Suspect
73f72c2649372e5fefaf838b652318cd
MS Office Document
MD5: 73f72c2649372e5fefaf838b652318cd
Size: 331.26 KB
application/vnd.ms-office
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | 73f72c2649372e5fefaf838b652318cd |
| Sha1 | 97aad53a5f65dc0e17f73358271571ba3d5b2570 |
| Sha256 | 61158c66d85faee22838a4e9ffc88eb40b3f6dc9166f1b20bcc89267683d16fe |
| Sha384 | 96ae1be4b8c1016b858c9915bd194fea06733eca469998a12d51891e9b7b4e83e65c4a532c4a54eccc256efefd631db9 |
| Sha512 | 2a62477b69a6ffc53e1c1cdd402a1c00133a7e744d7c50aeea1da0b2869618f17d554204918485517b2c962538838f64eb867548d73fbc0d3d4ff0036f602d62 |
| SSDeep | 6144://8QexEinVQ5yEmm6O1O/W4+jHsE+pOZfqiZGSilZbeBcVdU9eMR3QQ/UEZoaCeh:cQeNVbE6eOOtjn1fGbaBQU913zF |
| TLSH | DB64126832F2C793FCD7E5399DC9C0EB9602FC264A76974F318C736E47B5252482224A |
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 12
STICH kept: 2secondary ignored: 10
bin
5img
1oox:metadata
1oox:style
1oox:theme
1xml
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
ole:doc>oox:xlsx>oox:media>pdf>pdf
Shape
ole:doc>oox:xlsx>oox:media>pdf>pdf
5 nodes
Path
ole:doc>oox:xlsx>oox:media>ole:doc
Shape
ole:doc>oox:xlsx>oox:media>ole:doc
4 nodes
| Name | Value |
|---|---|
| Version | 1.4 |
| CreationDate | D:20220603065428-04'00' |
| Creator | Apache FOP Version 1.0 |
| Producer | Apache FOP Version 1.0 |
| Version | 1.4 |
| CreationDate | D:20260910044932+00'00' |
| Creator | |
| ModifiedDate | D:20260910044932+00'00' |
| Title | SLES CALIBRATION PRIVATE LIMITED |
| Producer | Skia/PDF m152 |
| /Title | SLES CALIBRATION PRIVATE LIMITED |
| /Creator | Apache FOP Version 1.0 |
| /Creator | |
| /Producer | Skia/PDF m152 |
| /CreationDate | D:20260910044932+00'00' |
| /ModDate | D:20260910044932+00'00' |
| /Producer | Apache FOP Version 1.0 |
| /CreationDate | D:20220603065428-04'00' |
| Version | 1.4 |
| CreationDate | D:20220603065428-04'00' |
| Creator | Apache FOP Version 1.0 |
| Producer | Apache FOP Version 1.0 |
| Version | 1.4 |
| CreationDate | D:20260910044932+00'00' |
| Creator | |
| ModifiedDate | D:20260910044932+00'00' |
| Title | SLES CALIBRATION PRIVATE LIMITED |
| Producer | Skia/PDF m152 |
| /Creator | Apache FOP Version 1.0 |
| /Producer | Apache FOP Version 1.0 |
| /CreationDate | D:20220603065428-04'00' |
| /Title | SLES CALIBRATION PRIVATE LIMITED |
| /Creator | |
| /Producer | Skia/PDF m152 |
| /CreationDate | D:20260910044932+00'00' |
| /ModDate | D:20260910044932+00'00' |
No malware configuration was found at this point.
You must be signed in to view YARA rules.