Suspicious
Suspect

736abe66cb60a119533dfa4a4b99057d

MS Office Document
MD5: 736abe66cb60a119533dfa4a4b99057d
Size: 759.81 KB
application/vnd.ms-office

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 736abe66cb60a119533dfa4a4b99057d
Sha1 3c5cf8e5638c46a431604f08900ada9ac8e777ed
Sha256 4f6dd60272ddb143ff7d62ca1d0acf127e7333254089d64bfbb768dc288fdb89
Sha384 a82ee8d6d3e13e18ae626595998f28fa48aef1b654fc0d340de5fc95fe5f05a4e76aa41a4a88bd7d6f52af235e2bca93
Sha512 2f1bb13188ed04578a17f1dd8e8ea76bca4bb8f9aa705a497c7c49126edd753c9f845ea3e3494b90cffb1c5a6045cb28cb7db0f151b825920761c3025e49e61a
SSDeep 12288:++32xSsLHMSCiAaLflE/MQUW4ptNy0xnK1zKaKlCFsOv6eLyNA2s4:+NxSsIFiLLflEBputK1zKRlKpiCyCj4
TLSH 17F42322BDF0D73BC1B558385ED88E77522CFC296E42C29B3081F70D1A757A5E1EA660
736abe66cb60a119533dfa4a4b99057d
Root Entry
CompObj
Workbook
SummaryInformation
DocumentSummaryInformation
MBD009A6DC5
[Content_Types].xml
_rels
.rels
xl
_rels
workbook.xml.rels
workbook.xml
sharedStrings.xml
drawings
_rels
vmlDrawing1.vml.rels
vmlDrawing1.vml
worksheets
_rels
sheet1.xml.rels
sheet1.xml
theme
theme1.xml
styles.xml
media
image1.emf
embeddings
oleObject1.bin
Root Entry
Ole
CompObj
CONTENTS
Text (Preview)
#Stream obj 5 0
#Stream obj 7 0
#Stream obj 11 0
#Stream obj 15 0
#Stream obj 19 0
Structure
printerSettings
printerSettings1.bin
docProps
thumbnail.wmf
core.xml
app.xml
CompObj
MBD009A6DC6
Ole
_VBA_PROJECT_CUR
PROJECT
PROJECTwm
VBA
dir
_VBA_PROJECT
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 9 STICH kept: 1secondary ignored: 8
bin 4oox:metadata 1oox:style 1oox:theme 1xml 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path ole:doc>oox:xlsx>oox:media>ole:doc
Shape ole:doc>oox:xlsx>oox:media>ole:doc
4 nodes
Name Value
Version
1.7
CreationDate
D:20250908110839
Creator
PDFium
Producer
PDFium
/CreationDate
D:20250908110839
/Creator
PDFium
/Producer
PDFium
736abe66cb60a119533dfa4a4b99057d
Root Entry
CompObj
Workbook
SummaryInformation
DocumentSummaryInformation
MBD009A6DC5
[Content_Types].xml
_rels
.rels
xl
_rels
workbook.xml.rels
workbook.xml
sharedStrings.xml
drawings
_rels
vmlDrawing1.vml.rels
vmlDrawing1.vml
worksheets
_rels
sheet1.xml.rels
sheet1.xml
theme
theme1.xml
styles.xml
media
image1.emf
embeddings
oleObject1.bin
Root Entry
Ole
CompObj
CONTENTS
Text (Preview)
#Stream obj 5 0
#Stream obj 7 0
#Stream obj 11 0
#Stream obj 15 0
#Stream obj 19 0
Structure
printerSettings
printerSettings1.bin
docProps
thumbnail.wmf
core.xml
app.xml
CompObj
MBD009A6DC6
Ole
_VBA_PROJECT_CUR
PROJECT
PROJECTwm
VBA
dir
_VBA_PROJECT
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙