bb85d3b922d633b4cdb796ccef4ce75e

MS Office Document

MD5: bb85d3b922d633b4cdb796ccef4ce75e

Size: 1.57 MB

application/vnd.ms-office

This sample is a 1.5 MB MS Office Document for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 244 embedded or derived files. It matches 14 YARA rules. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256: 2c8a65f496dee16049bba7303ed0a0eda99adbbd844dadc790110adfd33731f4
MD5: bb85d3b922d633b4cdb796ccef4ce75e
Verdict: Inconclusive
File type: MS Office Document · 1.5 MB

Cite this report: https://app.malva.re/sha256/2c8a65f496dee16049bba7303ed0a0eda99adbbd844dadc790110adfd33731f4

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

Microsoft Office Document

Size

1.57 MB · 1,568,768 B

First seen

2026-10-11 15:15 · 18 days ago

Last seen

2026-10-11 15:15 · 18 days ago

Last analysis

2026-10-11 15:16 · 18 days ago

Hashes

MD5 bb85d3b922d633b4cdb796ccef4ce75e Sha1 9456ed6bd770e23827470be9723e3717d4c1fdb6 Sha256 2c8a65f496dee16049bba7303ed0a0eda99adbbd844dadc790110adfd33731f4 Sha384 41af102485dd9df8f65ee6577d563db7b3f341849b1ff4c65976417e2b8ae716654e1bf96141f643597157553b4844a2 Sha512 3ed37327a5274d25c98a541a4243908866a5c94567e47c12439946f70f1c86c4c9a0f89f4cc899906dd01968c664b5d0a1ca292081936ee46fc19f04a4cb0f81 SSDeep 24576:QZPlmF0uwTKh56Z5vePu/DVeL1pVjeOCnUUGGu/aYmQurhwQUvU:qmh69eWbVypVCBgGu/aYmn1gU TLSH 8275012077F88439F6F62B31AE3A95609E3ABD241F71C15E8354391D0DB0A909BB6773

244 files

OFFbb85d3b922d633b4cdb796ccef4ce75e

DLLScreenConnect.Client.dll

DLLScreenConnect.ClientService.dll

DLLScreenConnect.Core.dll

Structure

BINResources

BINRT_VERSION

BINID:0001

BINID:0

DLLScreenConnect.Windows.dll

EXEScreenConnect.WindowsClient.exe

BINScreenConnect.WindowsClient.exe.config

BINServiceExeWithoutService

DLLScreenConnect.InstallerActions.dll

Structure

DLLMicrosoft.Deployment.WindowsInstaller.dll

Structure

BIN.Net Resources

BINMicrosoft.Deployment.WindowsInstaller.Errors.resources

BINResources

BINRT_VERSION

BINID:0001

BINID:0

BINCustomAction.config

BINRoot Entry

BIN䡀䆒䑲

BIN䡀䌏䈯

BIN䡀䈖䌧䠤

BIN䡀䌋䄱䜵

BIN䡀䕎䒵䠵

BIN䡀㬿䏲䐸䖱

BIN䡀㽿䅤䈯䠶

BIN䡀䈏䗤䕸䠨

BIN䡀䈛䌪䗶䜵

BIN䡀䓞䕪䇤䠨

BIN䡀䕙䓲䕨䜷

BIN䈍䄩䏸䞷䄦䠥

DLLScreenConnect.Client.dll

Structure

BIN.Net Resources

IMGScreenConnect.Properties.CommandSendWindowSystemCommandClose.png

IMGScreenConnect.Properties.CommandSendWindowSystemCommandClose.png-preview.png

IMGScreenConnect.Properties.CommandSendWindowSystemCommandMinimize.png

IMGScreenConnect.Properties.CommandSendWindowSystemCommandMinimize.png-preview.png

IMGScreenConnect.Properties.CommandSendWindowSystemCommandMaximize.png

IMGScreenConnect.Properties.CommandSendWindowSystemCommandMaximize.png-preview.png

IMGScreenConnect.Properties.CommandUndockControlPanel.png

IMGScreenConnect.Properties.CommandUndockControlPanel.png-preview.png

IMGScreenConnect.Properties.CommandDockControlPanel.png

IMGScreenConnect.Properties.CommandDockControlPanel.png-preview.png

IMGScreenConnect.Properties.ControlPanelView.png

IMGScreenConnect.Properties.ControlPanelView.png-preview.png

IMGScreenConnect.Properties.ControlPanelStatus.png

IMGScreenConnect.Properties.ControlPanelStatus.png-preview.png

IMGScreenConnect.Properties.ControlPanelToolbox.png

IMGScreenConnect.Properties.ControlPanelToolbox.png-preview.png

IMGScreenConnect.Properties.ControlPanelFileTransfer.png

IMGScreenConnect.Properties.ControlPanelFileTransfer.png-preview.png

IMGScreenConnect.Properties.ControlPanelScreenCapture.png

IMGScreenConnect.Properties.ControlPanelScreenCapture.png-preview.png

IMGScreenConnect.Properties.ControlPanelParticipants.png

IMGScreenConnect.Properties.ControlPanelParticipants.png-preview.png

IMGScreenConnect.Properties.ControlPanelMessages.png

IMGScreenConnect.Properties.ControlPanelMessages.png-preview.png

IMGScreenConnect.Properties.ControlPanelMiscellaneous.png

IMGScreenConnect.Properties.ControlPanelMiscellaneous.png-preview.png

IMGScreenConnect.Properties.CommandOpenFolder.png

IMGScreenConnect.Properties.CommandOpenFolder.png-preview.png

IMGScreenConnect.Properties.CommandSelectQualityMedium.png

IMGScreenConnect.Properties.CommandSelectQualityMedium.png-preview.png

IMGScreenConnect.Properties.CommandBlankGuestMonitorTrue.png

IMGScreenConnect.Properties.CommandBlankGuestMonitorTrue.png-preview.png

IMGScreenConnect.Properties.CommandBlankGuestMonitorFalse.png

IMGScreenConnect.Properties.CommandBlankGuestMonitorFalse.png-preview.png

IMGScreenConnect.Properties.CommandSendMessage.png

IMGScreenConnect.Properties.CommandSendMessage.png-preview.png

IMGScreenConnect.Properties.CommandTakeScreenshotToFile.png

IMGScreenConnect.Properties.CommandTakeScreenshotToFile.png-preview.png

IMGScreenConnect.Properties.CommandTakeScreenshotToClipboard.png

IMGScreenConnect.Properties.CommandTakeScreenshotToClipboard.png-preview.png

IMGScreenConnect.Properties.CommandVideoRecord.png

IMGScreenConnect.Properties.CommandVideoRecord.png-preview.png

IMGScreenConnect.Properties.CommandVideoPause.png

IMGScreenConnect.Properties.CommandVideoPause.png-preview.png

IMGScreenConnect.Properties.CommandSelectQualityLow.png

IMGScreenConnect.Properties.CommandSelectQualityLow.png-preview.png

IMGScreenConnect.Properties.CommandChangeFolder.png

IMGScreenConnect.Properties.CommandChangeFolder.png-preview.png

IMGScreenConnect.Properties.CommandSendSystemKeyCode.png

IMGScreenConnect.Properties.CommandSendSystemKeyCode.png-preview.png

IMGScreenConnect.Properties.CommandRebootToSafeMode.png

IMGScreenConnect.Properties.CommandRebootToSafeMode.png-preview.png

IMGScreenConnect.Properties.CommandRebootToNormalMode.png

IMGScreenConnect.Properties.CommandRebootToNormalMode.png-preview.png

IMGScreenConnect.Properties.CommandSuspendMyInputTrue.png

IMGScreenConnect.Properties.CommandSuspendMyInputTrue.png-preview.png

IMGScreenConnect.Properties.CommandSuspendMyInputFalse.png

IMGScreenConnect.Properties.CommandSuspendMyInputFalse.png-preview.png

IMGScreenConnect.Properties.CommandAcquireWakeLockTrue.png

IMGScreenConnect.Properties.CommandAcquireWakeLockTrue.png-preview.png

IMGScreenConnect.Properties.CommandSelectQualityHigh.png

IMGScreenConnect.Properties.CommandSelectQualityHigh.png-preview.png

IMGScreenConnect.Properties.CommandVideoStop.png

IMGScreenConnect.Properties.CommandVideoStop.png-preview.png

IMGScreenConnect.Properties.CommandManageSharedToolbox.png

IMGScreenConnect.Properties.CommandManageSharedToolbox.png-preview.png

IMGScreenConnect.Properties.CommandSendFiles.png

IMGScreenConnect.Properties.CommandSendFiles.png-preview.png

IMGScreenConnect.Properties.CommandReceiveFiles.png

IMGScreenConnect.Properties.CommandReceiveFiles.png-preview.png

IMGScreenConnect.Properties.CommandReceiveFolder.png

IMGScreenConnect.Properties.CommandReceiveFolder.png-preview.png

IMGScreenConnect.Properties.CommandSendFolder.png

IMGScreenConnect.Properties.CommandSendFolder.png-preview.png

IMGScreenConnect.Properties.ShareMask.png

IMGScreenConnect.Properties.ShareMask.png-preview.png

IMGScreenConnect.Properties.ShareGlyph.png

IMGScreenConnect.Properties.ShareGlyph.png-preview.png

IMGScreenConnect.Properties.DropDownGlyph.png

IMGScreenConnect.Properties.DropDownGlyph.png-preview.png

IMGScreenConnect.Properties.CommandShareMyDesktop.png

IMGScreenConnect.Properties.CommandShareMyDesktop.png-preview.png

IMGScreenConnect.Properties.ParticipantRequesting.png

IMGScreenConnect.Properties.ParticipantRequesting.png-preview.png

IMGScreenConnect.Properties.CommandDisconnectParticipant.png

IMGScreenConnect.Properties.CommandDisconnectParticipant.png-preview.png

IMGScreenConnect.Properties.CommandSendWindowSystemCommandRestore.png

IMGScreenConnect.Properties.CommandSendWindowSystemCommandRestore.png-preview.png

IMGScreenConnect.Properties.ControlPanelShare.png

IMGScreenConnect.Properties.ControlPanelShare.png-preview.png

IMGScreenConnect.Properties.ParticipantSendingInput.png

IMGScreenConnect.Properties.ParticipantSendingInput.png-preview.png

IMGScreenConnect.Properties.ParticipantGuest.png

IMGScreenConnect.Properties.ParticipantGuest.png-preview.png

IMGScreenConnect.Properties.ParticipantHost.png

IMGScreenConnect.Properties.ParticipantHost.png-preview.png

IMGScreenConnect.Properties.CommandManageCredentialsSendToScreen.png

IMGScreenConnect.Properties.CommandManageCredentialsSendToScreen.png-preview.png

IMGScreenConnect.Properties.ControlPanelSound.png

IMGScreenConnect.Properties.ControlPanelSound.png-preview.png

IMGScreenConnect.Properties.CommandSelectSoundCaptureModeSpeakers.png

IMGScreenConnect.Properties.CommandSelectSoundCaptureModeSpeakers.png-preview.png

IMGScreenConnect.Properties.CommandSelectSoundCaptureModeSilent.png

IMGScreenConnect.Properties.CommandSelectSoundCaptureModeSilent.png-preview.png

IMGScreenConnect.Properties.CommandSelectSoundCaptureModeHostMicrophone.png

IMGScreenConnect.Properties.CommandSelectSoundCaptureModeHostMicrophone.png-preview.png

IMGScreenConnect.Properties.CommandSelectSoundCaptureModeAllMicrophones.png

IMGScreenConnect.Properties.CommandSelectSoundCaptureModeAllMicrophones.png-preview.png

IMGScreenConnect.Properties.ParticipantMicrophoneSending.png

IMGScreenConnect.Properties.ParticipantMicrophoneSending.png-preview.png

IMGScreenConnect.Properties.ParticipantSpeakers.png

IMGScreenConnect.Properties.ParticipantSpeakers.png-preview.png

IMGScreenConnect.Properties.ParticipantSpeakersSending.png

IMGScreenConnect.Properties.ParticipantSpeakersSending.png-preview.png

IMGScreenConnect.Properties.CommandRegenerateParticipantColor.png

IMGScreenConnect.Properties.CommandRegenerateParticipantColor.png-preview.png

IMGScreenConnect.Properties.ControlPanelAnnotation.png

IMGScreenConnect.Properties.ControlPanelAnnotation.png-preview.png

IMGScreenConnect.Properties.CommandSelectAnnotationStrokeThicknessMedium.png

IMGScreenConnect.Properties.CommandSelectAnnotationStrokeThicknessMedium.png-preview.png

IMGScreenConnect.Properties.CommandSelectAnnotationStrokeThicknessThick.png

IMGScreenConnect.Properties.CommandSelectAnnotationStrokeThicknessThick.png-preview.png

IMGScreenConnect.Properties.CommandSelectAnnotationStrokeThicknessThin.png

IMGScreenConnect.Properties.CommandSelectAnnotationStrokeThicknessThin.png-preview.png

IMGScreenConnect.Properties.ParticipantAnnotating.png

IMGScreenConnect.Properties.ParticipantAnnotating.png-preview.png

IMGScreenConnect.Properties.CommandSelectAnnotationModeAllDraw.png

IMGScreenConnect.Properties.CommandSelectAnnotationModeAllDraw.png-preview.png

IMGScreenConnect.Properties.CommandSelectAnnotationModeHostDraw.png

IMGScreenConnect.Properties.CommandSelectAnnotationModeHostDraw.png-preview.png

IMGScreenConnect.Properties.CommandSelectAnnotationModeInvisible.png

IMGScreenConnect.Properties.CommandSelectAnnotationModeInvisible.png-preview.png

IMGScreenConnect.Properties.CommandSelectAnnotationModeViewOnly.png

IMGScreenConnect.Properties.CommandSelectAnnotationModeViewOnly.png-preview.png

IMGScreenConnect.Properties.CommandSelectAnnotationToolEllipse.png

IMGScreenConnect.Properties.CommandSelectAnnotationToolEllipse.png-preview.png

IMGScreenConnect.Properties.CommandSelectAnnotationToolLine.png

IMGScreenConnect.Properties.CommandSelectAnnotationToolLine.png-preview.png

IMGScreenConnect.Properties.CommandSelectAnnotationToolRectangle.png

IMGScreenConnect.Properties.CommandSelectAnnotationToolRectangle.png-preview.png

IMGScreenConnect.Properties.ControlPanelHelper.png

IMGScreenConnect.Properties.ControlPanelHelper.png-preview.png

IMGScreenConnect.Properties.CommandSelectHelperHighlightToolNone.png

IMGScreenConnect.Properties.CommandSelectHelperHighlightToolNone.png-preview.png

IMGScreenConnect.Properties.CommandSelectHelperHighlightToolCross.png

IMGScreenConnect.Properties.CommandSelectHelperHighlightToolCross.png-preview.png

IMGScreenConnect.Properties.CommandSelectHelperHighlightToolLasso.png

IMGScreenConnect.Properties.CommandSelectHelperHighlightToolLasso.png-preview.png

IMGScreenConnect.Properties.CommandSendClipboardKeystrokes.png

IMGScreenConnect.Properties.CommandSendClipboardKeystrokes.png-preview.png

IMGScreenConnect.Properties.NotificationOptionsIcon.png

IMGScreenConnect.Properties.NotificationOptionsIcon.png-preview.png

IMGScreenConnect.Properties.StatusGlyphGuestNotConnected.png

IMGScreenConnect.Properties.StatusGlyphGuestNotConnected.png-preview.png

IMGScreenConnect.Properties.StatusGlyphGuestAndHostConnected.png

IMGScreenConnect.Properties.StatusGlyphGuestAndHostConnected.png-preview.png

IMGScreenConnect.Properties.StatusGlyphBlankMonitor.png

IMGScreenConnect.Properties.StatusGlyphBlankMonitor.png-preview.png

IMGScreenConnect.Properties.StatusGlyphMask.png

IMGScreenConnect.Properties.StatusGlyphMask.png-preview.png

IMGScreenConnect.Properties.FeedbackBannerLogo.png

IMGScreenConnect.Properties.FeedbackBannerLogo.png-preview.png

CURScreenConnect.Properties.Lasso.cur

BINResources

BINRT_VERSION

BINID:0001

BINID:0

DLLScreenConnect.ClientService.dll

Structure

BINResources

BINRT_VERSION

BINID:0001

BINID:0

DLLScreenConnect.Windows.dll

Structure

BINResources

BINRT_VERSION

BINID:0001

BINID:0

BIN.Net Resources

DLLScreenConnect.Properties.libz.x64.dll

Structure

DLLScreenConnect.Properties.libz.x86.dll

Structure

BINResources

BINRT_VERSION

BINID:0001

BINID:1036

DLLScreenConnect.Properties.sclzma.x64.dll

Structure

DLLScreenConnect.Properties.sclzma.x86.dll

Structure

DLLScreenConnect.Properties.libwebp.x64.dll

Structure

DLLScreenConnect.Properties.libwebp.x86.dll

Structure

EXEScreenConnect.WindowsClient.exe

Structure

P7B[Authenticode]_5d6205b9.p7b

BINResources

BINRT_VERSION

BINID:0001

BINID:0

BINScreenConnect.WindowsClient.exe.config

BINServiceExeWithoutService

BINapp.config

BINClient.en-US.resources

BINClient.Override.en-US.resources

BINClient.Override.resources

BINClient.resources

EXE䌋䄱䜵䀾䛬㪌

Structure

BINResources

BINRT_VERSION

BINID:0001

BINID:1033

BINRT_MANIFEST

BINID:0002

BINID:1033

BIN䡀䈛㵪䆲䗤䕲

BIN䡀䌍䈵䗦䕲䠼

BIN䡀䒌䓰䑲䑨䠷

BIN䡀䓊㼳䄨䆵䠫

BIN䡀㼿䕷䑬㭪䗤䠤

BIN䡀㼿䕷䑬㹪䒲䠯

BIN䡀㿿䏤䇬䗤䒬䠱

BIN䡀䕌䄨䈷䒏䇯䕨

BIN䡀䘌䗶䐲䆊䌷䑲

BIN䆒䑲㭾䉨䘤䗯䆒䑲

BIN䡀䈜䘦䈵䅘䈭䗦䠶

BIN䡀䈜䙵䆬㬨䑲䌩䠪

BIN䡀䈜䙵䆬㬨䑲䕷䏲

BIN䡀䈜䙵䆬㲨䖱䄷䏯

BIN䡀䄕䑸䋦䒌䇱䗬䒬䠱

BIN䡀䇊䌰㾱㼒䔨䈸䆱䠨

BIN䡀䈏䗤䕸㬨䐲䒳䈱䗱䠶

BIN䡀䑒䗶䏤㾯㼒䔨䈸䆱䠨

BIN䡀䇊䌰㮱䈻䘦䈷䈜䘴䑨䈦

BIN䡀䇊䗹䛎䆨䗸㼨䔨䈸䆱䠨

BIN䡀䑒䗶䏤㮯䈻䘦䈷䈜䘴䑨䈦

EXE䌋䄱䜵㬾䖸䒷㪰䗦䒬㵱䅬䄵䜵

Structure

BINOverlay_7d669e13.bin

BINResources

BINRT_VERSION

BINID:0001

BINID:0

BINID:1033

BINRT_MANIFEST

BINID:0002

BINID:1033

DLLScreenConnect.Core.dll

BINCustomAction.config

BINSummaryInformation

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 13 STICH kept: 3secondary ignored: 10

bin 9img 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

3 / 3

Path ole:doc>bin>pe:dll>pe:dll

Shape ole:doc>bin>pe:dll>pe:dll

4 nodes

Path ole:doc>pe:dll>pe:dll

Shape ole:doc>pe:dll>pe:dll

3 nodes

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

244 files

OFFbb85d3b922d633b4cdb796ccef4ce75e

DLLScreenConnect.Client.dll

DLLScreenConnect.ClientService.dll

DLLScreenConnect.Core.dll

DLLScreenConnect.Windows.dll

EXEScreenConnect.WindowsClient.exe

BINScreenConnect.WindowsClient.exe.config

BINServiceExeWithoutService

DLLScreenConnect.InstallerActions.dll

DLLMicrosoft.Deployment.WindowsInstaller.dll

BINCustomAction.config

BINRoot Entry

No malware configuration was found at this point.

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

bb85d3b922d633b4cdb796ccef4ce75e › ScreenConnect.Client.dll

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

bb85d3b922d633b4cdb796ccef4ce75e

Overview

Summary by MalvaGPT

Characteristics

File Structure

Artefacts1

bb85d3b922d633b4cdb796ccef4ce75e (1.57 MB)

File Structure

Artefacts1