Suspicious
Suspect

1af5652729373e8e242b686ee496b76e

Share on LinkedIn
Print
MS Office Document
MD5: 1af5652729373e8e242b686ee496b76e
Size: 998.91 KB
application/vnd.ms-office

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 1af5652729373e8e242b686ee496b76e
Sha1 3bd6c11a581816adaa1e07931430ecd6fc6a8bb2
Sha256 1dba06cbe81e5e85b18c4ecd633002fa190788431f79d6fc332758ac8becea91
Sha384 7acfc414437213fb6ccaab177d3dfe74470661abff3754e4921714964bb2b116b3c07a0703a03c7a00ed544506a37d60
Sha512 0ba8925106f437203222e82fcf6665b7e1d98b01da65d0b4139778dee330cf28cf4657bb0c862b36f2f5d53b1e711536aa3a5a2d3b7018ec380bbd95f9c044e4
SSDeep 24576:DfwI/ur1PbwntCT0rcEW24VJ+VYdUdH9vVsS6jRx6RjgET:DfwI2SntJVG+GdUp9vVsScx6p
TLSH F525231BFF78D62FD362497440E7C633041CAD81B7A9A2A73324B30DA7326A515CB769
1af5652729373e8e242b686ee496b76e
Root Entry
CompObj
Workbook
SummaryInformation
DocumentSummaryInformation
MBD0002DEAC
[Content_Types].xml
_rels
.rels
xl
_rels
workbook.xml.rels
workbook.xml
sharedStrings.xml
styles.xml
theme
theme1.xml
worksheets
_rels
sheet1.xml.rels
sheet1.xml
drawings
_rels
vmlDrawing1.vml.rels
vmlDrawing1.vml
media
image2.emf
image1.emf
embeddings
oleObject2.bin
Root Entry
Ole
CompObj
CONTENTS
Text (Preview)
#Stream obj 5 0
#Stream obj 10 0
#Stream obj 11 0
#Stream obj 15 0
#Stream obj 16 0
#Stream obj 17 0
oleObject1.bin
Root Entry
CONTENTS
Text (Preview)
#Stream obj 5 0
#Stream obj 7 0
#Stream obj 11 0
#Stream obj 15 0
#Stream obj 19 0
Structure
printerSettings
printerSettings1.bin
docProps
thumbnail.wmf
core.xml
app.xml
CompObj
MBD0002DEAD
Ole
_VBA_PROJECT_CUR
PROJECT
PROJECTwm
VBA
dir
_VBA_PROJECT
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 9 STICH kept: 1secondary ignored: 8
bin 4oox:metadata 1oox:style 1oox:theme 1xml 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path ole:doc>oox:xlsx>oox:media>ole:doc
Shape ole:doc>oox:xlsx>oox:media>ole:doc
4 nodes
Name Value
Version
1.7
CreationDate
D:20250908110839
Creator
PDFium
Producer
PDFium
/CreationDate
D:20250908110839
/Creator
PDFium
/Producer
PDFium
Version
1.7
CreationDate
D:20250908111410
Creator
PDFium
Producer
PDFium
/CreationDate
D:20250908111410
/Creator
PDFium
/Producer
PDFium
An error has occurred. This application may no longer respond until reloaded. Reload 🗙