Suspect
MS Office Document
MD5: ad867562f0766eafa3a53dd2e56a9b6f
Size: 667.14 KB
application/vnd.ms-office
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | ad867562f0766eafa3a53dd2e56a9b6f |
| Sha1 | 4c6d7de38c6449fc3bc3a3aff574ea1fbf2277bc |
| Sha256 | fab24a3d4dccd29c00dd21c86c0e66c2535dfe61c2b03314126f7fbaf2c7008b |
| Sha384 | 8dc650515218d1cd8dc92a08ab5d05d2072b0f8f26bafb38e05f51ddc4b069adb01b805adf2cf77ddd13c3b2471e2c4f |
| Sha512 | c46484f73f5e6765e3e6f9e6573a7700eee920fcaa01cbbc6c5e4e4853cc64e0515307afcf71e67cacc49b1c184d7726d62bb9fd715449d4ead195b46141c7d4 |
| SSDeep | 12288:CFZ0WCmRl6lE8TIfoCdZamw17f7krmHS1m2ID9dywDQR9q9j4fVSxOA7t:CFZSmL49kdW7f/Jiy9WSxOAJ |
| TLSH | 81E423AA31E15FA7C883583B090D9A6C0AEAFC0C8F16D8076F5436172D756781AE74DF |
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 4
STICH kept: 3secondary ignored: 1
bin
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
3 / 3
Path
ole:doc>bin>pe:exe~T1059.007>pe:rsrc>img
Shape
ole:doc>bin>pe:exe>pe:rsrc>img
technique5 nodes
Path
ole:doc>bin>pe:exe~T1059.007>pe:rsrc>bin
Shape
ole:doc>bin>pe:exe>pe:rsrc>bin
technique5 nodes