps
XMLcore.xml
XMLapp.xml
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 8
STICH kept: 3secondary ignored: 5
bin
1oox:metadata
1oox:style
1oox:theme
1xml
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
3 / 3
Path
oox:xlsm>oox:vba~T1059.005
Shape
oox:xlsm>oox:vba
technique2 nodes
Path
oox:xlsm>ole:doc
Shape
oox:xlsm>ole:doc
2 nodes
3 malicious · 25 files
XLSe87eb0b055f81acd5167b817b6c4bd96T1059.005
XML[Content_Types].xml
BIN_rels
BINxl
XMLworkbook.xml
BIN_rels
BINworksheets
BINtheme
XMLstyles.xml
XMLsharedStrings.xml
OFFvbaProject.bin
BINRoot Entry
BINPROJECT
BINPROJECTwm
BINVBA
BINdir
BIN__SRP_0
BIN__SRP_1
BIN__SRP_2
BIN__SRP_3
VBAThisWorkbook
VBS[Stored VBA]T1059.005
VBA[PCode]
VBS[Decompiled VBA]T1059.005
BIN_VBA_PROJECT
BINdocProps
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account