Suspicious
Suspect

155bff056cf02ae7704f1b3523f9ee74

MS Word Document
MD5: 155bff056cf02ae7704f1b3523f9ee74
Size: 237.01 KB
application/msword

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 155bff056cf02ae7704f1b3523f9ee74
Sha1 2f92e435ce2514ce2fd53fe82d4ba97cd50f34fb
Sha256 80b9704f4191f71b66309f9a61b2ebe024b324c079571db67e22b890f8945224
Sha384 001edd6e66e4c6724df8ba810d190880c4104d4f68872ef2dbf41facec3b9e8b50cd8c5b124e0c0b96cfab7e357ca4e7
Sha512 38b6e1f858a8deabcbef587ffb074599ef56a8b49ccec66a0eb095bd1fe9ca028f85f4ce144921529c49281fbd7577be8a50e283fdf9d60f60a2ce798a1ee4c4
SSDeep 6144:CBaHy/mqrDfW0Wvv8hzcuCshFcxNtl7ix6ByTx/JxP:IrD+XvQzcuz+xN2x6ByTx/JN
TLSH 6A3401A585870079D22266BB2F5C456E20EDD3C75AB23CC218EC76E5CF4363BD970C69
155bff056cf02ae7704f1b3523f9ee74
[Content_Types].xml
docProps
app.xml
core.xml
word
document.xml
fontTable.xml
rname.rtf
settings.xml
styles.xml
webSettings.xml
theme
theme1.xml
_rels
document.xml.rels
_rels
.rels
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 5 STICH kept: 1secondary ignored: 4
oox:metadata 1oox:style 1oox:theme 1xml 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path oox:docx>rtf
Shape oox:docx>rtf
2 nodes
155bff056cf02ae7704f1b3523f9ee74
[Content_Types].xml
docProps
app.xml
core.xml
word
document.xml
fontTable.xml
rname.rtf
settings.xml
styles.xml
webSettings.xml
theme
theme1.xml
_rels
document.xml.rels
_rels
.rels
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙