Suspicious
Suspect

eaac82ebbce56cf939fcabfdb4516d92

MS Word Document
MD5: eaac82ebbce56cf939fcabfdb4516d92
Size: 240.43 KB
application/msword

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 eaac82ebbce56cf939fcabfdb4516d92
Sha1 77b5b7023dba7ea0c4548e9da661b32080e4aa0b
Sha256 13db4973db739dc63a83c074167fcd7d9367774a0d3e9bcdae102297a41fb49a
Sha384 4269c12f32131a591e200069572bb386d771d7a82bc08f70445232f0296199aabf12d91b5c79ae69dea404df11ea93fa
Sha512 f9744171b2a2fc9c924dcc373fec7acb2d8d6a3fe60a5514240eb23449a8cff56d52795a087ee94a5820ac1ae86da82b2f96dca0446747df2f52db7b6649ac41
SSDeep 6144:1YvUlMKctMLUaUUeqM6cOyHQIQ06mNtN7Db1SlDmDK:mvUlMK8uHcjQKNf7/1SlCDK
TLSH B634F1A5850701B2C9492E277F2E914C50DE27D098B2316D24DEB9CBEF43377E6BAD81
eaac82ebbce56cf939fcabfdb4516d92
[Content_Types].xml
docProps
app.xml
core.xml
word
document.xml
fontTable.xml
reami.rtf
settings.xml
styles.xml
webSettings.xml
theme
theme1.xml
_rels
document.xml.rels
_rels
.rels
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 5 STICH kept: 1secondary ignored: 4
oox:metadata 1oox:style 1oox:theme 1xml 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path oox:docx>rtf
Shape oox:docx>rtf
2 nodes
eaac82ebbce56cf939fcabfdb4516d92
[Content_Types].xml
docProps
app.xml
core.xml
word
document.xml
fontTable.xml
reami.rtf
settings.xml
styles.xml
webSettings.xml
theme
theme1.xml
_rels
document.xml.rels
_rels
.rels
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙