Suspicious
Suspect

3fb1c212e0e1f2b02a6c5fb82c43bfea

Share on LinkedIn
Print
MS Office Document
MD5: 3fb1c212e0e1f2b02a6c5fb82c43bfea
Size: 998.91 KB
application/vnd.ms-office

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 3fb1c212e0e1f2b02a6c5fb82c43bfea
Sha1 8307b8b713b7f4107b6ecc678971a9c1b5a01c5d
Sha256 05fd60735b593c0e809807b14f7d0d1d717aba1fdd62171fbf15ae771846bb3e
Sha384 9e53238f119a5ddcdfd350dc23571b6052f93d27943e6151e7ce63a331aac524f77c786c1e59e9833ae4526eb8c0320c
Sha512 426f07e9820a56068b6475a9986a5774c3a940c1ffadacdf0105a4714dd58c8c35223beba915d0560ec7fb45edfa942aec4a995437e48aaedad81115c5d8d24f
SSDeep 24576:ifwI/uycZyYKbcp0NjdGAjPTExjhsE+K6G:ifwIJYKbcKNAALT6SJ
TLSH D4252349FB9FCB67C09369399496C49E015EFD81FE0AD20B33613B1E6131627E6CB624
3fb1c212e0e1f2b02a6c5fb82c43bfea
Root Entry
CompObj
Workbook
SummaryInformation
DocumentSummaryInformation
MBD000998CB
[Content_Types].xml
_rels
.rels
xl
_rels
workbook.xml.rels
workbook.xml
sharedStrings.xml
styles.xml
theme
theme1.xml
worksheets
_rels
sheet1.xml.rels
sheet1.xml
drawings
_rels
vmlDrawing1.vml.rels
vmlDrawing1.vml
media
image2.emf
image1.emf
embeddings
oleObject2.bin
Root Entry
Ole
CompObj
CONTENTS
Text (Preview)
#Stream obj 5 0
#Stream obj 10 0
#Stream obj 11 0
#Stream obj 15 0
#Stream obj 16 0
#Stream obj 17 0
oleObject1.bin
Root Entry
CONTENTS
Text (Preview)
#Stream obj 5 0
#Stream obj 7 0
#Stream obj 11 0
#Stream obj 15 0
#Stream obj 19 0
Structure
printerSettings
printerSettings1.bin
docProps
thumbnail.wmf
core.xml
app.xml
CompObj
MBD000998CC
Ole
_VBA_PROJECT_CUR
PROJECT
PROJECTwm
VBA
dir
_VBA_PROJECT
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 9 STICH kept: 1secondary ignored: 8
bin 4oox:metadata 1oox:style 1oox:theme 1xml 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path ole:doc>oox:xlsx>oox:media>ole:doc
Shape ole:doc>oox:xlsx>oox:media>ole:doc
4 nodes
Name Value
Version
1.7
CreationDate
D:20250908110839
Creator
PDFium
Producer
PDFium
/CreationDate
D:20250908110839
/Creator
PDFium
/Producer
PDFium
Version
1.7
CreationDate
D:20250908111410
Creator
PDFium
Producer
PDFium
/CreationDate
D:20250908111410
/Creator
PDFium
/Producer
PDFium
An error has occurred. This application may no longer respond until reloaded. Reload 🗙