Suspect
MS Office Document
MD5: 1a6657447868d9f52281727fbcec196d
Size: 13.54 MB
application/vnd.ms-office
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | 1a6657447868d9f52281727fbcec196d |
| Sha1 | 52c44aef81a852e630850033579135019dfea6e7 |
| Sha256 | a36ee55b824760641e9c06a8b30fc2ed23851bc49da254c61a68fdcf4b192bf0 |
| Sha384 | 4ad58274ce41cd2f8a1618456a3170c54ab8dbd91755149ddad08d21e56c69e20375dccac41ffd4558751916dcdbef33 |
| Sha512 | 3702c9e509997c7131ac9ea6025448f6073fae3c6967234c72af9b843b2e037f0fabae2f5586d5ec0c7278db8527dd58ab0b416bf0f6982b2d49cc42f94cca90 |
| SSDeep | 196608:DrnLYG3zDhukO9rnLYG3z9rnLYG3zprnLYG3zirnLYG3zIrnLYG3zprnLYG3z:DbDDDgv9bDD9bDDpbDDibDDIbDDpbDD |
| TLSH | 11D6232267FD0A18E1F36778ED3A90E19536BC65DF12D08F2654386E6871E4093A373B |
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 9
STICH kept: 1secondary ignored: 8
bin
7img
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
ole:doc>pe:dll>pe:dll
Shape
ole:doc>pe:dll>pe:dll
3 nodes
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential