Suspicious
Suspect

2013b487d05cf742cd46d9f5c50d7959

Share on LinkedIn
Print
MS Office Document
MD5: 2013b487d05cf742cd46d9f5c50d7959
Size: 759.81 KB
application/vnd.ms-office

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 2013b487d05cf742cd46d9f5c50d7959
Sha1 26037d0f40b0e04d065915128bca9693da38cf38
Sha256 4097b5940b43e3d52b92d4407b9d0b726cd1bd2f6fd2c340ac5117f42901c2dc
Sha384 fff91a89a6679cc285fd85cf5839dff4a1ad7c3f11aa59fce0eb9a826acc87bac6d42ea85aa0e98cc8194ea1a349adf5
Sha512 1fdb6583ee36a2ce7a6d9a4c9985310cd055d788a348bc4e01f682ae4ce6a5d930a7f80df5f24748be56ded763324ffeb5105c447cfcce121a6c2788e4ff1a98
SSDeep 12288:A+322SsLHMSCiAaLflE/MQUW4ptNy0xnK1zKaKlCFs0Jf9OifS6X0pQKU:AN2SsIFiLLflEBputK1zKRlKT9DX0pO
TLSH 1BF42315FDE5C723C239C4345DE88BB7511CFC685B86A29F3090F30E1B39BA191EAA65
2013b487d05cf742cd46d9f5c50d7959
Root Entry
CompObj
Workbook
SummaryInformation
DocumentSummaryInformation
MBD008102E1
[Content_Types].xml
_rels
.rels
xl
_rels
workbook.xml.rels
workbook.xml
sharedStrings.xml
drawings
_rels
vmlDrawing1.vml.rels
vmlDrawing1.vml
worksheets
_rels
sheet1.xml.rels
sheet1.xml
theme
theme1.xml
styles.xml
media
image1.emf
embeddings
oleObject1.bin
Root Entry
Ole
CompObj
CONTENTS
Text (Preview)
#Stream obj 5 0
#Stream obj 7 0
#Stream obj 11 0
#Stream obj 15 0
#Stream obj 19 0
Structure
printerSettings
printerSettings1.bin
docProps
thumbnail.wmf
core.xml
app.xml
CompObj
MBD008102E2
Ole
_VBA_PROJECT_CUR
PROJECT
PROJECTwm
VBA
dir
_VBA_PROJECT
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 9 STICH kept: 1secondary ignored: 8
bin 4oox:metadata 1oox:style 1oox:theme 1xml 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path ole:doc>oox:xlsx>oox:media>ole:doc
Shape ole:doc>oox:xlsx>oox:media>ole:doc
4 nodes
Name Value
Version
1.7
CreationDate
D:20250908110839
Creator
PDFium
Producer
PDFium
/CreationDate
D:20250908110839
/Creator
PDFium
/Producer
PDFium
An error has occurred. This application may no longer respond until reloaded. Reload 🗙