5a372b45285fe6f3df3ba277ee2de55d4a30fc8ef05de729cf464103632db40f
Classification: Malicious
5a372b45285fe6f3df3ba277ee2de55d4a30fc8ef05de729cf464103632db40f is a malicious file sample (Word document, 162.6 KB). Linked to Stealth Falcon activity.
Detection summary
- 0 antivirus detections (55% detection ratio)
- 1 IDS alerts
- 1 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Intrusion sets: STEALTH FALCON (G0038)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Stealth Falcon | MalwarePatrol | 2026-03-03 17:49:54 | 2026-03-03 18:04:14 | malicious-activity | G0038 Stealth Falcon |
| VB.PwShell.2 | Hybrid-Analysis | 2018-11-16 13:00:10 | 2018-11-16 13:00:10 |
Tags
apt28 fancybear group-4127 group74 irontwilight macros-on-open pawnstorm sednit sofacy strontium swallowtail tag_0700 tg-4127 tsarteam stealth falcon fruityarmor g0038 stealthfalconSample information
- Filenames
- 80e8ef78b9e28015cde4205aaa65da97.docx
- File type
- Microsoft Word 2007+
- Size
- 166504 bytes
- MD5
80e8ef78b9e28015cde4205aaa65da97- SHA-1
f25466e4820404c817eaf75818b7177891735886- SHA-256
5a372b45285fe6f3df3ba277ee2de55d4a30fc8ef05de729cf464103632db40f- First indexed
- 2018-11-16 13:00:10
- Last updated
- 2026-08-15 22:37:31
Process list
| Name | Command line |
|---|---|
| WINWORD.EXE | /n "C:\80e8ef78b9e28015cde4205aaa65da97.docx" |