Suspect
MS Office Document
MD5: b1aaf83f6f0b7369e91a1e3278da77d4
Size: 10.23 MB
application/vnd.ms-office
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | b1aaf83f6f0b7369e91a1e3278da77d4 |
| Sha1 | 1e6dbadb8191e652eb5f987e35097e202b03ce0e |
| Sha256 | 22a6a87cdbd753077ae3cb580c7c2d21d9abc66cdc9719eebf3150dde6985671 |
| Sha384 | 8623ee02eaa1fdef0c523eb20b13b30b1094049d250866fab717bdbfa5872129f469c2be1f62dd4751050ccefcac9b09 |
| Sha512 | c87078e4c20970207879d1f00bc8b1e46a63a5918fc31f4ffd6abbae32df2e150d015d0204a24b3ee0bc19e69707fa6bd2577684f7ae24cc404dbd8ec5cac26d |
| SSDeep | 196608:deq5KqDBCDkStfQECeq5KqDBCDkSt3eq5KqDBCDkSteeq5KqDBCDkSt:8q5VDBCDxfQE/q5VDBCDxOq5VDBCDxDT |
| TLSH | 6AA6233267E8D425F1B60B3AEC3A86B16A39BD10DF15C40F2364784D6971D81C6A37BB |
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 9
STICH kept: 2secondary ignored: 7
bin
6img
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
ole:doc>pe:dll>pe:dll
Shape
ole:doc>pe:dll>pe:dll
3 nodes
Path
ole:doc>pe:dll
Shape
ole:doc>pe:dll
2 nodes