Suspicious
Suspect

2e9befb1006d48b41f9f9f027ee4db6a

MS Word Document
MD5: 2e9befb1006d48b41f9f9f027ee4db6a
Size: 238.25 KB
application/msword

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 2e9befb1006d48b41f9f9f027ee4db6a
Sha1 d43c2ad48ac61951c1fef2e3c4106c693a3dbd9c
Sha256 9015670fa19b6f7bcfbc2f5d24fb095b7030311b5da5adb59c8dd665165ad67c
Sha384 cbc6fbafe89c27f3f5124fb840c5aef36c9483bab759ee88328dd10a53334436bba774dabcb461097a94adbf3eb99098
Sha512 a7e9e8571f9583b5ae714073dd5c4a01971a2d7528509c16e9bc72bc5d853d51b63d130d643cc0ea249a66942b8e496beb0d3d17f728a589e63250161918b810
SSDeep 3072:MuhYvtTHq9GC+vAcgpuavDOKPgVkUrR0fk6cO1Gk782QyhDcn06VU/YfnEXwoPe/:MkYvUZRjVPenqM6cO/HQIQ06IYWPlG
TLSH F5341260005300B6E05825774FBE0514A8EEABC784B6320A6CEC76D6FF43677EABED45
2e9befb1006d48b41f9f9f027ee4db6a
[Content_Types].xml
docProps
app.xml
core.xml
word
document.xml
fontTable.xml
laine.rtf
settings.xml
styles.xml
webSettings.xml
theme
theme1.xml
_rels
document.xml.rels
_rels
.rels
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 5 STICH kept: 1secondary ignored: 4
oox:metadata 1oox:style 1oox:theme 1xml 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path oox:docx>rtf
Shape oox:docx>rtf
2 nodes
2e9befb1006d48b41f9f9f027ee4db6a
[Content_Types].xml
docProps
app.xml
core.xml
word
document.xml
fontTable.xml
laine.rtf
settings.xml
styles.xml
webSettings.xml
theme
theme1.xml
_rels
document.xml.rels
_rels
.rels
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙