This sample is a 4.3 MB MS Office Document. Malva.RE parsed it statically and found no known malware family, configuration or malicious signature. Static analysis extracted 34 embedded or derived files. It matches 14 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.001. Static analysis cannot prove a file is harmless: an unknown or heavily packed threat can go undetected. The file was parsed and decompiled, never executed.
- SHA256
- 232a1639b1d70e7f4721b2811cb5dab3e096393d00a43bc46ba91cdcc36d9d84
- MD5
- 6e66acbc3c8abffc1d262763c4a928bc
- Verdict
- No known threat found
- File type
- MS Office Document · 4.3 MB
Cite this report: https://app.malva.re/sha256/232a1639b1d70e7f4721b2811cb5dab3e096393d00a43bc46ba91cdcc36d9d84
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
bin
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
ole:doc>scr:ps1~T1027~T1059.001
ole:doc>scr:ps1