Suspicious
Suspect

10aab9e4bcabb40ba8d27d950d5874a9

Share on LinkedIn
Print
MS Office Document
MD5: 10aab9e4bcabb40ba8d27d950d5874a9
Size: 1.36 MB
application/vnd.ms-office

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 10aab9e4bcabb40ba8d27d950d5874a9
Sha1 bb11a649142b70c03a76579279701192d7ee52ff
Sha256 a4d215f9419f2b44995b6e2086ad36478ef76e62010be2f4d54bf7aecc6967cb
Sha384 a4807d7e7111fe5506a37772a610e0fbe5c801b964c7ce4a733b183667633433e0eb663ea5f5d5ae69aed652481b5f55
Sha512 c6b3fe073c01ecba79b353eed646622d96f7b393159b67eede6333edef629918cf94feb60266c9f85e5c08154f90429bbc1d9524d534181fd975f47319f7bbd3
SSDeep 24576:t7dGXG/59nFU8UL72iP+YDrBaJC9SIk7xe1IIYxV8lA9UXBEUS1r:t7gEnFU5rP5rsIul2KU8r
TLSH 5155235BFBAADBC3D006047168CA2CE54529FC83A5124B0F32B4734DA6363B9976B35D
10aab9e4bcabb40ba8d27d950d5874a9
Root Entry
CompObj
Workbook
SummaryInformation
DocumentSummaryInformation
MBD0002A179
[Content_Types].xml
xl
_rels
workbook.xml.rels
workbook.xml
sharedStrings.xml
drawings
vmlDrawing1.vml
worksheets
sheet1.xml
styles.xml
media
image1.emf
embeddings
oleObject1.bin
Root Entry
CONTENTS
#Stream obj 570 0
#Stream obj 569 0
#Stream obj 574 0
#Stream obj 9 0
#Stream obj 4 0
#Stream obj 18 0
#Stream obj 21 0
#Stream obj 21 0-preview.png
#Stream obj 20 0
#Stream obj 575 0
#Stream obj 31 0
#Stream obj 537 0
#Stream obj 577 0
printerSettings
printerSettings1.bin
docProps
thumbnail.wmf
core.xml
app.xml
CompObj
MBD0002A17A
[Content_Types].xml
_rels
.rels
xl
_rels
workbook.xml.rels
workbook.xml
worksheets
sheet4.xml
sheet2.xml
_rels
sheet1.xml.rels
sheet2.xml.rels
sheet3.xml.rels
sheet5.xml.rels
sheet6.xml.rels
sheet3.xml
sheet1.xml
sheet6.xml
sheet5.xml
drawings
_rels
vmlDrawing1.vml.rels
vmlDrawing1.vml
sharedStrings.xml
media
image1.emf
styles.xml
embeddings
oleObject1.bin
Root Entry
Ole
CompObj
CONTENTS
Text (Preview)
#Stream obj 16 0
#Stream obj 21 0
#Stream obj 24 0
#Stream obj 23 0
#Stream obj 27 0
#Stream obj 30 0
#Stream obj 29 0
#Stream obj 8 0
#Stream obj 8 0-preview.png
#Stream obj 10 0
#Stream obj 10 0-preview.png
#Stream obj 12 0
#Stream obj 12 0-preview.png
Structure
theme
theme1.xml
printerSettings
printerSettings2.bin
printerSettings1.bin
printerSettings4.bin
printerSettings3.bin
printerSettings5.bin
docProps
thumbnail.wmf
core.xml
app.xml
MBD0002A17B
Ole
_VBA_PROJECT_CUR
PROJECT
PROJECTwm
VBA
dir
_VBA_PROJECT
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 10 STICH kept: 1secondary ignored: 9
bin 4img 1oox:metadata 1oox:style 1oox:theme 1xml 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path ole:doc>oox:xlsx>oox:media>ole:doc
Shape ole:doc>oox:xlsx>oox:media>ole:doc
4 nodes
Name Value
Version
1.4
CreationDate
D:20250910163553+03'00'
Title
Teklif Fişi
Producer
Qt 6.7.2
/Title
Teklif Fişi
/Producer
Qt 6.7.2
/CreationDate
D:20250910163553+03'00'
Version
1.7
Author
dodisko
CreationDate
D:20250812165002+03'00'
Creator
Microsoft® Word 2021
ModifiedDate
D:20250812165002+03'00'
Title
Microsoft Word - PROFORMA INVOICE.docx
Producer
Microsoft® Word 2021
/Title
Microsoft Word - PROFORMA INVOICE.docx
/Author
dodisko
/Creator
Microsoft® Word 2021
/CreationDate
D:20250812165002+03'00'
/ModDate
D:20250812165002+03'00'
/Producer
Microsoft® Word 2021
An error has occurred. This application may no longer respond until reloaded. Reload 🗙