Suspicious
Suspect

4d4447b69b311851242fb991c0010f90

Share on LinkedIn
Print
MS Office Document
MD5: 4d4447b69b311851242fb991c0010f90
Size: 802.82 KB
application/vnd.ms-office

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 4d4447b69b311851242fb991c0010f90
Sha1 32080b241c738b5852597c9f490d118ada05c8dc
Sha256 ede77467afeef133edd2beee2d407fa9918067eaf99b898569d564b390509490
Sha384 aef00bf0aa8a59eaf4a7391954bdf2ac4eb83be6eebac89e5f7caced767b155fd84d34fff04dd180ce8485209c295917
Sha512 ca19ebd4b523dd0b280a2a75cde1d40b0d48bda29ddbcf18838ade70d84c7eb89f373345f1cd54385727d15fc4259226dcdce292e55584b8a4f998e21f70148f
SSDeep 24576:7ofwI/77dj+VzzjI9nFaGQcD6nq5Ely/8doBydb9:7ofwIj71+VzzOnFaGQ46nqM48dqyl
TLSH 6A052320FDF6DA5BD55316F588E85ACE411FFCA28B09D64F2130B32F6C35BA7449A029
4d4447b69b311851242fb991c0010f90
Root Entry
CompObj
Workbook
SummaryInformation
DocumentSummaryInformation
MBD00245ECF
[Content_Types].xml
_rels
.rels
xl
_rels
workbook.xml.rels
workbook.xml
sharedStrings.xml
styles.xml
theme
theme1.xml
worksheets
_rels
sheet1.xml.rels
sheet1.xml
drawings
_rels
vmlDrawing1.vml.rels
vmlDrawing1.vml
media
image2.emf
image1.emf
embeddings
oleObject2.bin
Root Entry
Ole
CompObj
CONTENTS
Text (Preview)
#Stream obj 5 0
#Stream obj 10 0
#Stream obj 11 0
#Stream obj 15 0
#Stream obj 16 0
#Stream obj 17 0
oleObject1.bin
Root Entry
CONTENTS
#Stream obj 570 0
#Stream obj 569 0
#Stream obj 574 0
#Stream obj 9 0
#Stream obj 4 0
#Stream obj 18 0
#Stream obj 21 0
#Stream obj 21 0-preview.png
#Stream obj 20 0
#Stream obj 575 0
#Stream obj 31 0
#Stream obj 537 0
#Stream obj 577 0
Structure
printerSettings
printerSettings1.bin
docProps
thumbnail.wmf
core.xml
app.xml
CompObj
MBD00245ED0
Ole
_VBA_PROJECT_CUR
PROJECT
PROJECTwm
VBA
dir
_VBA_PROJECT
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 10 STICH kept: 1secondary ignored: 9
bin 4img 1oox:metadata 1oox:style 1oox:theme 1xml 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path ole:doc>oox:xlsx>oox:media>ole:doc
Shape ole:doc>oox:xlsx>oox:media>ole:doc
4 nodes
Name Value
Version
1.7
Author
dodisko
CreationDate
D:20250812165002+03'00'
Creator
Microsoft® Word 2021
ModifiedDate
D:20250812165002+03'00'
Title
Microsoft Word - PROFORMA INVOICE.docx
Producer
Microsoft® Word 2021
/Title
Microsoft Word - PROFORMA INVOICE.docx
/Author
dodisko
/Creator
Microsoft® Word 2021
/CreationDate
D:20250812165002+03'00'
/ModDate
D:20250812165002+03'00'
/Producer
Microsoft® Word 2021
Version
1.7
CreationDate
D:20250908111410
Creator
PDFium
Producer
PDFium
/CreationDate
D:20250908111410
/Creator
PDFium
/Producer
PDFium
An error has occurred. This application may no longer respond until reloaded. Reload 🗙