Suspicious
Suspect

ccd171619f39bc72ea80336320cff5f7

MS Office Document
MD5: ccd171619f39bc72ea80336320cff5f7
Size: 6.1 MB
application/vnd.ms-office

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 ccd171619f39bc72ea80336320cff5f7
Sha1 bd50e55f2ac749f2250759b641fa663b3369a3b0
Sha256 03d35b441b32a0acde26be40c33b708fe2d6a26290230b43aefab99191d3996d
Sha384 001931ab7dbcf1b786fab2f02522864b23e85edb55dd721186635688d40e713e1022e62dbc45fa9a743a96bb9be0fd94
Sha512 e4bfc20ecc247005720d2a400213c7f1ca5b48c5ad1bf29415503c6772edf38545cfd7663b58b8e1b4a18194a31b3addd27e2d95c9e055bdeb24592e20dc0882
SSDeep 98304:lNq4L6KU5auvV4sZM5ZaJlUFl0zsC0xP0SzuRDGB2iVQ0tM6hxWXwLaJkY/tkjkp:fqG6KeVvVpAanUD0zsC0xsSyFtKVMm0h
TLSH 055633C6B8CD3770C08BC7728292669E703E7FC17E3A9D5776D87A091EB16149A7A340
Root Entry
䡀䌏䈯
䡀䈖䌧䠤
䡀䌋䄱䜵
䄰䑬䞁䄦䠥
䡀㬿䏲䐸䖱
䡀㽿䅤䈯䠶
䡀䈏䗤䕸䠨
䡀䓞䕪䇤䠨
䡀䕙䓲䕨䜷
Overlay_1ebc3c23.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.fn>
.<]C
.!&5
.rsrc
.reloc
Resources
RT_MANIFEST
ID:0002
ID:1033
䡀䌍䈵䗦䕲䠼
䡀䒌䓰䑲䑨䠷
䡀㼿䕷䑬㭪䗤䠤
䡀㼿䕷䑬㹪䒲䠯
䡀㿿䏤䇬䗤䒬䠱
䡀䖖㯬䏬㱨䖤䠫
䡀䘌䗶䐲䆊䌷䑲
䡀䄕䑸䋦䒌䇱䗬䒬䠱
䡀䇊䌰㾱㼒䔨䈸䆱䠨
䡀䈏䗤䕸㬨䐲䒳䈱䗱䠶
䡀䑒䗶䏤㾯㼒䔨䈸䆱䠨
䡀䇊䌰㮱䈻䘦䈷䈜䘴䑨䈦
䡀䇊䗹䛎䆨䗸㼨䔨䈸䆱䠨
䡀䑒䗶䏤㮯䈻䘦䈷䈜䘴䑨䈦
SummaryInformation
Bim931989
STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 3
Root Entry
䡀䌏䈯
䡀䈖䌧䠤
䡀䌋䄱䜵
䄰䑬䞁䄦䠥
䡀㬿䏲䐸䖱
䡀㽿䅤䈯䠶
䡀䈏䗤䕸䠨
䡀䓞䕪䇤䠨
䡀䕙䓲䕨䜷
Overlay_1ebc3c23.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.fn>
.<]C
.!&5
.rsrc
.reloc
Resources
RT_MANIFEST
ID:0002
ID:1033
䡀䌍䈵䗦䕲䠼
䡀䒌䓰䑲䑨䠷
䡀㼿䕷䑬㭪䗤䠤
䡀㼿䕷䑬㹪䒲䠯
䡀㿿䏤䇬䗤䒬䠱
䡀䖖㯬䏬㱨䖤䠫
䡀䘌䗶䐲䆊䌷䑲
䡀䄕䑸䋦䒌䇱䗬䒬䠱
䡀䇊䌰㾱㼒䔨䈸䆱䠨
䡀䈏䗤䕸㬨䐲䒳䈱䗱䠶
䡀䑒䗶䏤㾯㼒䔨䈸䆱䠨
䡀䇊䌰㮱䈻䘦䈷䈜䘴䑨䈦
䡀䇊䗹䛎䆨䗸㼨䔨䈸䆱䠨
䡀䑒䗶䏤㮯䈻䘦䈷䈜䘴䑨䈦
SummaryInformation
Bim931989
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙