Suspect
a6ea1af8ac52d4e7eabb26c1f1aa2eaa
MS Office Document
MD5: a6ea1af8ac52d4e7eabb26c1f1aa2eaa
Size: 1.57 MB
application/vnd.ms-office
This sample is a 1.5 MB MS Office Document for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 244 embedded or derived files. It matches 14 YARA rules. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 7e156776064bbc27cdf59cd6bd1f30298d7fc7b2d14ebf5dc2c39703065a6077
- MD5
- a6ea1af8ac52d4e7eabb26c1f1aa2eaa
- Verdict
- Inconclusive
- File type
- MS Office Document · 1.5 MB
Cite this report: https://app.malva.re/sha256/7e156776064bbc27cdf59cd6bd1f30298d7fc7b2d14ebf5dc2c39703065a6077
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Microsoft Office Document
Size
1.57 MB · 1,568,768 B
First seen
2026-10-11 15:15 · 18 days ago
Last seen
2026-10-11 15:15 · 18 days ago
Last analysis
2026-10-11 15:16 · 18 days ago
Hashes
MD5
a6ea1af8ac52d4e7eabb26c1f1aa2eaa
Sha1
835c2ef8bc53d91fd1dc2bd743434800a27f61cf
Sha256
7e156776064bbc27cdf59cd6bd1f30298d7fc7b2d14ebf5dc2c39703065a6077
Sha384
22ceef2e7a97aa0acff2e2413dd54e575024d2701fef98e5e1592771aba4627ff6d6c2e8b4d0e53b9c5e84a7fba9ddd8
Sha512
56aa23747126b7cad6f73801e27acba4a50f79a852832a8066a7174a08a9f9ed19e3cf030d6b59f2e83e7e4327f604b8aab1eff312265ac8ba2a68de171fb432
SSDeep
24576:+ZPlmF0uwTKh56Z5vePu/DVeL1pVjeOTnUUGGu/aYmQurhwQUvJ:Emh69eWbVypVCEgGu/aYmn1gJ
TLSH
6475012077F88439F6F62B31AE3A95609E3ABD241F71C15E8354391D0DB0A909BB6773
244 files
OFFa6ea1af8ac52d4e7eabb26c1f1aa2eaa
DLLScreenConnect.Client.dll
DLLScreenConnect.ClientService.dll
DLLScreenConnect.Core.dll
Structure
BINResources
BINRT_VERSION
BINID:0001
BINID:0
DLLScreenConnect.Windows.dll
EXEScreenConnect.WindowsClient.exe
BINScreenConnect.WindowsClient.exe.config
BINServiceExeWithoutService
DLLScreenConnect.InstallerActions.dll
Structure
DLLMicrosoft.Deployment.WindowsInstaller.dll
Structure
BIN.Net Resources
BINMicrosoft.Deployment.WindowsInstaller.Errors.resources
BINResources
BINRT_VERSION
BINID:0001
BINID:0
BINCustomAction.config
BINRoot Entry
BIN䡀䆒䑲
BIN䡀䌏䈯
BIN䡀䈖䌧䠤
BIN䡀䌋䄱䜵
BIN䡀䕎䒵䠵
BIN䡀㬿䏲䐸䖱
BIN䡀㽿䅤䈯䠶
BIN䡀䈏䗤䕸䠨
BIN䡀䈛䌪䗶䜵
BIN䡀䓞䕪䇤䠨
BIN䡀䕙䓲䕨䜷
BIN䈍䄩䏸䞷䄦䠥
DLLScreenConnect.Client.dll
Structure
BIN.Net Resources
IMGScreenConnect.Properties.CommandSendWindowSystemCommandClose.png
IMGScreenConnect.Properties.CommandSendWindowSystemCommandClose.png-preview.png
IMGScreenConnect.Properties.CommandSendWindowSystemCommandMinimize.png
IMGScreenConnect.Properties.CommandSendWindowSystemCommandMinimize.png-preview.png
IMGScreenConnect.Properties.CommandSendWindowSystemCommandMaximize.png
IMGScreenConnect.Properties.CommandSendWindowSystemCommandMaximize.png-preview.png
IMGScreenConnect.Properties.CommandUndockControlPanel.png
IMGScreenConnect.Properties.CommandUndockControlPanel.png-preview.png
IMGScreenConnect.Properties.CommandDockControlPanel.png
IMGScreenConnect.Properties.CommandDockControlPanel.png-preview.png
IMGScreenConnect.Properties.ControlPanelView.png
IMGScreenConnect.Properties.ControlPanelView.png-preview.png
IMGScreenConnect.Properties.ControlPanelStatus.png
IMGScreenConnect.Properties.ControlPanelStatus.png-preview.png
IMGScreenConnect.Properties.ControlPanelToolbox.png
IMGScreenConnect.Properties.ControlPanelToolbox.png-preview.png
IMGScreenConnect.Properties.ControlPanelFileTransfer.png
IMGScreenConnect.Properties.ControlPanelFileTransfer.png-preview.png
IMGScreenConnect.Properties.ControlPanelScreenCapture.png
IMGScreenConnect.Properties.ControlPanelScreenCapture.png-preview.png
IMGScreenConnect.Properties.ControlPanelParticipants.png
IMGScreenConnect.Properties.ControlPanelParticipants.png-preview.png
IMGScreenConnect.Properties.ControlPanelMessages.png
IMGScreenConnect.Properties.ControlPanelMessages.png-preview.png
IMGScreenConnect.Properties.ControlPanelMiscellaneous.png
IMGScreenConnect.Properties.ControlPanelMiscellaneous.png-preview.png
IMGScreenConnect.Properties.CommandOpenFolder.png
IMGScreenConnect.Properties.CommandOpenFolder.png-preview.png
IMGScreenConnect.Properties.CommandSelectQualityMedium.png
IMGScreenConnect.Properties.CommandSelectQualityMedium.png-preview.png
IMGScreenConnect.Properties.CommandBlankGuestMonitorTrue.png
IMGScreenConnect.Properties.CommandBlankGuestMonitorTrue.png-preview.png
IMGScreenConnect.Properties.CommandBlankGuestMonitorFalse.png
IMGScreenConnect.Properties.CommandBlankGuestMonitorFalse.png-preview.png
IMGScreenConnect.Properties.CommandSendMessage.png
IMGScreenConnect.Properties.CommandSendMessage.png-preview.png
IMGScreenConnect.Properties.CommandTakeScreenshotToFile.png
IMGScreenConnect.Properties.CommandTakeScreenshotToFile.png-preview.png
IMGScreenConnect.Properties.CommandTakeScreenshotToClipboard.png
IMGScreenConnect.Properties.CommandTakeScreenshotToClipboard.png-preview.png
IMGScreenConnect.Properties.CommandVideoRecord.png
IMGScreenConnect.Properties.CommandVideoRecord.png-preview.png
IMGScreenConnect.Properties.CommandVideoPause.png
IMGScreenConnect.Properties.CommandVideoPause.png-preview.png
IMGScreenConnect.Properties.CommandSelectQualityLow.png
IMGScreenConnect.Properties.CommandSelectQualityLow.png-preview.png
IMGScreenConnect.Properties.CommandChangeFolder.png
IMGScreenConnect.Properties.CommandChangeFolder.png-preview.png
IMGScreenConnect.Properties.CommandSendSystemKeyCode.png
IMGScreenConnect.Properties.CommandSendSystemKeyCode.png-preview.png
IMGScreenConnect.Properties.CommandRebootToSafeMode.png
IMGScreenConnect.Properties.CommandRebootToSafeMode.png-preview.png
IMGScreenConnect.Properties.CommandRebootToNormalMode.png
IMGScreenConnect.Properties.CommandRebootToNormalMode.png-preview.png
IMGScreenConnect.Properties.CommandSuspendMyInputTrue.png
IMGScreenConnect.Properties.CommandSuspendMyInputTrue.png-preview.png
IMGScreenConnect.Properties.CommandSuspendMyInputFalse.png
IMGScreenConnect.Properties.CommandSuspendMyInputFalse.png-preview.png
IMGScreenConnect.Properties.CommandAcquireWakeLockTrue.png
IMGScreenConnect.Properties.CommandAcquireWakeLockTrue.png-preview.png
IMGScreenConnect.Properties.CommandSelectQualityHigh.png
IMGScreenConnect.Properties.CommandSelectQualityHigh.png-preview.png
IMGScreenConnect.Properties.CommandVideoStop.png
IMGScreenConnect.Properties.CommandVideoStop.png-preview.png
IMGScreenConnect.Properties.CommandManageSharedToolbox.png
IMGScreenConnect.Properties.CommandManageSharedToolbox.png-preview.png
IMGScreenConnect.Properties.CommandSendFiles.png
IMGScreenConnect.Properties.CommandSendFiles.png-preview.png
IMGScreenConnect.Properties.CommandReceiveFiles.png
IMGScreenConnect.Properties.CommandReceiveFiles.png-preview.png
IMGScreenConnect.Properties.CommandReceiveFolder.png
IMGScreenConnect.Properties.CommandReceiveFolder.png-preview.png
IMGScreenConnect.Properties.CommandSendFolder.png
IMGScreenConnect.Properties.CommandSendFolder.png-preview.png
IMGScreenConnect.Properties.ShareMask.png
IMGScreenConnect.Properties.ShareMask.png-preview.png
IMGScreenConnect.Properties.ShareGlyph.png
IMGScreenConnect.Properties.ShareGlyph.png-preview.png
IMGScreenConnect.Properties.DropDownGlyph.png
IMGScreenConnect.Properties.DropDownGlyph.png-preview.png
IMGScreenConnect.Properties.CommandShareMyDesktop.png
IMGScreenConnect.Properties.CommandShareMyDesktop.png-preview.png
IMGScreenConnect.Properties.ParticipantRequesting.png
IMGScreenConnect.Properties.ParticipantRequesting.png-preview.png
IMGScreenConnect.Properties.CommandDisconnectParticipant.png
IMGScreenConnect.Properties.CommandDisconnectParticipant.png-preview.png
IMGScreenConnect.Properties.CommandSendWindowSystemCommandRestore.png
IMGScreenConnect.Properties.CommandSendWindowSystemCommandRestore.png-preview.png
IMGScreenConnect.Properties.ControlPanelShare.png
IMGScreenConnect.Properties.ControlPanelShare.png-preview.png
IMGScreenConnect.Properties.ParticipantSendingInput.png
IMGScreenConnect.Properties.ParticipantSendingInput.png-preview.png
IMGScreenConnect.Properties.ParticipantGuest.png
IMGScreenConnect.Properties.ParticipantGuest.png-preview.png
IMGScreenConnect.Properties.ParticipantHost.png
IMGScreenConnect.Properties.ParticipantHost.png-preview.png
IMGScreenConnect.Properties.CommandManageCredentialsSendToScreen.png
IMGScreenConnect.Properties.CommandManageCredentialsSendToScreen.png-preview.png
IMGScreenConnect.Properties.ControlPanelSound.png
IMGScreenConnect.Properties.ControlPanelSound.png-preview.png
IMGScreenConnect.Properties.CommandSelectSoundCaptureModeSpeakers.png
IMGScreenConnect.Properties.CommandSelectSoundCaptureModeSpeakers.png-preview.png
IMGScreenConnect.Properties.CommandSelectSoundCaptureModeSilent.png
IMGScreenConnect.Properties.CommandSelectSoundCaptureModeSilent.png-preview.png
IMGScreenConnect.Properties.CommandSelectSoundCaptureModeHostMicrophone.png
IMGScreenConnect.Properties.CommandSelectSoundCaptureModeHostMicrophone.png-preview.png
IMGScreenConnect.Properties.CommandSelectSoundCaptureModeAllMicrophones.png
IMGScreenConnect.Properties.CommandSelectSoundCaptureModeAllMicrophones.png-preview.png
IMGScreenConnect.Properties.ParticipantMicrophoneSending.png
IMGScreenConnect.Properties.ParticipantMicrophoneSending.png-preview.png
IMGScreenConnect.Properties.ParticipantSpeakers.png
IMGScreenConnect.Properties.ParticipantSpeakers.png-preview.png
IMGScreenConnect.Properties.ParticipantSpeakersSending.png
IMGScreenConnect.Properties.ParticipantSpeakersSending.png-preview.png
IMGScreenConnect.Properties.CommandRegenerateParticipantColor.png
IMGScreenConnect.Properties.CommandRegenerateParticipantColor.png-preview.png
IMGScreenConnect.Properties.ControlPanelAnnotation.png
IMGScreenConnect.Properties.ControlPanelAnnotation.png-preview.png
IMGScreenConnect.Properties.CommandSelectAnnotationStrokeThicknessMedium.png
IMGScreenConnect.Properties.CommandSelectAnnotationStrokeThicknessMedium.png-preview.png
IMGScreenConnect.Properties.CommandSelectAnnotationStrokeThicknessThick.png
IMGScreenConnect.Properties.CommandSelectAnnotationStrokeThicknessThick.png-preview.png
IMGScreenConnect.Properties.CommandSelectAnnotationStrokeThicknessThin.png
IMGScreenConnect.Properties.CommandSelectAnnotationStrokeThicknessThin.png-preview.png
IMGScreenConnect.Properties.ParticipantAnnotating.png
IMGScreenConnect.Properties.ParticipantAnnotating.png-preview.png
IMGScreenConnect.Properties.CommandSelectAnnotationModeAllDraw.png
IMGScreenConnect.Properties.CommandSelectAnnotationModeAllDraw.png-preview.png
IMGScreenConnect.Properties.CommandSelectAnnotationModeHostDraw.png
IMGScreenConnect.Properties.CommandSelectAnnotationModeHostDraw.png-preview.png
IMGScreenConnect.Properties.CommandSelectAnnotationModeInvisible.png
IMGScreenConnect.Properties.CommandSelectAnnotationModeInvisible.png-preview.png
IMGScreenConnect.Properties.CommandSelectAnnotationModeViewOnly.png
IMGScreenConnect.Properties.CommandSelectAnnotationModeViewOnly.png-preview.png
IMGScreenConnect.Properties.CommandSelectAnnotationToolEllipse.png
IMGScreenConnect.Properties.CommandSelectAnnotationToolEllipse.png-preview.png
IMGScreenConnect.Properties.CommandSelectAnnotationToolLine.png
IMGScreenConnect.Properties.CommandSelectAnnotationToolLine.png-preview.png
IMGScreenConnect.Properties.CommandSelectAnnotationToolRectangle.png
IMGScreenConnect.Properties.CommandSelectAnnotationToolRectangle.png-preview.png
IMGScreenConnect.Properties.ControlPanelHelper.png
IMGScreenConnect.Properties.ControlPanelHelper.png-preview.png
IMGScreenConnect.Properties.CommandSelectHelperHighlightToolNone.png
IMGScreenConnect.Properties.CommandSelectHelperHighlightToolNone.png-preview.png
IMGScreenConnect.Properties.CommandSelectHelperHighlightToolCross.png
IMGScreenConnect.Properties.CommandSelectHelperHighlightToolCross.png-preview.png
IMGScreenConnect.Properties.CommandSelectHelperHighlightToolLasso.png
IMGScreenConnect.Properties.CommandSelectHelperHighlightToolLasso.png-preview.png
IMGScreenConnect.Properties.CommandSendClipboardKeystrokes.png
IMGScreenConnect.Properties.CommandSendClipboardKeystrokes.png-preview.png
IMGScreenConnect.Properties.NotificationOptionsIcon.png
IMGScreenConnect.Properties.NotificationOptionsIcon.png-preview.png
IMGScreenConnect.Properties.StatusGlyphGuestNotConnected.png
IMGScreenConnect.Properties.StatusGlyphGuestNotConnected.png-preview.png
IMGScreenConnect.Properties.StatusGlyphGuestAndHostConnected.png
IMGScreenConnect.Properties.StatusGlyphGuestAndHostConnected.png-preview.png
IMGScreenConnect.Properties.StatusGlyphBlankMonitor.png
IMGScreenConnect.Properties.StatusGlyphBlankMonitor.png-preview.png
IMGScreenConnect.Properties.StatusGlyphMask.png
IMGScreenConnect.Properties.StatusGlyphMask.png-preview.png
IMGScreenConnect.Properties.FeedbackBannerLogo.png
IMGScreenConnect.Properties.FeedbackBannerLogo.png-preview.png
CURScreenConnect.Properties.Lasso.cur
BINResources
BINRT_VERSION
BINID:0001
BINID:0
DLLScreenConnect.ClientService.dll
Structure
BINResources
BINRT_VERSION
BINID:0001
BINID:0
DLLScreenConnect.Windows.dll
Structure
BINResources
BINRT_VERSION
BINID:0001
BINID:0
BIN.Net Resources
DLLScreenConnect.Properties.libz.x64.dll
Structure
BINResources
BINRT_VERSION
BINID:0001
BINID:1036
DLLScreenConnect.Properties.libz.x86.dll
Structure
DLLScreenConnect.Properties.sclzma.x64.dll
Structure
DLLScreenConnect.Properties.sclzma.x86.dll
Structure
DLLScreenConnect.Properties.libwebp.x64.dll
Structure
DLLScreenConnect.Properties.libwebp.x86.dll
Structure
EXEScreenConnect.WindowsClient.exe
Structure
P7B[Authenticode]_5d6205b9.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:0
BINScreenConnect.WindowsClient.exe.config
BINServiceExeWithoutService
BINapp.config
BINClient.en-US.resources
BINClient.Override.en-US.resources
BINClient.Override.resources
BINClient.resources
EXE䌋䄱䜵䀾䛬㪌
Structure
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
BINRT_MANIFEST
BINID:0002
BINID:1033
BIN䡀䈛㵪䆲䗤䕲
BIN䡀䌍䈵䗦䕲䠼
BIN䡀䒌䓰䑲䑨䠷
BIN䡀䓊㼳䄨䆵䠫
BIN䡀㼿䕷䑬㭪䗤䠤
BIN䡀㼿䕷䑬㹪䒲䠯
BIN䡀㿿䏤䇬䗤䒬䠱
BIN䡀䕌䄨䈷䒏䇯䕨
BIN䡀䘌䗶䐲䆊䌷䑲
BIN䆒䑲㭾䉨䘤䗯䆒䑲
BIN䡀䈜䘦䈵䅘䈭䗦䠶
BIN䡀䈜䙵䆬㬨䑲䌩䠪
BIN䡀䈜䙵䆬㬨䑲䕷䏲
BIN䡀䈜䙵䆬㲨䖱䄷䏯
BIN䡀䄕䑸䋦䒌䇱䗬䒬䠱
BIN䡀䇊䌰㾱㼒䔨䈸䆱䠨
BIN䡀䈏䗤䕸㬨䐲䒳䈱䗱䠶
BIN䡀䑒䗶䏤㾯㼒䔨䈸䆱䠨
BIN䡀䇊䌰㮱䈻䘦䈷䈜䘴䑨䈦
BIN䡀䇊䗹䛎䆨䗸㼨䔨䈸䆱䠨
BIN䡀䑒䗶䏤㮯䈻䘦䈷䈜䘴䑨䈦
EXE䌋䄱䜵㬾䖸䒷㪰䗦䒬㵱䅬䄵䜵
Structure
DLLScreenConnect.Core.dll
BINCustomAction.config
BINOverlay_7d669e13.bin
BINResources
BINRT_VERSION
BINID:0001
BINID:0
BINID:1033
BINRT_MANIFEST
BINID:0002
BINID:1033
BINSummaryInformation
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 13
STICH kept: 3secondary ignored: 10
bin
9img
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
3 / 3
Path
ole:doc>bin>pe:dll>pe:dll
Shape
ole:doc>bin>pe:dll>pe:dll
4 nodes
Path
ole:doc>pe:dll>pe:dll
Shape
ole:doc>pe:dll>pe:dll
3 nodes
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential244 files
OFFa6ea1af8ac52d4e7eabb26c1f1aa2eaa
DLLScreenConnect.Client.dll
DLLScreenConnect.ClientService.dll
DLLScreenConnect.Core.dll
DLLScreenConnect.Windows.dll
EXEScreenConnect.WindowsClient.exe
BINScreenConnect.WindowsClient.exe.config
BINServiceExeWithoutService
DLLScreenConnect.InstallerActions.dll
DLLMicrosoft.Deployment.WindowsInstaller.dll
BINCustomAction.config
BINRoot Entry
No malware configuration was found at this point.
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
a6ea1af8ac52d4e7eabb26c1f1aa2eaa › Root Entry › 䌋䄱䜵㬾䖸䒷㪰䗦䒬㵱䅬䄵䜵 › ScreenConnect.Core.dll
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account