Suspect
10aab9e4bcabb40ba8d27d950d5874a9
MS Office Document
MD5: 10aab9e4bcabb40ba8d27d950d5874a9
Size: 1.36 MB
application/vnd.ms-office
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | 10aab9e4bcabb40ba8d27d950d5874a9 |
| Sha1 | bb11a649142b70c03a76579279701192d7ee52ff |
| Sha256 | a4d215f9419f2b44995b6e2086ad36478ef76e62010be2f4d54bf7aecc6967cb |
| Sha384 | a4807d7e7111fe5506a37772a610e0fbe5c801b964c7ce4a733b183667633433e0eb663ea5f5d5ae69aed652481b5f55 |
| Sha512 | c6b3fe073c01ecba79b353eed646622d96f7b393159b67eede6333edef629918cf94feb60266c9f85e5c08154f90429bbc1d9524d534181fd975f47319f7bbd3 |
| SSDeep | 24576:t7dGXG/59nFU8UL72iP+YDrBaJC9SIk7xe1IIYxV8lA9UXBEUS1r:t7gEnFU5rP5rsIul2KU8r |
| TLSH | 5155235BFBAADBC3D006047168CA2CE54529FC83A5124B0F32B4734DA6363B9976B35D |
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 10
STICH kept: 1secondary ignored: 9
bin
4img
1oox:metadata
1oox:style
1oox:theme
1xml
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
ole:doc>oox:xlsx>oox:media>ole:doc
Shape
ole:doc>oox:xlsx>oox:media>ole:doc
4 nodes
| Name | Value |
|---|---|
| Version | 1.4 |
| CreationDate | D:20250910163553+03'00' |
| Title | Teklif Fişi |
| Producer | Qt 6.7.2 |
| /Title | Teklif Fişi |
| /Producer | Qt 6.7.2 |
| /CreationDate | D:20250910163553+03'00' |
| Version | 1.7 |
| Author | dodisko |
| CreationDate | D:20250812165002+03'00' |
| Creator | Microsoft® Word 2021 |
| ModifiedDate | D:20250812165002+03'00' |
| Title | Microsoft Word - PROFORMA INVOICE.docx |
| Producer | Microsoft® Word 2021 |
| /Title | Microsoft Word - PROFORMA INVOICE.docx |
| /Author | dodisko |
| /Creator | Microsoft® Word 2021 |
| /CreationDate | D:20250812165002+03'00' |
| /ModDate | D:20250812165002+03'00' |
| /Producer | Microsoft® Word 2021 |
No malware configuration was found at this point.
You must be signed in to view YARA rules.