Suspect
MS Office Document
MD5: 4127d1d27efbe766fab22a51b47a2291
Size: 685.06 KB
application/vnd.ms-office
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | 4127d1d27efbe766fab22a51b47a2291 |
| Sha1 | d3f8442cb21efda71d96686dff1ac810d4c8c1fd |
| Sha256 | e5597c19f2a8a7c1ee77801a26b2da4611064e97416b5645f2f0ddecf6c3652a |
| Sha384 | b3a893db96a0f7b308f0fd8ebe674a6e44aa0582f82917a3eb544e00aa25e351617a468c3d72ad5ade7d5c8e344768e7 |
| Sha512 | 5d94c3e882c74989840576f8d6e4e8a9d811acdd89f21dbe06d655f1d244f4be91125ab801d7f6907eba19ab4ec7a65cf3b24ae91b6a9cfd9639128a88f61a35 |
| SSDeep | 12288:4qGfwI82fIh55TEYeSYCN0WMdcj1dOhw8NQElgdnfzywRs8si:QfwI/QZXPUcj1Yhw8KESbDs |
| TLSH | 69E42246B5EDFF63D6A362B08CCC80DE156DFD725FA6D627B600730F40342E6A90A259 |
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 10
STICH kept: 1secondary ignored: 9
bin
4img
1oox:metadata
1oox:style
1oox:theme
1xml
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
ole:doc>oox:xlsx>oox:media>ole:doc
Shape
ole:doc>oox:xlsx>oox:media>ole:doc
4 nodes
| Name | Value |
|---|---|
| Version | 1.4 |
| Author | City of Johannesburg |
| CreationDate | D:20260622150000+02'00' |
| Subject | Account Number : 556736545 |
| Title | Tax Invoice |
| Version | 1.7 |
| CreationDate | D:20250908111410 |
| Creator | PDFium |
| Producer | PDFium |
| /CreationDate | D:20250908111410 |
| /Creator | PDFium |
| /Producer | PDFium |