Suspicious
Suspect

9ca5778a26cf8aa431c1dd4824e3d771

Share on LinkedIn
Print
MS Office Document
MD5: 9ca5778a26cf8aa431c1dd4824e3d771
Size: 759.3 KB
application/vnd.ms-office

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 9ca5778a26cf8aa431c1dd4824e3d771
Sha1 dea509560a95cde9336067781229df39995bf633
Sha256 b64c0c5a1ac3eef38bf27a2ade490c8e22aa837e5a7c15f9129de867f4bdcf72
Sha384 84ba9c867450d1ef54ac335d5b7ebfdd16813b768e1b21c46351975a23d7c2c07b6737ab73e4eb0f61cf450dccecfe09
Sha512 bcb25fb432fa71d46baab9a025772eb8cd24c1cd36a0941f79bb9c853735cee96b6c697e098863c9e576611728c26ca0db6162c920eee0cbc4877d1e97068d81
SSDeep 12288:y+32VP3E2Mb6sbsmHARAef4CmJsrP+S0CjrzWzVW05hRFaNrUrK5OBUn6OtSBNgD:yNVP3E2Mb6tz4vOXSZVeYUP6NPmInb
TLSH 22F42305FAD6CB1BE1E65436ADD4C0AA0028BC227F5A938B3020B70D543AF7B77D5B95
9ca5778a26cf8aa431c1dd4824e3d771
Root Entry
CompObj
Workbook
SummaryInformation
DocumentSummaryInformation
MBD0002A04F
[Content_Types].xml
_rels
.rels
xl
_rels
workbook.xml.rels
workbook.xml
sharedStrings.xml
drawings
_rels
vmlDrawing1.vml.rels
vmlDrawing1.vml
worksheets
_rels
sheet1.xml.rels
sheet1.xml
theme
theme1.xml
styles.xml
media
image1.emf
embeddings
oleObject1.bin
Root Entry
Ole
CompObj
CONTENTS
Text (Preview)
#Stream obj 5 0
#Stream obj 7 0
#Stream obj 11 0
#Stream obj 15 0
#Stream obj 19 0
Structure
printerSettings
printerSettings1.bin
docProps
thumbnail.wmf
core.xml
app.xml
CompObj
MBD0002A050
Ole
_VBA_PROJECT_CUR
PROJECT
PROJECTwm
VBA
dir
_VBA_PROJECT
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 9 STICH kept: 1secondary ignored: 8
bin 4oox:metadata 1oox:style 1oox:theme 1xml 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path ole:doc>oox:xlsx>oox:media>ole:doc
Shape ole:doc>oox:xlsx>oox:media>ole:doc
4 nodes
Name Value
Version
1.7
CreationDate
D:20250908110839
Creator
PDFium
Producer
PDFium
/CreationDate
D:20250908110839
/Creator
PDFium
/Producer
PDFium
An error has occurred. This application may no longer respond until reloaded. Reload 🗙