Suspicious
Suspect

77e32bf1a2446dd6592f754554f17394

Share on LinkedIn
Print
MS Office Document
MD5: 77e32bf1a2446dd6592f754554f17394
Size: 9.32 MB
application/vnd.ms-office

This sample is a 8.9 MB MS Office Document for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 287 embedded or derived files. It matches 26 YARA rules. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
707a4591895f53756adc8c9de6cd65b8fb33d02f52368725740f4d4837f4951a
MD5
77e32bf1a2446dd6592f754554f17394
Verdict
Inconclusive
File type
MS Office Document · 8.9 MB

Cite this report: https://app.malva.re/sha256/707a4591895f53756adc8c9de6cd65b8fb33d02f52368725740f4d4837f4951a

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
Microsoft Office Document
Size
9.32 MB · 9,319,125 B
First seen
2026-10-29 11:45 · 4 days ago
Last seen
2026-10-29 11:45 · 4 days ago
Last analysis
2026-10-29 15:34 · 4 days ago
Hashes
MD5 77e32bf1a2446dd6592f754554f17394 Sha1 cfde94ee75f16770d9f521c5e30b2feed2e2b971 Sha256 707a4591895f53756adc8c9de6cd65b8fb33d02f52368725740f4d4837f4951a Sha384 9bfb65ae952299785323db2527b1ffde0543de9606bf42d1249aea3fb0f3a2de1870f3f56478b89d5d048a2401cf6d3c Sha512 ec7741e3f14e1a7060bee64deab3e9f8a366cd4a31e6de7f63536bcd9dc82b67285f01d4f8014de056b703f6312b94f351c9f288ef05c4eaab81019d5777eb98 SSDeep 196608:eHxcp9ym3nltDUJV+Hxcp9ym3EHxcp9ym3zHxcp9ym32Hxcp9yS:sGplplGpiGpdGpEGr TLSH 869623216BF4D278E1F12939D876A0B1A53A7D11DA23912F63247D1E3C74EC08AA3777

275 files
OFF77e32bf1a2446dd6592f754554f17394
BINScreenConnect.WindowsBackstageShell.exe.config
EXEScreenConnect.WindowsClient.exe
DLLScreenConnect.WindowsCredentialProvider.dll
EXEScreenConnect.WindowsFileManager.exe
BINServiceExeWithoutService
BINCustomAction.config
BINapp.config
BINClient.en-US.resources
BINClient.Override.en-US.resources
BINClient.Override.resources
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 8 STICH kept: 1secondary ignored: 7
bin 6img 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path ole:doc>pe:dll>pe:dll
Shape ole:doc>pe:dll>pe:dll
3 nodes

An error has occurred. This application may no longer respond until reloaded. Reload 🗙