Suspicious
Suspect

9ceb27d8b82f9ee7200405c1916307b4

Share on LinkedIn
Print
MS Office Document
MD5: 9ceb27d8b82f9ee7200405c1916307b4
Size: 15.36 MB
application/vnd.ms-office

This sample is a 14.7 MB MS Office Document for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 305 embedded or derived files. It matches 34 YARA rules. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
f78aaeadb63a34a84150edef09d7dc83e78dd3d22c65424135961fdeba4e4345
MD5
9ceb27d8b82f9ee7200405c1916307b4
Verdict
Inconclusive
File type
MS Office Document · 14.7 MB

Cite this report: https://app.malva.re/sha256/f78aaeadb63a34a84150edef09d7dc83e78dd3d22c65424135961fdeba4e4345

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
Microsoft Office Document
Size
15.36 MB · 15,364,096 B
First seen
2026-10-10 12:46 · 21 days ago
Last seen
2026-10-10 12:46 · 21 days ago
Last analysis
2026-10-10 12:46 · 21 days ago
Hashes
MD5 9ceb27d8b82f9ee7200405c1916307b4 Sha1 404569615bef1bf69cf4437c2300d219d453249c Sha256 f78aaeadb63a34a84150edef09d7dc83e78dd3d22c65424135961fdeba4e4345 Sha384 9f8a875538d78a94277f5e7413e911930c39db2ee27bd12d321335c2f6464cce3024e7823eca38fae9247dacf5d37eb7 Sha512 57da51797ede700d18dec9d025ea4da8aea07e4dcfee786b585f4caba2d7e7b5cb1db76a7d6d1785b85cdfdd759fbf59066b9f2082dd6dfb3048250a90274b94 SSDeep 393216:NhdiE2hdiE0hdiEPhdiERhdiEVhdiEohdiE:RJaJcJHJFJJJgJ TLSH 9CF6236027FCA66CF1B31A39E93D80F5687A7C65DE51822E23A0396D1E71DA0C971333

295 files
OFF9ceb27d8b82f9ee7200405c1916307b4
BINCustomAction.config
EXEScreenConnect.WindowsClient.exe
DLLScreenConnect.WindowsCredentialProvider.arm64.dll
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 11 STICH kept: 2secondary ignored: 9
bin 8img 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path ole:doc>pe:dll>pe:dll
Shape ole:doc>pe:dll>pe:dll
3 nodes
Path ole:doc>pe:dll
Shape ole:doc>pe:dll
2 nodes

PE Layout UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

An error has occurred. This application may no longer respond until reloaded. Reload 🗙