Suspicious
Suspect

3a1f44b80498f287b620ba61c42e97a4

Share on LinkedIn
Print
MS Office Document
MD5: 3a1f44b80498f287b620ba61c42e97a4
Size: 454.14 KB
application/vnd.ms-office

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 3a1f44b80498f287b620ba61c42e97a4
Sha1 c20dfdae14195d7f5274f3991d29a0f7dca615b0
Sha256 deba3a2b25f36e6296ef3bd1ae4632dd1e7dab22f680ce4d1e87e03b59d62247
Sha384 e3a80b747d6fde135fc26adbc42a8f3ae8c4237843729be05b3c664bc9a19bc977f4b624d2f16d6c56d20403c8737732
Sha512 ad9056b6c54fe046e7157947cd427f3fbba6963b5ba3b33c6c6897a462d45716856d278f38b3d18085d13e644b10b8b61aa072f321379a9c1044bb70310d0ecc
SSDeep 12288:hBzTJSdXdw88AhUWgNCK99qdKFEH+r0pGimzu:P7dWg8Q9nFEHzpGA
TLSH 26A412A132B2D72BC45368FDD9D8248F0316FC968F4A955B7670F32E583A7CA9024D1E
3a1f44b80498f287b620ba61c42e97a4
Root Entry
CompObj
Workbook
SummaryInformation
DocumentSummaryInformation
MBD00137620
[Content_Types].xml
_rels
.rels
xl
_rels
workbook.xml.rels
workbook.xml
sharedStrings.xml
drawings
_rels
vmlDrawing1.vml.rels
vmlDrawing1.vml
worksheets
_rels
sheet1.xml.rels
sheet1.xml
theme
theme1.xml
styles.xml
media
image1.emf
embeddings
oleObject1.bin
Root Entry
Ole
CompObj
CONTENTS
#Stream obj 570 0
#Stream obj 569 0
#Stream obj 574 0
#Stream obj 9 0
#Stream obj 4 0
#Stream obj 18 0
#Stream obj 21 0
#Stream obj 21 0-preview.png
#Stream obj 20 0
#Stream obj 575 0
#Stream obj 31 0
#Stream obj 537 0
#Stream obj 577 0
Structure
printerSettings
printerSettings1.bin
docProps
thumbnail.wmf
core.xml
app.xml
CompObj
MBD00137621
Ole
_VBA_PROJECT_CUR
PROJECT
PROJECTwm
VBA
dir
_VBA_PROJECT
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 10 STICH kept: 1secondary ignored: 9
bin 4img 1oox:metadata 1oox:style 1oox:theme 1xml 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path ole:doc>oox:xlsx>oox:media>ole:doc
Shape ole:doc>oox:xlsx>oox:media>ole:doc
4 nodes
Name Value
Version
1.7
Author
dodisko
CreationDate
D:20250812165002+03'00'
Creator
Microsoft® Word 2021
ModifiedDate
D:20250812165002+03'00'
Title
Microsoft Word - PROFORMA INVOICE.docx
Producer
Microsoft® Word 2021
/Title
Microsoft Word - PROFORMA INVOICE.docx
/Author
dodisko
/Creator
Microsoft® Word 2021
/CreationDate
D:20250812165002+03'00'
/ModDate
D:20250812165002+03'00'
/Producer
Microsoft® Word 2021
An error has occurred. This application may no longer respond until reloaded. Reload 🗙