253a5d6ba1cbd9ec6b4107d95556e6d2

MS Office Document

MD5: 253a5d6ba1cbd9ec6b4107d95556e6d2

Size: 9.11 MB

application/vnd.ms-office

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	253a5d6ba1cbd9ec6b4107d95556e6d2
Sha1	eb08c08532e2efb619dec438672da4b9ff6a1a09
Sha256	18234cb137f84dfceedc95e81c66fdfcb2f7ceaddfdda8c2a861d92834fc26d0
Sha384	f9c0b6d4afa3e77591be43f272a58c9786ce5d5840476fb473d4818cf9190915da6549ce684bf03823f8e3cfa0ffec3b
Sha512	903031ed0340a2d3c322c20de6fc5a0c174fe57af9b8b5b7454fcbf30b6cd098318c01b9154460f128cef54aeacde0c12fd715be07a3995f0eebd0ea566a5f4e
SSDeep	196608:0QyiixtMjGZ1jhlrwUCQyiixtMjoQyiixtMjXQyiixtMjBQyiixtMj:FPnjGrrbPnj5PnjgPnjqPnj
TLSH	3F96232063E98A28E1B61B75EE7A55F14D39BC45EF23C11E4778795E2A30E8095B3333

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 10 STICH kept: 2secondary ignored: 8

bin 7img 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path ole:doc>pe:dll>pe:dll

Shape ole:doc>pe:dll>pe:dll

3 nodes

Path ole:doc>pe:dll

Shape ole:doc>pe:dll

2 nodes

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

No malware configuration was found at this point.

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

253a5d6ba1cbd9ec6b4107d95556e6d2 › Root Entry › 䌋䄱䜵㬾䖸䒷㪰䗦䒬㵱䅬䄵䜵 › ScreenConnect.Core.dll

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

You must be signed in to view YARA rules.