Malicious
Malicious

eb038dd6b07d8458fea6f6035b29e1ba

Share on LinkedIn
Print
MS Office Document
MD5: eb038dd6b07d8458fea6f6035b29e1ba
Size: 352.26 KB
application/vnd.ms-office
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 eb038dd6b07d8458fea6f6035b29e1ba
Sha1 c03db3bff0b8b8e639bd017cf2aa50bb6ef0089d
Sha256 2be2f990dc0fa1f4f3f485742a840aaed551fcbb6fe2cc07e8aa183bdc011024
Sha384 29da752279034d2f1f8c017b1476b63638664509a58133c75938d5315b97532eaf2875165be552e0c58e15153e9097aa
Sha512 e5138ef45b1bed8ffd56eb1a64252849f358dbcc6117ff67f3b6f29a3837ea2d772933d37578d061682a090d62a2c8abd06be645db9cd170d53af87151b718a4
SSDeep 6144:S8G6Ug4yDf0/Bu08rKS932ZH1olrr0D+0xKZdQP7tqTxF3K4U6he1:SLUHf+DmpodTgTxFB9
TLSH 0274231172B2DA27C91303379B9B8BA69F772C718B4709682254FA7C2DBB0744A17CF5
Root Entry
Malicious
䡀䌏䈯
Overlay_ebf698f9.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.data
.rdata
.sxdata
.bss
.idata
.CRT
.tls
.rsrc
4
Resources
RT_MANIFEST
ID:0001
ID:0
䡀䈖䌧䠤
䡀㬿䏲䐸䖱
䡀㽿䅤䈯䠶
䡀䈏䗤䕸䠨
䡀䓞䕪䇤䠨
䡀䕙䓲䕨䜷
䡀䌍䈵䗦䕲䠼
䡀䒌䓰䑲䑨䠷
䡀㼿䕷䑬㭪䗤䠤
䡀㼿䕷䑬㹪䒲䠯
䡀㿿䏤䇬䗤䒬䠱
䡀䖖㯬䏬㱨䖤䠫
䡀䘌䗶䐲䆊䌷䑲
䡀䄕䑸䋦䒌䇱䗬䒬䠱
䡀䇊䌰㾱㼒䔨䈸䆱䠨
䡀䈏䗤䕸㬨䐲䒳䈱䗱䠶
䡀䑒䗶䏤㾯㼒䔨䈸䆱䠨
䡀䇊䌰㮱䈻䘦䈷䈜䘴䑨䈦
䡀䇊䗹䛎䆨䗸㼨䔨䈸䆱䠨
䡀䑒䗶䏤㮯䈻䘦䈷䈜䘴䑨䈦
SummaryInformation
MainExeFile
ScriptFile
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 4 STICH kept: 1secondary ignored: 3
bin 3

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path ole:doc>bin>scr:vbs~T1059.005
Shape ole:doc>bin>scr:vbs
technique3 nodes
An error has occurred. This application may no longer respond until reloaded. Reload 🗙