Suspect
MS Office Document
MD5: 7b99a013055e6a424525544705845283
Size: 13.49 MB
application/vnd.ms-office
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | 7b99a013055e6a424525544705845283 |
| Sha1 | abfe27a3077d62d07fe74afc15f1f96419dcbd95 |
| Sha256 | 9e45c67ce451852534a649ccf8bee4cafe03929d59a4873c748ea992ccbc594d |
| Sha384 | 5093463ffe15501fe50727c7135030d88a53d082036bafebb73dc28c9f81a0b5db9ec723ffa5302a5ba139a294fec2f2 |
| Sha512 | f802dd1ca7dc30aaa3fc9dbf3995302ea3d8678a8b4866b21d878410d7140f66013566769fe1b7009052d4a93c1fe3fa39fea1bdeb44f067536c6220d53aab67 |
| SSDeep | 393216:CcVPOBducVPOZcVPOWcVPO3cVPO7cVPOocVPOt:CcVmBducVmZcVmWcVm3cVm7cVmocVmt |
| TLSH | CED623226AFD8598F8F39F34F93A99A5853AFC248D62C01F1759780E1972B418673373 |
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 15
STICH kept: 4secondary ignored: 11
bin
10img
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
4 / 4
Path
ole:doc>bin>pe:dll>pe:dll
Shape
ole:doc>bin>pe:dll>pe:dll
4 nodes
Path
ole:doc>pe:dll>pe:dll>pe:dll
Shape
ole:doc>pe:dll>pe:dll>pe:dll
4 nodes
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential