MS Office Document file analysis – ebd865e5901b

This sample is a 1016 KB MS Office Document for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 27 embedded or derived files. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256: ebd865e5901bd5881f6a932d5f7a58e69ef54d25a58df50547e1b1fc8612789d
MD5: 5084e4fb2cf466f7369eb593e6ef44de
Verdict: Inconclusive
File type: MS Office Document · 1016 KB

Cite this report: https://app.malva.re/sha256/ebd865e5901bd5881f6a932d5f7a58e69ef54d25a58df50547e1b1fc8612789d

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

Microsoft Office Document

Size

1.04 MB · 1,040,384 B

First seen

2026-10-21 19:15 · 7 days ago

Last seen

2026-10-21 19:15 · 7 days ago

Last analysis

2026-10-21 19:15 · 7 days ago

Hashes

MD5 5084e4fb2cf466f7369eb593e6ef44de Sha1 b4418cbc128f4070a76559a2fc37b6c745d97f74 Sha256 ebd865e5901bd5881f6a932d5f7a58e69ef54d25a58df50547e1b1fc8612789d Sha384 939d1a7a62308bbca80de85c9b2fa66e429fadc7ad438480cf7e1c908853eb70809fc40e3870cfdd6a7f8734d2b9c78b Sha512 456b39245d06c8d0a4333a093be7825d944fb273f3df8c9d858f09065075164fde92284a830ee07bbb1cb52d81c7881812e9751ad4d51fbc474c813ed184ebac SSDeep 12288:YkqPZCdl7pqpj6EbqrXrQORigBGlL4hfuSEtOSwCz6Fy1sYXNK/kE65w5c16mONp:MCdl18X9L4lNEt/zRB9Va526mO8Ceds TLSH 992533237366E139C7C017F7DCCFB6618E236E56176624982349F68C46F038B18AADB5

28 files

OFF5084e4fb2cf466f7369eb593e6ef44de

EXEflsbXtUG8AjF.ssJp67tuvwZberesU

BINRoot Entry

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 3 STICH kept: 2secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path ole:doc>bin>pe:exe

Shape ole:doc>bin>pe:exe

3 nodes

Path ole:doc>pe:exe

Shape ole:doc>pe:exe

2 nodes

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

5084e4fb2cf466f7369eb593e6ef44de

Overview

Summary by MalvaGPT

Characteristics

File Structure

Artefacts1

5084e4fb2cf466f7369eb593e6ef44de (1.04 MB)

File Structure

Artefacts1