Suspicious
Suspect

PDF @0x00000000

Share on LinkedIn
Print
MS Office Document
MD5: 986ad15179e746a9b602e548b9db48dd
Size: 874.5 KB
application/vnd.ms-office

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 986ad15179e746a9b602e548b9db48dd
Sha1 c2f8a042e617573635d22249f29184972072d83f
Sha256 6f558a93bcaa6c348beb37dee9a0d05cffac8b328d7300bea28123303eaf9dc4
Sha384 e5a778f4034d0de014dfad0f1890b2ea4042025ee48e3014a60c4095b4e4f8977c0b0bc70a615d270c64fc7397999bab
Sha512 d13734bd54d73f41c12a887001304697a3fa267384f29431f55dc09cc2615fe7e0aec4f6a046ab2afe1706c6278e8b3abf9d2999aa57c7ff9c58b212f544fa44
SSDeep 24576:HbLSv9k73KIt1QRT/64rmWNB27M7upNkE4u:HbL33KItmB6I327M7upqE4
TLSH 65051202FF408C77D58617351BAB61D6972DFC27EE728A4B3301732ABD766E1C96081A
986ad15179e746a9b602e548b9db48dd
Root Entry
CompObj
Workbook
SummaryInformation
DocumentSummaryInformation
MBD000AB530
[Content_Types].xml
_rels
.rels
xl
_rels
workbook.xml.rels
workbook.xml
theme
theme1.xml
worksheets
sheet3.xml
_rels
sheet1.xml.rels
sheet1.xml
drawings
_rels
drawing1.xml.rels
vmlDrawing1.vml.rels
drawing1.xml
vmlDrawing1.vml
media
image2.emf
image1.jpeg
image1.jpeg-preview.png
embeddings
oleObject1.bin
Root Entry
CONTENTS
Text (Preview)
#Stream obj 8 0
#Stream obj 20 0
#Stream obj 11 0
#Stream obj 14 0
#Stream obj 29 0
#Stream obj 32 0
#Stream obj 23 0
#Stream obj 33 0
styles.xml
sharedStrings.xml
printerSettings
printerSettings1.bin
docProps
core.xml
app.xml
CompObj
MBD000AB531
Workbook
SummaryInformation
DocumentSummaryInformation
MBD00233248
Ole
CompObj
CONTENTS
#Stream obj 13 0
#Stream obj 14 0
#Stream obj 5 0
#Stream obj 5 0.exif
#Stream obj 5 0-preview.png
#Stream obj 9 0
#Stream obj 6 0
#Stream obj 8 0
#Stream obj 17 0
Structure
MBD000AB532
Ole
_VBA_PROJECT_CUR
PROJECT
PROJECTwm
VBA
dir
_VBA_PROJECT
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 12 STICH kept: 1secondary ignored: 11
bin 5img 2oox:metadata 1oox:style 1oox:theme 1xml 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path ole:doc>oox:xlsx>oox:media>ole:doc
Shape ole:doc>oox:xlsx>oox:media>ole:doc
4 nodes
Name Value
Version
1.6
Producer
Oracle BI Publisher 12.2.1.4.0
/Producer
Oracle BI Publisher 12.2.1.4.0
Version
1.7
Author
Registered to: FNB
CreationDate
8/1/2026 12:03:20
Creator
OpenText Exstream Version 16.6.70 64-bit
Title
NEPS_NOT_LETT_App
/Creator
OpenText Exstream Version 16.6.70 64-bit
/CreationDate
8/1/2026 12:03:20
/Author
Registered to: FNB
/Title
NEPS_NOT_LETT_App
An error has occurred. This application may no longer respond until reloaded. Reload 🗙