48264648f9c57c41ce1dda7262bf7cad

MS Office Document

MD5: 48264648f9c57c41ce1dda7262bf7cad

Size: 10.23 MB

application/vnd.ms-office

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	48264648f9c57c41ce1dda7262bf7cad
Sha1	2169a21ac5dc32e881c1cc8c8bd1211ffe06467d
Sha256	2f093f8d688bec29b1944ece953d4b60c428388152ddf12d973343750db93aa3
Sha384	557d1d19f87fd28db4d94aeeeaf1e87bd08f9a3956b156063222a33e76f0bb5b14398511b1bf1a9ff34cbd63d7c1c789
Sha512	b028de168357c4a927217befb9c87cd290a6233de9dbb4409b58d796ba74a08ff08058695a36fe078e871ab9b5414eb3282786dda027032fa07ddc2636bd7dce
SSDeep	196608:6eq5KqDBCDkStMQEyeq5KqDBCDkSt3eq5KqDBCDkStseq5KqDBCDkSt:3q5VDBCDxMQEPq5VDBCDxOq5VDBCDxRT
TLSH	33A6233267E8D425F1B60B3AEC3686B16A39BC10DF15C40F2364785D6972D81C6A37BB

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 13 STICH kept: 2secondary ignored: 11

bin 9img 2

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path ole:doc>pe:dll>pe:dll

Shape ole:doc>pe:dll>pe:dll

3 nodes

Path ole:doc>pe:dll

Shape ole:doc>pe:dll

2 nodes

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

No malware configuration was found at this point.

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

48264648f9c57c41ce1dda7262bf7cad › Root Entry › 䈍䄩䏸䞷䄦䠥 › ScreenConnect.Client.dll

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

You must be signed in to view YARA rules.