Suspicious
Suspect

aad3f1f7e637ef40681938477dc83843

Share on LinkedIn
Print
MS Word Document
MD5: aad3f1f7e637ef40681938477dc83843
Size: 1.09 MB
application/msword

This sample is a 1 MB MS Word Document for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 17 embedded or derived files. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
c7dae6352987cf6e029a694c616d2ca5a0e4983ca3680cc84efa7bebfc5c8b04
MD5
aad3f1f7e637ef40681938477dc83843
Verdict
Inconclusive
File type
MS Word Document · 1 MB

Cite this report: https://app.malva.re/sha256/c7dae6352987cf6e029a694c616d2ca5a0e4983ca3680cc84efa7bebfc5c8b04

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
Microsoft Office Document
Size
1.09 MB · 1,086,826 B
First seen
2026-10-26 07:30 · 4 days ago
Last seen
2026-10-26 07:30 · 4 days ago
Last analysis
2026-10-26 07:30 · 4 days ago
Hashes
MD5 aad3f1f7e637ef40681938477dc83843 Sha1 d5a515824991a781eb4c4ad64ad22bac30d3b445 Sha256 c7dae6352987cf6e029a694c616d2ca5a0e4983ca3680cc84efa7bebfc5c8b04 Sha384 dee477da4cf64cc72537267c106db0af7dc5bf792a0dc8710f91f0fd85e7d13994d5def850eff86217ae7e689f0a42c0 Sha512 456e113f2935dcddb87e4837ed6c309b9be1f7a59ef24c7e086798b8a7a5c7bf3786868eee49ae49edbe2579ce1246552f3ed1502fa7a40d3dc925b9a874086e SSDeep 24576:PA8BeR6l+AiS1qQ9GnpSwB6e51KB0om05oOljbuYwWq:PA646lFiS1qQ9Gpj6yKV0O11e TLSH 4835EE78C38A8ADFC865FDAF84038BEF4DC408F75C7D06D24AE056B1B56584A1152EEB

18 files
DOCaad3f1f7e637ef40681938477dc83843
XML[Content_Types].xml
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 5 STICH kept: 1secondary ignored: 4
oox:metadata 1oox:style 1oox:theme 1xml 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path oox:docx>rtf
Shape oox:docx>rtf
2 nodes

An error has occurred. This application may no longer respond until reloaded. Reload 🗙