1a6657447868d9f52281727fbcec196d

MS Office Document

MD5: 1a6657447868d9f52281727fbcec196d

Size: 13.54 MB

application/vnd.ms-office

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	1a6657447868d9f52281727fbcec196d
Sha1	52c44aef81a852e630850033579135019dfea6e7
Sha256	a36ee55b824760641e9c06a8b30fc2ed23851bc49da254c61a68fdcf4b192bf0
Sha384	4ad58274ce41cd2f8a1618456a3170c54ab8dbd91755149ddad08d21e56c69e20375dccac41ffd4558751916dcdbef33
Sha512	3702c9e509997c7131ac9ea6025448f6073fae3c6967234c72af9b843b2e037f0fabae2f5586d5ec0c7278db8527dd58ab0b416bf0f6982b2d49cc42f94cca90
SSDeep	196608:DrnLYG3zDhukO9rnLYG3z9rnLYG3zprnLYG3zirnLYG3zIrnLYG3zprnLYG3z:DbDDDgv9bDD9bDDpbDDibDDIbDDpbDD
TLSH	11D6232267FD0A18E1F36778ED3A90E19536BC65DF12D08F2654386E6871E4093A373B

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 9 STICH kept: 1secondary ignored: 8

bin 7img 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path ole:doc>pe:dll>pe:dll

Shape ole:doc>pe:dll>pe:dll

3 nodes

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

No malware configuration was found at this point.

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

1a6657447868d9f52281727fbcec196d › Root Entry › 䌋䄱䜵㬾䖸䒷㪰䗦䒬㵱䅬䄵䜵 › Microsoft.Deployment.Compression.Cab.dll

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

You must be signed in to view YARA rules.