Suspicious
Suspect

9ca5778a26cf8aa431c1dd4824e3d771

MS Office Document
MD5: 9ca5778a26cf8aa431c1dd4824e3d771
Size: 759.3 KB
application/vnd.ms-office

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 9ca5778a26cf8aa431c1dd4824e3d771
Sha1 dea509560a95cde9336067781229df39995bf633
Sha256 b64c0c5a1ac3eef38bf27a2ade490c8e22aa837e5a7c15f9129de867f4bdcf72
Sha384 84ba9c867450d1ef54ac335d5b7ebfdd16813b768e1b21c46351975a23d7c2c07b6737ab73e4eb0f61cf450dccecfe09
Sha512 bcb25fb432fa71d46baab9a025772eb8cd24c1cd36a0941f79bb9c853735cee96b6c697e098863c9e576611728c26ca0db6162c920eee0cbc4877d1e97068d81
SSDeep 12288:y+32VP3E2Mb6sbsmHARAef4CmJsrP+S0CjrzWzVW05hRFaNrUrK5OBUn6OtSBNgD:yNVP3E2Mb6tz4vOXSZVeYUP6NPmInb
TLSH 22F42305FAD6CB1BE1E65436ADD4C0AA0028BC227F5A938B3020B70D543AF7B77D5B95
9ca5778a26cf8aa431c1dd4824e3d771
Root Entry
CompObj
Workbook
SummaryInformation
DocumentSummaryInformation
MBD0002A04F
[Content_Types].xml
_rels
.rels
xl
_rels
workbook.xml.rels
workbook.xml
sharedStrings.xml
drawings
_rels
vmlDrawing1.vml.rels
vmlDrawing1.vml
worksheets
_rels
sheet1.xml.rels
sheet1.xml
theme
theme1.xml
styles.xml
media
image1.emf
embeddings
oleObject1.bin
Root Entry
Ole
CompObj
CONTENTS
Text (Preview)
#Stream obj 5 0
#Stream obj 7 0
#Stream obj 11 0
#Stream obj 15 0
#Stream obj 19 0
Structure
printerSettings
printerSettings1.bin
docProps
thumbnail.wmf
core.xml
app.xml
CompObj
MBD0002A050
Ole
_VBA_PROJECT_CUR
PROJECT
PROJECTwm
VBA
dir
_VBA_PROJECT
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 9 STICH kept: 1secondary ignored: 8
bin 4oox:metadata 1oox:style 1oox:theme 1xml 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path ole:doc>oox:xlsx>oox:media>ole:doc
Shape ole:doc>oox:xlsx>oox:media>ole:doc
4 nodes
Name Value
Version
1.7
CreationDate
D:20250908110839
Creator
PDFium
Producer
PDFium
/CreationDate
D:20250908110839
/Creator
PDFium
/Producer
PDFium
9ca5778a26cf8aa431c1dd4824e3d771
Root Entry
CompObj
Workbook
SummaryInformation
DocumentSummaryInformation
MBD0002A04F
[Content_Types].xml
_rels
.rels
xl
_rels
workbook.xml.rels
workbook.xml
sharedStrings.xml
drawings
_rels
vmlDrawing1.vml.rels
vmlDrawing1.vml
worksheets
_rels
sheet1.xml.rels
sheet1.xml
theme
theme1.xml
styles.xml
media
image1.emf
embeddings
oleObject1.bin
Root Entry
Ole
CompObj
CONTENTS
Text (Preview)
#Stream obj 5 0
#Stream obj 7 0
#Stream obj 11 0
#Stream obj 15 0
#Stream obj 19 0
Structure
printerSettings
printerSettings1.bin
docProps
thumbnail.wmf
core.xml
app.xml
CompObj
MBD0002A050
Ole
_VBA_PROJECT_CUR
PROJECT
PROJECTwm
VBA
dir
_VBA_PROJECT
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙