Suspicious
Suspect

eb7e4287cd79a72aec49339df00ebcd6

MS Office Document
MD5: eb7e4287cd79a72aec49339df00ebcd6
Size: 998.4 KB
application/vnd.ms-office

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 eb7e4287cd79a72aec49339df00ebcd6
Sha1 fb4d76419ee50eaf7a8baff089a9d116cb84743a
Sha256 01f82df6d640458c9852fcceff2893b668c150dc6e7ae83298533c5c1b5815d2
Sha384 c47253f309f262cf1f6e3226b1447558fcc5d80282e11cfef6172af1bf070a0a3ab86f8a8fed62950fed46266609f751
Sha512 0c630aedd91206992f5afcdffb78cf0b24a1a08b9afbcd550f461c2855248b62f2ea910f8e64b8d36b90e3011ce2507b455be390b9e43b63f1b93f2c8600cb2b
SSDeep 24576:7fwI/uHLINPWFQ5OmOsEsFusPTCiKJKb:7fwILEsOcEsFD+iKJKb
TLSH EC252325BAD5E363D317A93C88E4C17D003DAD617E12901F32A8774CF9346B589BB239
eb7e4287cd79a72aec49339df00ebcd6
Root Entry
CompObj
Workbook
SummaryInformation
DocumentSummaryInformation
MBD0008ED23
[Content_Types].xml
_rels
.rels
xl
_rels
workbook.xml.rels
workbook.xml
sharedStrings.xml
styles.xml
theme
theme1.xml
worksheets
_rels
sheet1.xml.rels
sheet1.xml
drawings
_rels
vmlDrawing1.vml.rels
vmlDrawing1.vml
media
image2.emf
image1.emf
embeddings
oleObject2.bin
Root Entry
Ole
CompObj
CONTENTS
Text (Preview)
#Stream obj 5 0
#Stream obj 10 0
#Stream obj 11 0
#Stream obj 15 0
#Stream obj 16 0
#Stream obj 17 0
oleObject1.bin
Root Entry
CONTENTS
Text (Preview)
#Stream obj 5 0
#Stream obj 7 0
#Stream obj 11 0
#Stream obj 15 0
#Stream obj 19 0
Structure
printerSettings
printerSettings1.bin
docProps
thumbnail.wmf
core.xml
app.xml
CompObj
MBD0008ED24
Ole
_VBA_PROJECT_CUR
PROJECT
PROJECTwm
VBA
dir
_VBA_PROJECT
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 9 STICH kept: 1secondary ignored: 8
bin 4oox:metadata 1oox:style 1oox:theme 1xml 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path ole:doc>oox:xlsx>oox:media>ole:doc
Shape ole:doc>oox:xlsx>oox:media>ole:doc
4 nodes
Name Value
Version
1.7
CreationDate
D:20250908110839
Creator
PDFium
Producer
PDFium
/CreationDate
D:20250908110839
/Creator
PDFium
/Producer
PDFium
Version
1.7
CreationDate
D:20250908111410
Creator
PDFium
Producer
PDFium
/CreationDate
D:20250908111410
/Creator
PDFium
/Producer
PDFium
eb7e4287cd79a72aec49339df00ebcd6
Root Entry
CompObj
Workbook
SummaryInformation
DocumentSummaryInformation
MBD0008ED23
[Content_Types].xml
_rels
.rels
xl
_rels
workbook.xml.rels
workbook.xml
sharedStrings.xml
styles.xml
theme
theme1.xml
worksheets
_rels
sheet1.xml.rels
sheet1.xml
drawings
_rels
vmlDrawing1.vml.rels
vmlDrawing1.vml
media
image2.emf
image1.emf
embeddings
oleObject2.bin
Root Entry
Ole
CompObj
CONTENTS
Text (Preview)
#Stream obj 5 0
#Stream obj 10 0
#Stream obj 11 0
#Stream obj 15 0
#Stream obj 16 0
#Stream obj 17 0
oleObject1.bin
Root Entry
CONTENTS
Text (Preview)
#Stream obj 5 0
#Stream obj 7 0
#Stream obj 11 0
#Stream obj 15 0
#Stream obj 19 0
Structure
printerSettings
printerSettings1.bin
docProps
thumbnail.wmf
core.xml
app.xml
CompObj
MBD0008ED24
Ole
_VBA_PROJECT_CUR
PROJECT
PROJECTwm
VBA
dir
_VBA_PROJECT
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙