Suspect
3a1f44b80498f287b620ba61c42e97a4
MS Office Document
MD5: 3a1f44b80498f287b620ba61c42e97a4
Size: 454.14 KB
application/vnd.ms-office
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | 3a1f44b80498f287b620ba61c42e97a4 |
| Sha1 | c20dfdae14195d7f5274f3991d29a0f7dca615b0 |
| Sha256 | deba3a2b25f36e6296ef3bd1ae4632dd1e7dab22f680ce4d1e87e03b59d62247 |
| Sha384 | e3a80b747d6fde135fc26adbc42a8f3ae8c4237843729be05b3c664bc9a19bc977f4b624d2f16d6c56d20403c8737732 |
| Sha512 | ad9056b6c54fe046e7157947cd427f3fbba6963b5ba3b33c6c6897a462d45716856d278f38b3d18085d13e644b10b8b61aa072f321379a9c1044bb70310d0ecc |
| SSDeep | 12288:hBzTJSdXdw88AhUWgNCK99qdKFEH+r0pGimzu:P7dWg8Q9nFEHzpGA |
| TLSH | 26A412A132B2D72BC45368FDD9D8248F0316FC968F4A955B7670F32E583A7CA9024D1E |
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 10
STICH kept: 1secondary ignored: 9
bin
4img
1oox:metadata
1oox:style
1oox:theme
1xml
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
ole:doc>oox:xlsx>oox:media>ole:doc
Shape
ole:doc>oox:xlsx>oox:media>ole:doc
4 nodes
| Name | Value |
|---|---|
| Version | 1.7 |
| Author | dodisko |
| CreationDate | D:20250812165002+03'00' |
| Creator | Microsoft® Word 2021 |
| ModifiedDate | D:20250812165002+03'00' |
| Title | Microsoft Word - PROFORMA INVOICE.docx |
| Producer | Microsoft® Word 2021 |
| /Title | Microsoft Word - PROFORMA INVOICE.docx |
| /Author | dodisko |
| /Creator | Microsoft® Word 2021 |
| /CreationDate | D:20250812165002+03'00' |
| /ModDate | D:20250812165002+03'00' |
| /Producer | Microsoft® Word 2021 |
No malware configuration was found at this point.
You must be signed in to view YARA rules.