Suspect
2013b487d05cf742cd46d9f5c50d7959
MS Office Document
MD5: 2013b487d05cf742cd46d9f5c50d7959
Size: 759.81 KB
application/vnd.ms-office
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | 2013b487d05cf742cd46d9f5c50d7959 |
| Sha1 | 26037d0f40b0e04d065915128bca9693da38cf38 |
| Sha256 | 4097b5940b43e3d52b92d4407b9d0b726cd1bd2f6fd2c340ac5117f42901c2dc |
| Sha384 | fff91a89a6679cc285fd85cf5839dff4a1ad7c3f11aa59fce0eb9a826acc87bac6d42ea85aa0e98cc8194ea1a349adf5 |
| Sha512 | 1fdb6583ee36a2ce7a6d9a4c9985310cd055d788a348bc4e01f682ae4ce6a5d930a7f80df5f24748be56ded763324ffeb5105c447cfcce121a6c2788e4ff1a98 |
| SSDeep | 12288:A+322SsLHMSCiAaLflE/MQUW4ptNy0xnK1zKaKlCFs0Jf9OifS6X0pQKU:AN2SsIFiLLflEBputK1zKRlKT9DX0pO |
| TLSH | 1BF42315FDE5C723C239C4345DE88BB7511CFC685B86A29F3090F30E1B39BA191EAA65 |
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 9
STICH kept: 1secondary ignored: 8
bin
4oox:metadata
1oox:style
1oox:theme
1xml
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
ole:doc>oox:xlsx>oox:media>ole:doc
Shape
ole:doc>oox:xlsx>oox:media>ole:doc
4 nodes
| Name | Value |
|---|---|
| Version | 1.7 |
| CreationDate | D:20250908110839 |
| Creator | PDFium |
| Producer | PDFium |
| /CreationDate | D:20250908110839 |
| /Creator | PDFium |
| /Producer | PDFium |
No malware configuration was found at this point.
You must be signed in to view YARA rules.