Malicious
MS Office Document
MD5: ed70a797fe27c749b027aac25782185b
Size: 20.37 MB
application/vnd.ms-office
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | ed70a797fe27c749b027aac25782185b |
| Sha1 | f73f43b0b78dea3a7cbfe400c1d29c0de6b59f06 |
| Sha256 | db281eccea7165538fb5cceebd9fa9f338dd435cddba4c6bc00ad335fea29456 |
| Sha384 | 33104c075ba2c4b3e6923adced9c64cc8e4a2de175d5a7f03412530e78461fd57a6790983a8d916ca03b6efeedd0c5de |
| Sha512 | 53c462e2abcf1206772677ee9618dec08fc76a46b2e00a779800ee613e9b527adb49d86c7a189943b9f5ed454fb67a83abaa25a78604044839ef96dff98e0390 |
| SSDeep | 393216:xXc/HYS3glFQv87upC4GCAKUd2Cu3et11GSazIHiY:xSYpi06RA7dpIevCY |
| TLSH | B72733AA6C262E83CA5126BB23521342AF311DB33B1187112D7DF92D1C7D1FA4B5D39B |
Malicious
Malicious
Malicious
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 14
STICH kept: 6secondary ignored: 8
bin
5img
3Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
6 / 6
Path
ole:doc>bin>scr:ps1~T1027~T1059.001
Shape
ole:doc>bin>scr:ps1
malicious
3 nodes
Path
ole:doc>bin>scr:vbs~T1059.005
Shape
ole:doc>bin>scr:vbs
technique3 nodes
Deobfuscated PowerShell
UNKNWOWNmalicious
Start-huhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
-argumhuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
-argumhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential