Suspicious
Suspect

c937c611c703cb8c47aad50b155f3756

MS Office Document
MD5: c937c611c703cb8c47aad50b155f3756
Size: 576 KB
application/vnd.ms-office

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 c937c611c703cb8c47aad50b155f3756
Sha1 085eaf24cd5cd83a893d7d8bd47a77e982e2e46a
Sha256 2e302f81ee0d3b092cd8e08c80a9c26a584e05d117da424487b3118f946a295d
Sha384 4867bcef437772546ca37db04abf06f632deb5c40eed561c4d011e19a610477c64ee8273fa6b7cef9694817b3274521d
Sha512 65da2487aecf2379f2fb0438ec539b342a7c50d43226f647ad716b51d52546a0fb3d8e8ed9751b668a81f699f4783fb7709c1e4b6b33d5d370ec2c04dd1ad7ef
SSDeep 12288:DGfwI82BUgjYqQgc5JsrvQagErarJxX6lFYO:afwI/rsqQrCgnUFY
TLSH CEC423587BE8DF23C297C1B90E84C5BB644AFC675791F9073221B31DA234B22955B72C
c937c611c703cb8c47aad50b155f3756
Root Entry
CompObj
Workbook
SummaryInformation
DocumentSummaryInformation
MBD001ECD29
[Content_Types].xml
_rels
.rels
xl
_rels
workbook.xml.rels
workbook.xml
theme
theme1.xml
worksheets
sheet3.xml
_rels
sheet1.xml.rels
sheet1.xml
drawings
_rels
vmlDrawing1.vml.rels
vmlDrawing1.vml
media
image1.emf
embeddings
oleObject2.bin
Root Entry
Ole
CompObj
CONTENTS
Text (Preview)
#Stream obj 5 0
#Stream obj 10 0
#Stream obj 11 0
#Stream obj 15 0
#Stream obj 16 0
#Stream obj 17 0
Structure
styles.xml
sharedStrings.xml
printerSettings
printerSettings1.bin
docProps
thumbnail.wmf
core.xml
app.xml
CompObj
MBD001ECD2A
Ole
_VBA_PROJECT_CUR
PROJECT
PROJECTwm
VBA
dir
_VBA_PROJECT
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 9 STICH kept: 1secondary ignored: 8
bin 4oox:metadata 1oox:style 1oox:theme 1xml 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path ole:doc>oox:xlsx>oox:media>ole:doc
Shape ole:doc>oox:xlsx>oox:media>ole:doc
4 nodes
Name Value
Version
1.7
CreationDate
D:20250908111410
Creator
PDFium
Producer
PDFium
/CreationDate
D:20250908111410
/Creator
PDFium
/Producer
PDFium
c937c611c703cb8c47aad50b155f3756
Root Entry
CompObj
Workbook
SummaryInformation
DocumentSummaryInformation
MBD001ECD29
[Content_Types].xml
_rels
.rels
xl
_rels
workbook.xml.rels
workbook.xml
theme
theme1.xml
worksheets
sheet3.xml
_rels
sheet1.xml.rels
sheet1.xml
drawings
_rels
vmlDrawing1.vml.rels
vmlDrawing1.vml
media
image1.emf
embeddings
oleObject2.bin
Root Entry
Ole
CompObj
CONTENTS
Text (Preview)
#Stream obj 5 0
#Stream obj 10 0
#Stream obj 11 0
#Stream obj 15 0
#Stream obj 16 0
#Stream obj 17 0
Structure
styles.xml
sharedStrings.xml
printerSettings
printerSettings1.bin
docProps
thumbnail.wmf
core.xml
app.xml
CompObj
MBD001ECD2A
Ole
_VBA_PROJECT_CUR
PROJECT
PROJECTwm
VBA
dir
_VBA_PROJECT
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙