Suspect
MS Office Document
MD5: 2efb5e9fa018fad5bf23d1ffdce679cc
Size: 998.91 KB
application/vnd.ms-office
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | 2efb5e9fa018fad5bf23d1ffdce679cc |
| Sha1 | d9fc9e38fda83fc9e5251c08f2fb2ba70d8cfac4 |
| Sha256 | db003e402d882001c2cecc9a71c718ace2c4a6d61fe8e2915af73ebbc70d5d3b |
| Sha384 | 0d1622ecf2b4a1b0542647526d470df3373b0336c73faa779f1b3c3aa2843ee7507da316990b4db2f10d55cdfd00e8b0 |
| Sha512 | e879ec1e31e1500bd6e1da22f5d7fa8342e08fd5d90f9a9b8cf812d7b1ed709c30258a46d24bae04c1feb43fa6b86426c754c843a45eea796b4b59fa00731352 |
| SSDeep | 12288:/GfwI82f2Q7TezN4ee+KahN0QwKF2UElH7k1kyaNsUrS/WVQl6QsuQmdGc1iCLKe:ufwI/uweR4eNK1QwKFgEmQs3sGc1ibr |
| TLSH | 4B252315F6EEE722E17642390CA9D44E5B9EFE58B73EA10B31A4330C2675B3E314E425 |
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 9
STICH kept: 1secondary ignored: 8
bin
4oox:metadata
1oox:style
1oox:theme
1xml
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
ole:doc>oox:xlsx>oox:media>ole:doc
Shape
ole:doc>oox:xlsx>oox:media>ole:doc
4 nodes
| Name | Value |
|---|---|
| Version | 1.7 |
| CreationDate | D:20250908110839 |
| Creator | PDFium |
| Producer | PDFium |
| /CreationDate | D:20250908110839 |
| /Creator | PDFium |
| /Producer | PDFium |
| Version | 1.7 |
| CreationDate | D:20250908111410 |
| Creator | PDFium |
| Producer | PDFium |
| /CreationDate | D:20250908111410 |
| /Creator | PDFium |
| /Producer | PDFium |