This sample is a 2.3 MB MS Office Document. Malva.RE parsed it statically and found no known malware family, configuration or malicious signature. Static analysis extracted 45 embedded or derived files. It matches 26 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.001. Static analysis cannot prove a file is harmless: an unknown or heavily packed threat can go undetected. The file was parsed and decompiled, never executed.
- SHA256
- 01a1f73a1cf5f52ffe9c8091cc04d15c5cccaf67a8f66c56bf6b398303197d37
- MD5
- 6db04a460973dc9703fef6e6bee08982
- Verdict
- No known threat found
- File type
- MS Office Document · 2.3 MB
Cite this report: https://app.malva.re/sha256/01a1f73a1cf5f52ffe9c8091cc04d15c5cccaf67a8f66c56bf6b398303197d37
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
bin
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
ole:doc>scr:ps1~T1027~T1059.001
ole:doc>scr:ps1