Suspicious
Suspect

73f72c2649372e5fefaf838b652318cd

Share on LinkedIn
Print
MS Office Document
MD5: 73f72c2649372e5fefaf838b652318cd
Size: 331.26 KB
application/vnd.ms-office

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 73f72c2649372e5fefaf838b652318cd
Sha1 97aad53a5f65dc0e17f73358271571ba3d5b2570
Sha256 61158c66d85faee22838a4e9ffc88eb40b3f6dc9166f1b20bcc89267683d16fe
Sha384 96ae1be4b8c1016b858c9915bd194fea06733eca469998a12d51891e9b7b4e83e65c4a532c4a54eccc256efefd631db9
Sha512 2a62477b69a6ffc53e1c1cdd402a1c00133a7e744d7c50aeea1da0b2869618f17d554204918485517b2c962538838f64eb867548d73fbc0d3d4ff0036f602d62
SSDeep 6144://8QexEinVQ5yEmm6O1O/W4+jHsE+pOZfqiZGSilZbeBcVdU9eMR3QQ/UEZoaCeh:cQeNVbE6eOOtjn1fGbaBQU913zF
TLSH DB64126832F2C793FCD7E5399DC9C0EB9602FC264A76974F318C736E47B5252482224A
73f72c2649372e5fefaf838b652318cd
Root Entry
CompObj
Workbook
SummaryInformation
DocumentSummaryInformation
MBD00388F31
Package
[Content_Types].xml
_rels
.rels
xl
_rels
workbook.xml.rels
workbook.xml
sharedStrings.xml
styles.xml
theme
theme1.xml
worksheets
_rels
sheet1.xml.rels
sheet1.xml
drawings
_rels
vmlDrawing1.vml.rels
vmlDrawing1.vml
media
image2.emf
image1.emf
embeddings
oleObject2.bin
Root Entry
Ole10Native
Text (Preview)
Page #1
#Stream obj 6 0
#Stream obj 5 0
#Stream obj 5 0-preview.png
#Stream obj 279 0
#Stream obj 282 0
#Stream obj 283 0
#Stream obj 286 0
#Stream obj 287 0
#Stream obj 290 0
#Stream obj 291 0
#Stream obj 294 0
#Stream obj 10 0
PDF @0x000000EF
oleObject1.bin
Root Entry
Ole10Native
Text (Preview)
Page #1
Page #2
#Stream obj 28 0
#Stream obj 24 0
#Stream obj 25 0
#Stream obj 34 0
#Stream obj 30 0
#Stream obj 10 0
#Stream obj 5 0
#Stream obj 11 0
#Stream obj 16 0
#Stream obj 18 0
#Stream obj 21 0
#Stream obj 7 0
#Stream obj 31 0
Structure
PDF @0x00000095
#Stream obj 7 0
printerSettings
printerSettings1.bin
docProps
thumbnail.wmf
core.xml
app.xml
CompObj
MBD00388F32
Ole
_VBA_PROJECT_CUR
PROJECT
PROJECTwm
VBA
dir
_VBA_PROJECT
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 12 STICH kept: 2secondary ignored: 10
bin 5img 1oox:metadata 1oox:style 1oox:theme 1xml 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path ole:doc>oox:xlsx>oox:media>pdf>pdf
Shape ole:doc>oox:xlsx>oox:media>pdf>pdf
5 nodes
Path ole:doc>oox:xlsx>oox:media>ole:doc
Shape ole:doc>oox:xlsx>oox:media>ole:doc
4 nodes
Name Value
Version
1.4
CreationDate
D:20220603065428-04'00'
Creator
Apache FOP Version 1.0
Producer
Apache FOP Version 1.0
Version
1.4
CreationDate
D:20260910044932+00'00'
Creator 
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
ModifiedDate
D:20260910044932+00'00'
Title
SLES CALIBRATION PRIVATE LIMITED
Producer
Skia/PDF m152
/Title
SLES CALIBRATION PRIVATE LIMITED
/Creator
Apache FOP Version 1.0
/Creator 
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
/Producer
Skia/PDF m152
/CreationDate
D:20260910044932+00'00'
/ModDate
D:20260910044932+00'00'
/Producer
Apache FOP Version 1.0
/CreationDate
D:20220603065428-04'00'
Version
1.4
CreationDate
D:20220603065428-04'00'
Creator
Apache FOP Version 1.0
Producer
Apache FOP Version 1.0
Version
1.4
CreationDate
D:20260910044932+00'00'
Creator 
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
ModifiedDate
D:20260910044932+00'00'
Title
SLES CALIBRATION PRIVATE LIMITED
Producer
Skia/PDF m152
/Creator
Apache FOP Version 1.0
/Producer
Apache FOP Version 1.0
/CreationDate
D:20220603065428-04'00'
/Title
SLES CALIBRATION PRIVATE LIMITED
/Creator 
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
/Producer
Skia/PDF m152
/CreationDate
D:20260910044932+00'00'
/ModDate
D:20260910044932+00'00'
An error has occurred. This application may no longer respond until reloaded. Reload 🗙