Suspicious
Suspect

3a1f44b80498f287b620ba61c42e97a4

MS Office Document
MD5: 3a1f44b80498f287b620ba61c42e97a4
Size: 454.14 KB
application/vnd.ms-office

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 3a1f44b80498f287b620ba61c42e97a4
Sha1 c20dfdae14195d7f5274f3991d29a0f7dca615b0
Sha256 deba3a2b25f36e6296ef3bd1ae4632dd1e7dab22f680ce4d1e87e03b59d62247
Sha384 e3a80b747d6fde135fc26adbc42a8f3ae8c4237843729be05b3c664bc9a19bc977f4b624d2f16d6c56d20403c8737732
Sha512 ad9056b6c54fe046e7157947cd427f3fbba6963b5ba3b33c6c6897a462d45716856d278f38b3d18085d13e644b10b8b61aa072f321379a9c1044bb70310d0ecc
SSDeep 12288:hBzTJSdXdw88AhUWgNCK99qdKFEH+r0pGimzu:P7dWg8Q9nFEHzpGA
TLSH 26A412A132B2D72BC45368FDD9D8248F0316FC968F4A955B7670F32E583A7CA9024D1E
3a1f44b80498f287b620ba61c42e97a4
Root Entry
CompObj
Workbook
SummaryInformation
DocumentSummaryInformation
MBD00137620
[Content_Types].xml
_rels
.rels
xl
_rels
workbook.xml.rels
workbook.xml
sharedStrings.xml
drawings
_rels
vmlDrawing1.vml.rels
vmlDrawing1.vml
worksheets
_rels
sheet1.xml.rels
sheet1.xml
theme
theme1.xml
styles.xml
media
image1.emf
embeddings
oleObject1.bin
Root Entry
Ole
CompObj
CONTENTS
#Stream obj 570 0
#Stream obj 569 0
#Stream obj 574 0
#Stream obj 9 0
#Stream obj 4 0
#Stream obj 18 0
#Stream obj 21 0
#Stream obj 21 0-preview.png
#Stream obj 20 0
#Stream obj 575 0
#Stream obj 31 0
#Stream obj 537 0
#Stream obj 577 0
Structure
printerSettings
printerSettings1.bin
docProps
thumbnail.wmf
core.xml
app.xml
CompObj
MBD00137621
Ole
_VBA_PROJECT_CUR
PROJECT
PROJECTwm
VBA
dir
_VBA_PROJECT
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 10 STICH kept: 1secondary ignored: 9
bin 4img 1oox:metadata 1oox:style 1oox:theme 1xml 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path ole:doc>oox:xlsx>oox:media>ole:doc
Shape ole:doc>oox:xlsx>oox:media>ole:doc
4 nodes
Name Value
Version
1.7
Author
dodisko
CreationDate
D:20250812165002+03'00'
Creator
Microsoft® Word 2021
ModifiedDate
D:20250812165002+03'00'
Title
Microsoft Word - PROFORMA INVOICE.docx
Producer
Microsoft® Word 2021
/Title
Microsoft Word - PROFORMA INVOICE.docx
/Author
dodisko
/Creator
Microsoft® Word 2021
/CreationDate
D:20250812165002+03'00'
/ModDate
D:20250812165002+03'00'
/Producer
Microsoft® Word 2021
3a1f44b80498f287b620ba61c42e97a4
Root Entry
CompObj
Workbook
SummaryInformation
DocumentSummaryInformation
MBD00137620
[Content_Types].xml
_rels
.rels
xl
_rels
workbook.xml.rels
workbook.xml
sharedStrings.xml
drawings
_rels
vmlDrawing1.vml.rels
vmlDrawing1.vml
worksheets
_rels
sheet1.xml.rels
sheet1.xml
theme
theme1.xml
styles.xml
media
image1.emf
embeddings
oleObject1.bin
Root Entry
Ole
CompObj
CONTENTS
#Stream obj 570 0
#Stream obj 569 0
#Stream obj 574 0
#Stream obj 9 0
#Stream obj 4 0
#Stream obj 18 0
#Stream obj 21 0
#Stream obj 21 0-preview.png
#Stream obj 20 0
#Stream obj 575 0
#Stream obj 31 0
#Stream obj 537 0
#Stream obj 577 0
Structure
printerSettings
printerSettings1.bin
docProps
thumbnail.wmf
core.xml
app.xml
CompObj
MBD00137621
Ole
_VBA_PROJECT_CUR
PROJECT
PROJECTwm
VBA
dir
_VBA_PROJECT
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙