Malicious
8322869079dc5ec4cdb8e2e60adf8f5f
MS Office Document
MD5: 8322869079dc5ec4cdb8e2e60adf8f5f
Size: 290.82 KB
application/vnd.ms-office
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | 8322869079dc5ec4cdb8e2e60adf8f5f |
| Sha1 | 8c59121836bfb6f1864b68f78b2402652b5c13bb |
| Sha256 | 5b25ac29bc0dd944a14a2884b9b288b092d5e3652ba8d96f76e0cede74978c02 |
| Sha384 | 8672ed1b7cd2f377ac5070c9aa2c7dc7610e2c819cad020c87a9273a882b3f7a52efe5beb9ac34f95bb5df37e4661b09 |
| Sha512 | 373a7e372200876ff39997d849882d502d308ca46425634d2449d0095b9beb884f2992f3737d94890f4ff6b1af4ac39f58e941854af84ee2f643f6e1e7780a20 |
| SSDeep | 6144:OHsKKhxn6Pi0KP/9h2tFit9dlKdDgOYOVZZdI:OM/kPiH/9Yat9dXzOVZZdI |
| TLSH | 9854F010FB21C673F451583479D492871265EDABB945CC1A22C2770F2B7BFB88E72D2A |
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
10 / 10
Path
ole:doc~T1204~T1221>oox:xlsx>oox:media>pdf>pdf:stream>bin
Shape
ole:doc>oox:xlsx>oox:media>pdf>pdf:stream>bin
malicious
6 nodes
Path
ole:doc~T1204~T1221>oox:xlsx>oox:media>pdf>pdf:stream>img
Shape
ole:doc>oox:xlsx>oox:media>pdf>pdf:stream>img
malicious
6 nodes
| Config. Field | Value |
|---|---|
| URL distante (OLE moniker) #1 | HtTp:/huhuhuhuhuhuhuhuhuhuhu |
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with Essential
| Name | Value |
|---|---|
| Version | 1.5 |
| CreationDate | D:20261013113000Z |
| Creator | JasperReports Library version 6.20.0-2bc7ab61c56f459e8176eb05c7705e145cd400ad |
| ModifiedDate | D:20261013113000Z |
| Producer | iText 2.1.7 by 1T3XT |
| /ModDate | D:20261013113000Z |
| /Creator | JasperReports Library version 6.20.0-2bc7ab61c56f459e8176eb05c7705e145cd400ad |
| /CreationDate | D:20261013113000Z |
| /Producer | iText 2.1.7 by 1T3XT |
| Config. Field | Value |
|---|---|
| URL distante (OLE moniker) #1 | HtTp:/huhuhuhuhuhuhuhuhuhuhu |
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with Essential
You must be signed in to view YARA rules.