Suspicious
Suspect

ccd1fc732b17a2fa68659c920991cb82

MS Office Document
MD5: ccd1fc732b17a2fa68659c920991cb82
Size: 3.9 MB
application/vnd.ms-office

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 ccd1fc732b17a2fa68659c920991cb82
Sha1 600986f5726870888b866173da59d8450f4182f7
Sha256 593eecf64a5016ff97b0ffc5b01919134a9ba00555fa61488ac89746bcb1c548
Sha384 20b76774f4c01943b1be32211d38058d9ab933deeef14ecdc58846d43b07d1b282655065b5c30522d8eda925c8098ea6
Sha512 37994862c5c9777311141009cdf14ddd3d7f8490e6fba0350d74293a64ff8cf35583bc92725d816c0fdfbad27c49e68c6a1b2d6f78b7c33ee90dd4b414abd374
SSDeep 49152:xbmBow607Gww60jMwKfVCDjMxib8A7aCxUL+s0YgBi74pHsZIP49v6kymyVCbYcC:MU0NCDPQA7Z+LAZQ7msx3ymyt
TLSH 370623137AE52BDBE9365734812213A8AB756D2083A6CF1F1290717CEE763E44F25ED0
Root Entry
䡀䈖䌧䠤
䡀䌋䄱䜵
䡀㬿䏲䐸䖱
䡀㽿䅤䈯䠶
䡀䈏䗤䕸䠨
䡀䈛䌪䗶䜵
䡀䕙䓲䕨䜷
䡀䌍䈵䗦䕲䠼
䡀䒌䓰䑲䑨䠷
䡀㼿䕷䑬㭪䗤䠤
䡀㼿䕷䑬㹪䒲䠯
䡀㿿䏤䇬䗤䒬䠱
䡀䘌䗶䐲䆊䌷䑲
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.retplne
.sxdata
.textbss
.gfids
.gehcont
.didat
.voltbl
.idata
.rsrc
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.retplne
.sxdata
.textbss
.gfids
.gehcont
.didat
.voltbl
.idata
.rsrc
Resources
RT_VERSION
ID:0001
ID:1033
䡀䇊䌰㾱㼒䔨䈸䆱䠨
䡀䈏䗤䕸㬨䐲䒳䈱䗱䠶
䡀䑒䗶䏤㾯㼒䔨䈸䆱䠨
䡀䇊䌰㮱䈻䘦䈷䈜䘴䑨䈦
䡀䇊䗹䛎䆨䗸㼨䔨䈸䆱䠨
䡀䑒䗶䏤㮯䈻䘦䈷䈜䘴䑨䈦
SummaryInformation
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 3 STICH kept: 1secondary ignored: 2
bin 2

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path ole:doc>pe:exe
Shape ole:doc>pe:exe
2 nodes
Root Entry
䡀䈖䌧䠤
䡀䌋䄱䜵
䡀㬿䏲䐸䖱
䡀㽿䅤䈯䠶
䡀䈏䗤䕸䠨
䡀䈛䌪䗶䜵
䡀䕙䓲䕨䜷
䡀䌍䈵䗦䕲䠼
䡀䒌䓰䑲䑨䠷
䡀㼿䕷䑬㭪䗤䠤
䡀㼿䕷䑬㹪䒲䠯
䡀㿿䏤䇬䗤䒬䠱
䡀䘌䗶䐲䆊䌷䑲
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.retplne
.sxdata
.textbss
.gfids
.gehcont
.didat
.voltbl
.idata
.rsrc
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.retplne
.sxdata
.textbss
.gfids
.gehcont
.didat
.voltbl
.idata
.rsrc
Resources
RT_VERSION
ID:0001
ID:1033
䡀䇊䌰㾱㼒䔨䈸䆱䠨
䡀䈏䗤䕸㬨䐲䒳䈱䗱䠶
䡀䑒䗶䏤㾯㼒䔨䈸䆱䠨
䡀䇊䌰㮱䈻䘦䈷䈜䘴䑨䈦
䡀䇊䗹䛎䆨䗸㼨䔨䈸䆱䠨
䡀䑒䗶䏤㮯䈻䘦䈷䈜䘴䑨䈦
SummaryInformation
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙