Suspicious
Suspect

4955ad9d29b4789784de6effee9e9792

Share on LinkedIn
Print
MS Office Document
MD5: 4955ad9d29b4789784de6effee9e9792
Size: 13.59 MB
application/vnd.ms-office

This sample is a 13 MB MS Office Document for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 98 embedded or derived files. It matches 7 YARA rules. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
7281c360399e7124638f35040995dc417f2f6591f01522a9230105831d1d513d
MD5
4955ad9d29b4789784de6effee9e9792
Verdict
Inconclusive
File type
MS Office Document · 13 MB

Cite this report: https://app.malva.re/sha256/7281c360399e7124638f35040995dc417f2f6591f01522a9230105831d1d513d

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
Microsoft Office Document
Size
13.59 MB · 13,586,432 B
First seen
2026-10-21 21:46 · 7 days ago
Last seen
2026-10-21 21:46 · 7 days ago
Last analysis
2026-10-21 21:46 · 7 days ago
Hashes
MD5 4955ad9d29b4789784de6effee9e9792 Sha1 46c706d10108c197ff3e6bc9e2fb27ce6d056243 Sha256 7281c360399e7124638f35040995dc417f2f6591f01522a9230105831d1d513d Sha384 d0edb16b444e1b42932ff813f94b8a136149ca9f32c33ebea49c9b056a6a39986b5de9e030b323dbbd5237ef328d4795 Sha512 b416d5f70ed8d83fe98cb6161d09af2d7fef0cc316b541ef653b9ec051711aeab84272bdce76645299a46b4355b26928bc2d6e7d15ecfc3656cc19892884591a SSDeep 196608:brCbaPLYRCyaMYumVVVfAmYCAqtC0aDmmt8QRXG4FWW+7TBYYQqAzKn0KSxa:mDJavDVYmYQtCbmmt3/3gFAfKSM TLSH D3D633E01FC5ABD5D6A69178E1E24558D0E2BC71C916B41BFE81FAB10E33D6602F81BC

99 files
OFF4955ad9d29b4789784de6effee9e9792
BINRvToolsMsi
BINRmmMsiFile
STICH beta

No STICH Path has been generated for this analysis yet.

6 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 6

PE Layout UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

An error has occurred. This application may no longer respond until reloaded. Reload 🗙