Suspicious
Suspect

41135fecbaa8e064315518827a2e3e7e

MS Word Document
MD5: 41135fecbaa8e064315518827a2e3e7e
Size: 101.56 KB
application/msword

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 41135fecbaa8e064315518827a2e3e7e
Sha1 8595e840f2bdd065b3838a9f963a9f5f11ac56f4
Sha256 945d7fcaee739e2fd847286e8e243c7cd14b537096d0abc243211244bd75f511
Sha384 6e420f501d8bd6b47af9523a17eba4a337778b2a8960e1a61f037483b55a116f035daee79791c33cd1b7a6ec13674baa
Sha512 636a68a51ae11d277edb60be532e9cda64a33bbbb724fdd723385687df48904616980caa1998be4113541eec36851c14f9c8c4bf7fbea00c01a24b7cf524b42d
SSDeep 1536:NjSBqWT9YaureLOOBzGczmsmyUmMEGuYJlzEEpYKVfHXCr:CBW1r+OOBz/mjyUmMEGuYfzEmYs3M
TLSH F1A3039348974072E27209671F9CB9B860EEA3CD9933749145CE36E8CF8B573E570CA9
41135fecbaa8e064315518827a2e3e7e
[Content_Types].xml
docProps
app.xml
core.xml
word
document.xml
fontTable.xml
mewo.rtf
settings.xml
styles.xml
webSettings.xml
theme
theme1.xml
_rels
document.xml.rels
_rels
.rels
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 5 STICH kept: 1secondary ignored: 4
oox:metadata 1oox:style 1oox:theme 1xml 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path oox:docx>rtf
Shape oox:docx>rtf
2 nodes
41135fecbaa8e064315518827a2e3e7e
[Content_Types].xml
docProps
app.xml
core.xml
word
document.xml
fontTable.xml
mewo.rtf
settings.xml
styles.xml
webSettings.xml
theme
theme1.xml
_rels
document.xml.rels
_rels
.rels
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙