8bf02f70e1a6603c5cd2edfba87c1d0a

MS Office Document

MD5: 8bf02f70e1a6603c5cd2edfba87c1d0a

Size: 1.57 MB

application/vnd.ms-office

This sample is a 1.5 MB MS Office Document for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 244 embedded or derived files. It matches 14 YARA rules. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256: 6c055aa2fc1e9f7a6a5507a288d9a1a21b3dcd8ec81df84e1df5f6e6e7a35d8d
MD5: 8bf02f70e1a6603c5cd2edfba87c1d0a
Verdict: Inconclusive
File type: MS Office Document · 1.5 MB

Cite this report: https://app.malva.re/sha256/6c055aa2fc1e9f7a6a5507a288d9a1a21b3dcd8ec81df84e1df5f6e6e7a35d8d

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

Microsoft Office Document

Size

1.57 MB · 1,568,768 B

First seen

2026-10-11 15:15 · 17 days ago

Last seen

2026-10-11 15:15 · 17 days ago

Last analysis

2026-10-11 15:16 · 17 days ago

Hashes

MD5 8bf02f70e1a6603c5cd2edfba87c1d0a Sha1 0f2aef8059f982743d28468d6d878f9cc1b49116 Sha256 6c055aa2fc1e9f7a6a5507a288d9a1a21b3dcd8ec81df84e1df5f6e6e7a35d8d Sha384 3db13456da11fac98ccb1ae641c09e14d6b03521fa0990a38295e56c57fd4e5db4fd0759ce2d6b05310d2843386e1250 Sha512 537347ddac469e23a3d9f525b9a11f99be69a96e055aba7fad6c8674e8d53e0fd7a979a8f48068c4bb4d92720f296814a49e6ae3038c0a2aa2736e182fec3782 SSDeep 24576:kZPlmF0uwTKh56Z5vePu/DVeL1pVjeOLnUUGGu/aYmQurhwQUvm:Omh69eWbVypVCcgGu/aYmn1gm TLSH F975012077F88439F6F62B31AE3A95609E3ABD241F71C15E8354351D0DB0A909BB6773

244 files

OFF8bf02f70e1a6603c5cd2edfba87c1d0a

DLLScreenConnect.Client.dll

DLLScreenConnect.ClientService.dll

DLLScreenConnect.Core.dll

Structure

BINResources

BINRT_VERSION

BINID:0001

BINID:0

DLLScreenConnect.Windows.dll

EXEScreenConnect.WindowsClient.exe

BINScreenConnect.WindowsClient.exe.config

BINServiceExeWithoutService

DLLScreenConnect.InstallerActions.dll

Structure

DLLMicrosoft.Deployment.WindowsInstaller.dll

Structure

BIN.Net Resources

BINMicrosoft.Deployment.WindowsInstaller.Errors.resources

BINResources

BINRT_VERSION

BINID:0001

BINID:0

BINCustomAction.config

BINRoot Entry

BIN䡀䆒䑲

BIN䡀䌏䈯

BIN䡀䈖䌧䠤

BIN䡀䌋䄱䜵

BIN䡀䕎䒵䠵

BIN䡀㬿䏲䐸䖱

BIN䡀㽿䅤䈯䠶

BIN䡀䈏䗤䕸䠨

BIN䡀䈛䌪䗶䜵

BIN䡀䓞䕪䇤䠨

BIN䡀䕙䓲䕨䜷

BIN䈍䄩䏸䞷䄦䠥

DLLScreenConnect.Client.dll

Structure

BIN.Net Resources

IMGScreenConnect.Properties.CommandSendWindowSystemCommandClose.png

IMGScreenConnect.Properties.CommandSendWindowSystemCommandClose.png-preview.png

IMGScreenConnect.Properties.CommandSendWindowSystemCommandMinimize.png

IMGScreenConnect.Properties.CommandSendWindowSystemCommandMinimize.png-preview.png

IMGScreenConnect.Properties.CommandSendWindowSystemCommandMaximize.png

IMGScreenConnect.Properties.CommandSendWindowSystemCommandMaximize.png-preview.png

IMGScreenConnect.Properties.CommandUndockControlPanel.png

IMGScreenConnect.Properties.CommandUndockControlPanel.png-preview.png

IMGScreenConnect.Properties.CommandDockControlPanel.png

IMGScreenConnect.Properties.CommandDockControlPanel.png-preview.png

IMGScreenConnect.Properties.ControlPanelView.png

IMGScreenConnect.Properties.ControlPanelView.png-preview.png

IMGScreenConnect.Properties.ControlPanelStatus.png

IMGScreenConnect.Properties.ControlPanelStatus.png-preview.png

IMGScreenConnect.Properties.ControlPanelToolbox.png

IMGScreenConnect.Properties.ControlPanelToolbox.png-preview.png

IMGScreenConnect.Properties.ControlPanelFileTransfer.png

IMGScreenConnect.Properties.ControlPanelFileTransfer.png-preview.png

IMGScreenConnect.Properties.ControlPanelScreenCapture.png

IMGScreenConnect.Properties.ControlPanelScreenCapture.png-preview.png

IMGScreenConnect.Properties.ControlPanelParticipants.png

IMGScreenConnect.Properties.ControlPanelParticipants.png-preview.png

IMGScreenConnect.Properties.ControlPanelMessages.png

IMGScreenConnect.Properties.ControlPanelMessages.png-preview.png

IMGScreenConnect.Properties.ControlPanelMiscellaneous.png

IMGScreenConnect.Properties.ControlPanelMiscellaneous.png-preview.png

IMGScreenConnect.Properties.CommandOpenFolder.png

IMGScreenConnect.Properties.CommandOpenFolder.png-preview.png

IMGScreenConnect.Properties.CommandSelectQualityMedium.png

IMGScreenConnect.Properties.CommandSelectQualityMedium.png-preview.png

IMGScreenConnect.Properties.CommandBlankGuestMonitorTrue.png

IMGScreenConnect.Properties.CommandBlankGuestMonitorTrue.png-preview.png

IMGScreenConnect.Properties.CommandBlankGuestMonitorFalse.png

IMGScreenConnect.Properties.CommandBlankGuestMonitorFalse.png-preview.png

IMGScreenConnect.Properties.CommandSendMessage.png

IMGScreenConnect.Properties.CommandSendMessage.png-preview.png

IMGScreenConnect.Properties.CommandTakeScreenshotToFile.png

IMGScreenConnect.Properties.CommandTakeScreenshotToFile.png-preview.png

IMGScreenConnect.Properties.CommandTakeScreenshotToClipboard.png

IMGScreenConnect.Properties.CommandTakeScreenshotToClipboard.png-preview.png

IMGScreenConnect.Properties.CommandVideoRecord.png

IMGScreenConnect.Properties.CommandVideoRecord.png-preview.png

IMGScreenConnect.Properties.CommandVideoPause.png

IMGScreenConnect.Properties.CommandVideoPause.png-preview.png

IMGScreenConnect.Properties.CommandSelectQualityLow.png

IMGScreenConnect.Properties.CommandSelectQualityLow.png-preview.png

IMGScreenConnect.Properties.CommandChangeFolder.png

IMGScreenConnect.Properties.CommandChangeFolder.png-preview.png

IMGScreenConnect.Properties.CommandSendSystemKeyCode.png

IMGScreenConnect.Properties.CommandSendSystemKeyCode.png-preview.png

IMGScreenConnect.Properties.CommandRebootToSafeMode.png

IMGScreenConnect.Properties.CommandRebootToSafeMode.png-preview.png

IMGScreenConnect.Properties.CommandRebootToNormalMode.png

IMGScreenConnect.Properties.CommandRebootToNormalMode.png-preview.png

IMGScreenConnect.Properties.CommandSuspendMyInputTrue.png

IMGScreenConnect.Properties.CommandSuspendMyInputTrue.png-preview.png

IMGScreenConnect.Properties.CommandSuspendMyInputFalse.png

IMGScreenConnect.Properties.CommandSuspendMyInputFalse.png-preview.png

IMGScreenConnect.Properties.CommandAcquireWakeLockTrue.png

IMGScreenConnect.Properties.CommandAcquireWakeLockTrue.png-preview.png

IMGScreenConnect.Properties.CommandSelectQualityHigh.png

IMGScreenConnect.Properties.CommandSelectQualityHigh.png-preview.png

IMGScreenConnect.Properties.CommandVideoStop.png

IMGScreenConnect.Properties.CommandVideoStop.png-preview.png

IMGScreenConnect.Properties.CommandManageSharedToolbox.png

IMGScreenConnect.Properties.CommandManageSharedToolbox.png-preview.png

IMGScreenConnect.Properties.CommandSendFiles.png

IMGScreenConnect.Properties.CommandSendFiles.png-preview.png

IMGScreenConnect.Properties.CommandReceiveFiles.png

IMGScreenConnect.Properties.CommandReceiveFiles.png-preview.png

IMGScreenConnect.Properties.CommandReceiveFolder.png

IMGScreenConnect.Properties.CommandReceiveFolder.png-preview.png

IMGScreenConnect.Properties.CommandSendFolder.png

IMGScreenConnect.Properties.CommandSendFolder.png-preview.png

IMGScreenConnect.Properties.ShareMask.png

IMGScreenConnect.Properties.ShareMask.png-preview.png

IMGScreenConnect.Properties.ShareGlyph.png

IMGScreenConnect.Properties.ShareGlyph.png-preview.png

IMGScreenConnect.Properties.DropDownGlyph.png

IMGScreenConnect.Properties.DropDownGlyph.png-preview.png

IMGScreenConnect.Properties.CommandShareMyDesktop.png

IMGScreenConnect.Properties.CommandShareMyDesktop.png-preview.png

IMGScreenConnect.Properties.ParticipantRequesting.png

IMGScreenConnect.Properties.ParticipantRequesting.png-preview.png

IMGScreenConnect.Properties.CommandDisconnectParticipant.png

IMGScreenConnect.Properties.CommandDisconnectParticipant.png-preview.png

IMGScreenConnect.Properties.CommandSendWindowSystemCommandRestore.png

IMGScreenConnect.Properties.CommandSendWindowSystemCommandRestore.png-preview.png

IMGScreenConnect.Properties.ControlPanelShare.png

IMGScreenConnect.Properties.ControlPanelShare.png-preview.png

IMGScreenConnect.Properties.ParticipantSendingInput.png

IMGScreenConnect.Properties.ParticipantSendingInput.png-preview.png

IMGScreenConnect.Properties.ParticipantGuest.png

IMGScreenConnect.Properties.ParticipantGuest.png-preview.png

IMGScreenConnect.Properties.ParticipantHost.png

IMGScreenConnect.Properties.ParticipantHost.png-preview.png

IMGScreenConnect.Properties.CommandManageCredentialsSendToScreen.png

IMGScreenConnect.Properties.CommandManageCredentialsSendToScreen.png-preview.png

IMGScreenConnect.Properties.ControlPanelSound.png

IMGScreenConnect.Properties.ControlPanelSound.png-preview.png

IMGScreenConnect.Properties.CommandSelectSoundCaptureModeSpeakers.png

IMGScreenConnect.Properties.CommandSelectSoundCaptureModeSpeakers.png-preview.png

IMGScreenConnect.Properties.CommandSelectSoundCaptureModeSilent.png

IMGScreenConnect.Properties.CommandSelectSoundCaptureModeSilent.png-preview.png

IMGScreenConnect.Properties.CommandSelectSoundCaptureModeHostMicrophone.png

IMGScreenConnect.Properties.CommandSelectSoundCaptureModeHostMicrophone.png-preview.png

IMGScreenConnect.Properties.CommandSelectSoundCaptureModeAllMicrophones.png

IMGScreenConnect.Properties.CommandSelectSoundCaptureModeAllMicrophones.png-preview.png

IMGScreenConnect.Properties.ParticipantMicrophoneSending.png

IMGScreenConnect.Properties.ParticipantMicrophoneSending.png-preview.png

IMGScreenConnect.Properties.ParticipantSpeakers.png

IMGScreenConnect.Properties.ParticipantSpeakers.png-preview.png

IMGScreenConnect.Properties.ParticipantSpeakersSending.png

IMGScreenConnect.Properties.ParticipantSpeakersSending.png-preview.png

IMGScreenConnect.Properties.CommandRegenerateParticipantColor.png

IMGScreenConnect.Properties.CommandRegenerateParticipantColor.png-preview.png

IMGScreenConnect.Properties.ControlPanelAnnotation.png

IMGScreenConnect.Properties.ControlPanelAnnotation.png-preview.png

IMGScreenConnect.Properties.CommandSelectAnnotationStrokeThicknessMedium.png

IMGScreenConnect.Properties.CommandSelectAnnotationStrokeThicknessMedium.png-preview.png

IMGScreenConnect.Properties.CommandSelectAnnotationStrokeThicknessThick.png

IMGScreenConnect.Properties.CommandSelectAnnotationStrokeThicknessThick.png-preview.png

IMGScreenConnect.Properties.CommandSelectAnnotationStrokeThicknessThin.png

IMGScreenConnect.Properties.CommandSelectAnnotationStrokeThicknessThin.png-preview.png

IMGScreenConnect.Properties.ParticipantAnnotating.png

IMGScreenConnect.Properties.ParticipantAnnotating.png-preview.png

IMGScreenConnect.Properties.CommandSelectAnnotationModeAllDraw.png

IMGScreenConnect.Properties.CommandSelectAnnotationModeAllDraw.png-preview.png

IMGScreenConnect.Properties.CommandSelectAnnotationModeHostDraw.png

IMGScreenConnect.Properties.CommandSelectAnnotationModeHostDraw.png-preview.png

IMGScreenConnect.Properties.CommandSelectAnnotationModeInvisible.png

IMGScreenConnect.Properties.CommandSelectAnnotationModeInvisible.png-preview.png

IMGScreenConnect.Properties.CommandSelectAnnotationModeViewOnly.png

IMGScreenConnect.Properties.CommandSelectAnnotationModeViewOnly.png-preview.png

IMGScreenConnect.Properties.CommandSelectAnnotationToolEllipse.png

IMGScreenConnect.Properties.CommandSelectAnnotationToolEllipse.png-preview.png

IMGScreenConnect.Properties.CommandSelectAnnotationToolLine.png

IMGScreenConnect.Properties.CommandSelectAnnotationToolLine.png-preview.png

IMGScreenConnect.Properties.CommandSelectAnnotationToolRectangle.png

IMGScreenConnect.Properties.CommandSelectAnnotationToolRectangle.png-preview.png

IMGScreenConnect.Properties.ControlPanelHelper.png

IMGScreenConnect.Properties.ControlPanelHelper.png-preview.png

IMGScreenConnect.Properties.CommandSelectHelperHighlightToolNone.png

IMGScreenConnect.Properties.CommandSelectHelperHighlightToolNone.png-preview.png

IMGScreenConnect.Properties.CommandSelectHelperHighlightToolCross.png

IMGScreenConnect.Properties.CommandSelectHelperHighlightToolCross.png-preview.png

IMGScreenConnect.Properties.CommandSelectHelperHighlightToolLasso.png

IMGScreenConnect.Properties.CommandSelectHelperHighlightToolLasso.png-preview.png

IMGScreenConnect.Properties.CommandSendClipboardKeystrokes.png

IMGScreenConnect.Properties.CommandSendClipboardKeystrokes.png-preview.png

IMGScreenConnect.Properties.NotificationOptionsIcon.png

IMGScreenConnect.Properties.NotificationOptionsIcon.png-preview.png

IMGScreenConnect.Properties.StatusGlyphGuestNotConnected.png

IMGScreenConnect.Properties.StatusGlyphGuestNotConnected.png-preview.png

IMGScreenConnect.Properties.StatusGlyphGuestAndHostConnected.png

IMGScreenConnect.Properties.StatusGlyphGuestAndHostConnected.png-preview.png

IMGScreenConnect.Properties.StatusGlyphBlankMonitor.png

IMGScreenConnect.Properties.StatusGlyphBlankMonitor.png-preview.png

IMGScreenConnect.Properties.StatusGlyphMask.png

IMGScreenConnect.Properties.StatusGlyphMask.png-preview.png

IMGScreenConnect.Properties.FeedbackBannerLogo.png

IMGScreenConnect.Properties.FeedbackBannerLogo.png-preview.png

CURScreenConnect.Properties.Lasso.cur

BINResources

BINRT_VERSION

BINID:0001

BINID:0

DLLScreenConnect.ClientService.dll

Structure

BINResources

BINRT_VERSION

BINID:0001

BINID:0

DLLScreenConnect.Windows.dll

Structure

BIN.Net Resources

DLLScreenConnect.Properties.libz.x64.dll

Structure

DLLScreenConnect.Properties.libz.x86.dll

Structure

BINResources

BINRT_VERSION

BINID:0001

BINID:1036

DLLScreenConnect.Properties.sclzma.x64.dll

Structure

DLLScreenConnect.Properties.sclzma.x86.dll

Structure

DLLScreenConnect.Properties.libwebp.x64.dll

Structure

DLLScreenConnect.Properties.libwebp.x86.dll

Structure

BINResources

BINRT_VERSION

BINID:0001

BINID:0

EXEScreenConnect.WindowsClient.exe

Structure

P7B[Authenticode]_5d6205b9.p7b

BINResources

BINRT_VERSION

BINID:0001

BINID:0

BINScreenConnect.WindowsClient.exe.config

BINServiceExeWithoutService

BINapp.config

BINClient.en-US.resources

BINClient.Override.en-US.resources

BINClient.Override.resources

BINClient.resources

EXE䌋䄱䜵䀾䛬㪌

Structure

BINResources

BINRT_VERSION

BINID:0001

BINID:1033

BINRT_MANIFEST

BINID:0002

BINID:1033

BIN䡀䈛㵪䆲䗤䕲

BIN䡀䌍䈵䗦䕲䠼

BIN䡀䒌䓰䑲䑨䠷

BIN䡀䓊㼳䄨䆵䠫

BIN䡀㼿䕷䑬㭪䗤䠤

BIN䡀㼿䕷䑬㹪䒲䠯

BIN䡀㿿䏤䇬䗤䒬䠱

BIN䡀䕌䄨䈷䒏䇯䕨

BIN䡀䘌䗶䐲䆊䌷䑲

BIN䆒䑲㭾䉨䘤䗯䆒䑲

BIN䡀䈜䘦䈵䅘䈭䗦䠶

BIN䡀䈜䙵䆬㬨䑲䌩䠪

BIN䡀䈜䙵䆬㬨䑲䕷䏲

BIN䡀䈜䙵䆬㲨䖱䄷䏯

BIN䡀䄕䑸䋦䒌䇱䗬䒬䠱

BIN䡀䇊䌰㾱㼒䔨䈸䆱䠨

BIN䡀䈏䗤䕸㬨䐲䒳䈱䗱䠶

BIN䡀䑒䗶䏤㾯㼒䔨䈸䆱䠨

BIN䡀䇊䌰㮱䈻䘦䈷䈜䘴䑨䈦

BIN䡀䇊䗹䛎䆨䗸㼨䔨䈸䆱䠨

BIN䡀䑒䗶䏤㮯䈻䘦䈷䈜䘴䑨䈦

EXE䌋䄱䜵㬾䖸䒷㪰䗦䒬㵱䅬䄵䜵

Structure

BINOverlay_7d669e13.bin

DLLScreenConnect.Core.dll

BINCustomAction.config

BINResources

BINRT_VERSION

BINID:0001

BINID:0

BINID:1033

BINRT_MANIFEST

BINID:0002

BINID:1033

BINSummaryInformation

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 14 STICH kept: 3secondary ignored: 11

bin 10img 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

3 / 3

Path ole:doc>bin>pe:dll>pe:dll

Shape ole:doc>bin>pe:dll>pe:dll

4 nodes

Path ole:doc>pe:dll>bin>pe:dll

Shape ole:doc>pe:dll>bin>pe:dll

4 nodes

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

244 files

OFF8bf02f70e1a6603c5cd2edfba87c1d0a

DLLScreenConnect.Client.dll

DLLScreenConnect.ClientService.dll

DLLScreenConnect.Core.dll

DLLScreenConnect.Windows.dll

EXEScreenConnect.WindowsClient.exe

BINScreenConnect.WindowsClient.exe.config

BINServiceExeWithoutService

DLLScreenConnect.InstallerActions.dll

DLLMicrosoft.Deployment.WindowsInstaller.dll

BINCustomAction.config

BINRoot Entry

No malware configuration was found at this point.

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

8bf02f70e1a6603c5cd2edfba87c1d0a › Root Entry › 䌋䄱䜵㬾䖸䒷㪰䗦䒬㵱䅬䄵䜵 › Overlay_7d669e13.bin › ScreenConnect.Core.dll

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

8bf02f70e1a6603c5cd2edfba87c1d0a

Overview

Summary by MalvaGPT

Characteristics

File Structure

Artefacts1

8bf02f70e1a6603c5cd2edfba87c1d0a (1.57 MB)

File Structure

Artefacts1