Suspicious
Suspect

751822943f11796dd7f81fd3e9696d29

MS Office Document
MD5: 751822943f11796dd7f81fd3e9696d29
Size: 802.82 KB
application/vnd.ms-office

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 751822943f11796dd7f81fd3e9696d29
Sha1 6a1c199059827945852557aa9541a74677b2c1ab
Sha256 d26c2fb14d85c8d1d31bb271590c9c9d694a891e2db4385e6c7dc16bf6c9d481
Sha384 35955ec0a9d10b3a487080756151f3d3cab144980a6382f3de1faea4588f5339e4636e5066d16c8521068fa51eefac04
Sha512 25911959a7720ee15c0468c8f1204077c7f08e2aa0454cdce0296388d182a95d8ac2eb3d2e547c3b2d1601e2b5a08b2dedc9ee004c6c2fd586aff8be0bb9c7b1
SSDeep 12288:ySUGfwI82NBzTJSdXdw88AhUepk+G/799qdKFBaPNUeVoSZV6Ft28HEU2BFA8dA5:yofwI/77deXG/59nFB+oS36a8lm2o
TLSH 220523A4BEE2E623C16279B018952ADA511DFCC88B6FE61F7131B32F25313E5C19B518
751822943f11796dd7f81fd3e9696d29
Root Entry
CompObj
Workbook
SummaryInformation
DocumentSummaryInformation
MBD003508D2
[Content_Types].xml
_rels
.rels
xl
_rels
workbook.xml.rels
workbook.xml
sharedStrings.xml
styles.xml
theme
theme1.xml
worksheets
_rels
sheet1.xml.rels
sheet1.xml
drawings
_rels
vmlDrawing1.vml.rels
vmlDrawing1.vml
media
image2.emf
image1.emf
embeddings
oleObject2.bin
Root Entry
Ole
CompObj
CONTENTS
Text (Preview)
#Stream obj 5 0
#Stream obj 10 0
#Stream obj 11 0
#Stream obj 15 0
#Stream obj 16 0
#Stream obj 17 0
oleObject1.bin
Root Entry
CONTENTS
#Stream obj 570 0
#Stream obj 569 0
#Stream obj 574 0
#Stream obj 9 0
#Stream obj 4 0
#Stream obj 18 0
#Stream obj 21 0
#Stream obj 21 0-preview.png
#Stream obj 20 0
#Stream obj 575 0
#Stream obj 31 0
#Stream obj 537 0
#Stream obj 577 0
Structure
printerSettings
printerSettings1.bin
docProps
thumbnail.wmf
core.xml
app.xml
CompObj
MBD003508D3
Ole
_VBA_PROJECT_CUR
PROJECT
PROJECTwm
VBA
dir
_VBA_PROJECT
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 10 STICH kept: 1secondary ignored: 9
bin 4img 1oox:metadata 1oox:style 1oox:theme 1xml 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path ole:doc>oox:xlsx>oox:media>ole:doc
Shape ole:doc>oox:xlsx>oox:media>ole:doc
4 nodes
Name Value
Version
1.7
Author
dodisko
CreationDate
D:20250812165002+03'00'
Creator
Microsoft® Word 2021
ModifiedDate
D:20250812165002+03'00'
Title
Microsoft Word - PROFORMA INVOICE.docx
Producer
Microsoft® Word 2021
/Title
Microsoft Word - PROFORMA INVOICE.docx
/Author
dodisko
/Creator
Microsoft® Word 2021
/CreationDate
D:20250812165002+03'00'
/ModDate
D:20250812165002+03'00'
/Producer
Microsoft® Word 2021
Version
1.7
CreationDate
D:20250908111410
Creator
PDFium
Producer
PDFium
/CreationDate
D:20250908111410
/Creator
PDFium
/Producer
PDFium
751822943f11796dd7f81fd3e9696d29
Root Entry
CompObj
Workbook
SummaryInformation
DocumentSummaryInformation
MBD003508D2
[Content_Types].xml
_rels
.rels
xl
_rels
workbook.xml.rels
workbook.xml
sharedStrings.xml
styles.xml
theme
theme1.xml
worksheets
_rels
sheet1.xml.rels
sheet1.xml
drawings
_rels
vmlDrawing1.vml.rels
vmlDrawing1.vml
media
image2.emf
image1.emf
embeddings
oleObject2.bin
Root Entry
Ole
CompObj
CONTENTS
Text (Preview)
#Stream obj 5 0
#Stream obj 10 0
#Stream obj 11 0
#Stream obj 15 0
#Stream obj 16 0
#Stream obj 17 0
oleObject1.bin
Root Entry
CONTENTS
#Stream obj 570 0
#Stream obj 569 0
#Stream obj 574 0
#Stream obj 9 0
#Stream obj 4 0
#Stream obj 18 0
#Stream obj 21 0
#Stream obj 21 0-preview.png
#Stream obj 20 0
#Stream obj 575 0
#Stream obj 31 0
#Stream obj 537 0
#Stream obj 577 0
Structure
printerSettings
printerSettings1.bin
docProps
thumbnail.wmf
core.xml
app.xml
CompObj
MBD003508D3
Ole
_VBA_PROJECT_CUR
PROJECT
PROJECTwm
VBA
dir
_VBA_PROJECT
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙