PDF @0x00000000

MS Office Document

MD5: 986ad15179e746a9b602e548b9db48dd

Size: 874.5 KB

application/vnd.ms-office

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	986ad15179e746a9b602e548b9db48dd
Sha1	c2f8a042e617573635d22249f29184972072d83f
Sha256	6f558a93bcaa6c348beb37dee9a0d05cffac8b328d7300bea28123303eaf9dc4
Sha384	e5a778f4034d0de014dfad0f1890b2ea4042025ee48e3014a60c4095b4e4f8977c0b0bc70a615d270c64fc7397999bab
Sha512	d13734bd54d73f41c12a887001304697a3fa267384f29431f55dc09cc2615fe7e0aec4f6a046ab2afe1706c6278e8b3abf9d2999aa57c7ff9c58b212f544fa44
SSDeep	24576:HbLSv9k73KIt1QRT/64rmWNB27M7upNkE4u:HbL33KItmB6I327M7upqE4
TLSH	65051202FF408C77D58617351BAB61D6972DFC27EE728A4B3301732ABD766E1C96081A

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 12 STICH kept: 1secondary ignored: 11

bin 5img 2oox:metadata 1oox:style 1oox:theme 1xml 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path ole:doc>oox:xlsx>oox:media>ole:doc

Shape ole:doc>oox:xlsx>oox:media>ole:doc

4 nodes

Name	Value
Version	1.6
Producer	Oracle BI Publisher 12.2.1.4.0
/Producer	Oracle BI Publisher 12.2.1.4.0
Version	1.7
Author	Registered to: FNB
CreationDate	8/1/2026 12:03:20
Creator	OpenText Exstream Version 16.6.70 64-bit
Title	NEPS_NOT_LETT_App
/Creator	OpenText Exstream Version 16.6.70 64-bit
/CreationDate	8/1/2026 12:03:20
/Author	Registered to: FNB
/Title	NEPS_NOT_LETT_App

No malware configuration was found at this point.

You must be signed in to view YARA rules.