Suspicious
Suspect

a55a93669b6fda2d85ea2fcc0a165ce2

Share on LinkedIn
Print
Disk Image
MD5: a55a93669b6fda2d85ea2fcc0a165ce2
Size: 1.67 MB

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 a55a93669b6fda2d85ea2fcc0a165ce2
Sha1 eb8e98c66ea3f08de054b3dcdae38a6a754087db
Sha256 3e0273d0b3ada87e117da1c421aac04cd2b8aca20a83ba31502bb252363fa44a
Sha384 4fa2cdb01c7cd6b0bdc376b1feac240f53beec379d5ff988ce8a57405c59959a90bff72174e86824a1aa197b17308871
Sha512 3aab98af3386c595f579e740886f1cdb4c188526d4d83837026e2938f7f8b089534d30400ef345fb33949cbb3a56fe3fb94d9de60df49339daa8e8b8d2837927
SSDeep 12288:MwswAXLDXbIYO0Z8pnDV0/tMiPCvErjjHIG84iCV642dzDeDqrTNwjZx:AXLDrDZ8pDV0TCvELHi22hDsqfN
TLSH FD7539CB8C684CA5F4D3C5B35C30CA61F17D778DF41AA94A305C626C2B2B752AF1E2A5
PDF @0x00143000
Text (Preview)
[Authenticode]_2e506e5e.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
DE
.data
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:1033-preview.png
RT_GROUP_CURSOR4
ID:0065
ID:1033
RT_VERSION
ID:0001
ID:1024
ID:1028
ID:1030
ID:1031
ID:1033
ID:1036
ID:1040
ID:1041
ID:1042
ID:1043
ID:1044
ID:1045
ID:1046
ID:1049
ID:1053
ID:1054
ID:1057
ID:1058
ID:1086
ID:2052
ID:2058
ID:3076
ID:3082
RT_MANIFEST
ID:0001
ID:1033
[Authenticode]_c5453c24.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.data
.rdata
.eh_fram
.bss
.edata
.idata
.CRT
.tls
.reloc
Text (Preview)
#Stream obj 21 0
#Stream obj 24 0
#Stream obj 16 0
#Stream obj 19 0
#Stream obj 14 0
#Stream obj 14 0-preview.png
#Stream obj 2 0
Structure
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 7 STICH kept: 1secondary ignored: 6
bin 4img 2

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path img:disk>pdf
Shape img:disk>pdf
2 nodes
Name Value
ISO
DiskImage extraction mode: DiscUtils (ISO)
Version
1.7
CreationDate
D:20260827224015+04'00'
Creator
Writer
Producer
LibreOffice 24.2
Version
1.7
CreationDate
D:20260827224015+04'00'
Creator
Writer
Producer
LibreOffice 24.2
/CreationDate
D:20260827224015+04'00'
An error has occurred. This application may no longer respond until reloaded. Reload 🗙