Suspect
MS Office Document
MD5: 00fe070c30ef8307698c002932a212f6
Size: 13.6 MB
application/vnd.ms-office
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | 00fe070c30ef8307698c002932a212f6 |
| Sha1 | c43cd67d9ff19989480b0d6b7bd2b44d87800bef |
| Sha256 | fe74be8e67ceed37d50c35000fb3beb7fbbd3f9a682db6a5dca2eb2c6827a62c |
| Sha384 | 1419e5cbaeedf754e0415e2c96bb87763a4c9b4df68a0cca669bf39a2b2a003adeca2e01ad15e7e8541dc8fe32a0df3c |
| Sha512 | cd633a1a3d710ff7e71086f83dcf8ea7fa8b1db4c8e551e339be5915b8667e6cb5ba39b1c8fb90e66f57bb84f8f39241e0ba187fe354515f7348cb1d4d0da75c |
| SSDeep | 196608:8rnLYG3zDhukOTrnLYG3zlrnLYG3z3rnLYG3zgrnLYG3zTrnLYG3zirnLYG3z:8bDDDgvTbDDlbDD3bDDgbDDTbDDibDD |
| TLSH | FED6233167FD4A18E1B36774EE3A91E1D1367DA5DF11D18F2224386E68B1E4082A373B |
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 11
STICH kept: 2secondary ignored: 9
bin
8img
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
ole:doc>pe:dll>pe:dll
Shape
ole:doc>pe:dll>pe:dll
3 nodes
Path
ole:doc>pe:dll
Shape
ole:doc>pe:dll
2 nodes
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential