This sample is a 744.5 KB MS Office Document for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 59 embedded or derived files. It matches 6 YARA rules. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 9de204bd2f01ad8918b9185ddb4560c616c1060404676c40ec901440d576af74
- MD5
- 0aa57643ceb62f1afc193c11ea76e6c7
- Verdict
- Inconclusive
- File type
- MS Office Document · 744.5 KB
Cite this report: https://app.malva.re/sha256/9de204bd2f01ad8918b9185ddb4560c616c1060404676c40ec901440d576af74
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
bin
4img
1oox:metadata
1oox:style
1oox:theme
1xml
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
ole:doc>oox:xlsx>oox:media>ole:doc
ole:doc>oox:xlsx>oox:media>ole:doc
| Name | Value |
|---|---|
| Version | 1.4 |
| Author | inPsKanadk |
| Version | 1.4 |
| CreationDate | D:20260911133556+05'30' |
| CreationDate | D:20260910044932+00'00' |
| Creator | |
| Creator | PDFCreator Free 5.3.1 |
| ModifiedDate | D:20260910044932+00'00' |
| ModifiedDate | D:20260911133556+05'30' |
| Title | SLES CALIBRATION PRIVATE LIMITED |
| Title | Autotech Engineers |
| Producer | Skia/PDF m152 |
| Producer | GPL Ghostscript 10.03.1 |
| /Title | SLES CALIBRATION PRIVATE LIMITED |
| /Creator | |
| /Producer | Skia/PDF m152 |
| /CreationDate | D:20260910044932+00'00' |
| /ModDate | D:20260910044932+00'00' |
| /Producer | GPL Ghostscript 10.03.1 |
| /CreationDate | D:20260911133556+05'30' |
| /ModDate | D:20260911133556+05'30' |
| /Title | Autotech Engineers |
| /Author | inPsKanadk |
| /Creator | PDFCreator Free 5.3.1 |