Suspicious
Suspect

a241c1546e96b3c507297ae6774d8cd1

Share on LinkedIn
Print
MS Office Document
MD5: a241c1546e96b3c507297ae6774d8cd1
Size: 5.48 MB
application/vnd.ms-office

This sample is a 5.2 MB MS Office Document for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 722 embedded or derived files. It matches 7 YARA rules. Observed behaviours map to MITRE ATT&CK T1059.007. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
ee6e8977d1a6bcef6ce48592396ebec7e1acf7c7217ebe8649b940e5a6703d84
MD5
a241c1546e96b3c507297ae6774d8cd1
Verdict
Inconclusive
File type
MS Office Document · 5.2 MB
MITRE ATT&CK
T1059.007

Cite this report: https://app.malva.re/sha256/ee6e8977d1a6bcef6ce48592396ebec7e1acf7c7217ebe8649b940e5a6703d84

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
Microsoft Office Document
Size
5.48 MB · 5,480,960 B
First seen
2026-10-01 19:45 · 29 days ago
Last seen
2026-10-01 19:45 · 29 days ago
Last analysis
2026-10-01 19:45 · 29 days ago
Hashes
MD5 a241c1546e96b3c507297ae6774d8cd1 Sha1 063029900d9e1474c6456cf60a34a3d760e22604 Sha256 ee6e8977d1a6bcef6ce48592396ebec7e1acf7c7217ebe8649b940e5a6703d84 Sha384 a844c95a4af4b9fb443460357396bc0d3f53b9a2b2dba2d72ab40f8ad7bebaad1b5506836f1a8900a580e1ade1a3f1b3 Sha512 70b58ed189b67ea413945137a3de5ec5a6cf0eb182fdaf8c2bdd50cd2564aeba7fc05de595527915bcaaf49666103d0b82e13d279b9dfef7afe71aa133927092 SSDeep 98304:YDz3IGvjINMpY5AlWV0BvACE5fyt5iwkZFxJI0rHpSNWm1uI7JrN/43jYMeUgWM4:Yz33jzFo0BvACNtqxJnpzm1uuZiY/IS TLSH 884612223E9EC537D65E12B0192EDB9BA12E7E744B7284C763D8BD592C720C21376E43

723 files
OFFa241c1546e96b3c507297ae6774d8cd1
BINtxt
PNGctypes32.png
BINsmss_pth
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 12 STICH kept: 4secondary ignored: 8
bin 6img 2

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
4 / 4
Path ole:doc>pe:dll~T1059.007>pe:rsrc>bin
Shape ole:doc>pe:dll>pe:rsrc>bin
technique4 nodes
Path ole:doc>pe:dll~T1059.007>bin
Shape ole:doc>pe:dll>bin
technique3 nodes

An error has occurred. This application may no longer respond until reloaded. Reload 🗙