Suspicious
Suspect

33db07d7bae224099d9591a6f3e08187

Share on LinkedIn
Print
MS Office Document
MD5: 33db07d7bae224099d9591a6f3e08187
Size: 16.94 MB
application/vnd.ms-office

This sample is a 16.2 MB MS Office Document for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 316 embedded or derived files. It matches 25 YARA rules. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
343677702458d1e861b68b62073f10c33b5f859dbbd782c63d85547994728c23
MD5
33db07d7bae224099d9591a6f3e08187
Verdict
Inconclusive
File type
MS Office Document · 16.2 MB

Cite this report: https://app.malva.re/sha256/343677702458d1e861b68b62073f10c33b5f859dbbd782c63d85547994728c23

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
Microsoft Office Document
Size
16.94 MB · 16,936,960 B
First seen
2026-10-22 20:00 · 6 days ago
Last seen
2026-10-22 20:00 · 6 days ago
Last analysis
2026-10-22 20:00 · 6 days ago
Hashes
MD5 33db07d7bae224099d9591a6f3e08187 Sha1 c1e14f89257d8f11365305b526a7acb89cf7bf1d Sha256 343677702458d1e861b68b62073f10c33b5f859dbbd782c63d85547994728c23 Sha384 3f94c6bccc20f43163ea494551486fc98cce49ca26a625e3baf1bc4865fc14e55527b62486391207ef7a6c2dc88f41b4 Sha512 b99bbdbcc23c9b4728ce717484aae87863a848228c2e21ad584620d3866b0fb9939aa6c92dc4934b7e1854c6c4c038e8cf4bd3309ed9333bbf5bd383bab7b17e SSDeep 393216:b6ohU+8bjJ84Qq9ySZ8Es6ohU+8bjJ8P6ohU+8bjJ8y6ohU+8bjJ8:Ooh0bj19ySZzToh0bjroh0bjSoh0bj TLSH 3F0733211BF8C855EAB30B75FA7B86B44637BC51A912D05F13A03E1D1932E819EA3377

314 files
OFF33db07d7bae224099d9591a6f3e08187
DLLScreenConnect.WindowsInstaller.dll
DLLMicrosoft.Deployment.Compression.dll
DLLMicrosoft.Deployment.Compression.Cab.dll
BINCustomAction.config
DLLScreenConnect.WindowsCredentialProvider.arm64.dll
DLLScreenConnect.WindowsCredentialProvider.dll
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 10 STICH kept: 2secondary ignored: 8
bin 7img 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path ole:doc>pe:dll>pe:dll
Shape ole:doc>pe:dll>pe:dll
3 nodes
Path ole:doc>pe:dll
Shape ole:doc>pe:dll
2 nodes

PE Layout UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

An error has occurred. This application may no longer respond until reloaded. Reload 🗙