Suspect
MS Office Document
MD5: 4183c76f4e45d203b1ce01d203ad2bb6
Size: 13.49 MB
application/vnd.ms-office
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | 4183c76f4e45d203b1ce01d203ad2bb6 |
| Sha1 | 63292055bf236bd11584a4456115510f687ae201 |
| Sha256 | 6b79cc7d38340106c0cf18a24499d430a6319282387fdd396d4a2f7943f8dd8e |
| Sha384 | 0d914691f874ef4af569214064005ff84b5116d395629b4f3b3873ad0f5fa6fd5f5a810e501492f1d7c00461d6a2cca6 |
| Sha512 | 2b4d42eb62ccefdd6b1474f8efb44de85965bcf89085e71ef39ea04fc9c1d80a0f769ddb6e8e7f0ec535b7a7b9b5d140ea62b207f1fa384095cf149b6ec7448b |
| SSDeep | 196608:9Wh0cGwPWh0cG3Wh0cGMWh0cGNWh0cGsWh0cGTWh0cGg:9WacVWaceWacnWacSWaclWaccWacd |
| TLSH | C2D6221313ED4D5BE8B6CBB9FF3682A45B627E548E11F1DE5224790E2F3094085A23B7 |
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 10
STICH kept: 2secondary ignored: 8
bin
7img
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
ole:doc>pe:dll>pe:dll>pe:dll
Shape
ole:doc>pe:dll>pe:dll>pe:dll
4 nodes
Path
ole:doc>pe:dll>pe:dll
Shape
ole:doc>pe:dll>pe:dll
3 nodes
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential