Suspicious
Suspect

ef2576d671a6fb21b0c75635c232c108

MS Excel Document
MD5: ef2576d671a6fb21b0c75635c232c108
Size: 2.99 MB
application/vnd.ms-excel

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 ef2576d671a6fb21b0c75635c232c108
Sha1 8e6edef369723a94ee7d0c876a10396ae9d4ee2b
Sha256 76f31ade7064e808784e930b6d19ab13c44d016843ca3e4ea240dbc021aaa802
Sha384 49090bd0bffb795c12f6eae20731872ee2e7cf1a46811060843f10975580d7c2b92aa7c55e83d28d19eca0fa78b20257
Sha512 bdf0277fab61a806c629172df90b59666ec95a18c49783d37ac45389d12dc48ca3976faba79e6ac33ea8925c7ea8c37e78822daa2de5a5bbdc3d46cbccb3166e
SSDeep 49152:pOc2yD4lTPeeA3l4BQSH//Y0T54pDv3rf7eFX0j6FTsresx0Y4HrMom4k:poyEFPo4BQUAWA3f7GHTsrdq4om5
TLSH 13D502FB58B265536B904663EA0F2C0A339B19D53724D342EA1150AC7F7B1D38EA2733
ef2576d671a6fb21b0c75635c232c108
[Content_Types].xml
_rels
.rels
xl
_rels
workbook.xml.rels
workbook.xml
sharedStrings.xml
theme
theme1.xml
styles.xml
worksheets
sheet1.xml
_rels
sheet1.xml.rels
drawings
vmlDrawing1.vml
embeddings
Root Entry
kgSZIfq
ole10NAtIve
docProps
core.xml
app.xml
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 7 STICH kept: 1secondary ignored: 6
bin 2oox:metadata 1oox:style 1oox:theme 1xml 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path oox:xlsx>oox:media>ole:doc
Shape oox:xlsx>oox:media>ole:doc
3 nodes
ef2576d671a6fb21b0c75635c232c108
[Content_Types].xml
_rels
.rels
xl
_rels
workbook.xml.rels
workbook.xml
sharedStrings.xml
theme
theme1.xml
styles.xml
worksheets
sheet1.xml
_rels
sheet1.xml.rels
drawings
vmlDrawing1.vml
embeddings
Root Entry
kgSZIfq
ole10NAtIve
docProps
core.xml
app.xml
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙