Suspicious
Suspect

PDF @0x00000000

MS Office Document
MD5: c5aa116f5515e660b53ff4bc50f4b4f1
Size: 670.21 KB
application/vnd.ms-office

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 c5aa116f5515e660b53ff4bc50f4b4f1
Sha1 1bdbd8ca44f9ca79dc2316291c37b21cc09f0c9e
Sha256 41b48f4d9714d0341dac4d33baca3c2c8e6ccb0f255f1a07f82f0c35162067f4
Sha384 408830861a6ab5ff801ffeb01a5ea45fd8526906b13e609b11015ffa2f5988a4e32ce93bd4a96dadd797dfdc7427b1f8
Sha512 621a55764bfe17d49e8c5becf4e4cd3384001916e65c3ff4d9ab6862cc0ff3e2fb2231d89411cced34527d102b228db5a865329c29d00e4c00a5576f7282cd51
SSDeep 12288:nXjP1wRBME1LrwCGyzcdd1OJZ1gbvUxnoZXc:TPErstOJfgbvUxoZX
TLSH CAE4F14A75A9D98AC3BA57F15FC2C0D7820EBEA28E8A4127714E775F2F32E51EC03141
c5aa116f5515e660b53ff4bc50f4b4f1
Root Entry
CompObj
Workbook
SummaryInformation
DocumentSummaryInformation
MBD0046FB8C
Workbook
SummaryInformation
DocumentSummaryInformation
MBD001CD4CA
Ole
CompObj
CONTENTS
#Stream {UglyToad.PdfPig.Core.XrefLocation}
#Stream {UglyToad.PdfPig.Core.XrefLocation}.exif
#Stream {UglyToad.PdfPig.Core.XrefLocation}-preview.png
Structure
MBD0046FB8D
Ole
_VBA_PROJECT_CUR
PROJECT
PROJECTwm
VBA
dir
_VBA_PROJECT
Name Value
CONTENTS
1.7
CONTENTS
D:20250805070422+02'00'
CONTENTS
abas Version 2019r4n20p60
CONTENTS
D:20250819130104+08'00'
CONTENTS
iText 2.1.7 by 1T3XT
CONTENTS
D:20250805070422+02'00'
CONTENTS
abas Version 2019r4n20p60
CONTENTS
D:20250819130104+08'00'
CONTENTS
iText 2.1.7 by 1T3XT
c5aa116f5515e660b53ff4bc50f4b4f1
Root Entry
CompObj
Workbook
SummaryInformation
DocumentSummaryInformation
MBD0046FB8C
Workbook
SummaryInformation
DocumentSummaryInformation
MBD001CD4CA
Ole
CompObj
CONTENTS
#Stream {UglyToad.PdfPig.Core.XrefLocation}
#Stream {UglyToad.PdfPig.Core.XrefLocation}.exif
#Stream {UglyToad.PdfPig.Core.XrefLocation}-preview.png
Structure
MBD0046FB8D
Ole
_VBA_PROJECT_CUR
PROJECT
PROJECTwm
VBA
dir
_VBA_PROJECT
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙