MS Office Document file analysis – 04395a955f57

This sample is a 17.8 MB MS Office Document for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 611 embedded or derived files. It matches 48 YARA rules. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256: 04395a955f57f772cfb4d0d6161bf085c48e6d55ed6fc7cbbf522867099957d7
MD5: f66176e082519e29d0e79e5c1d9a4054
Verdict: Inconclusive
File type: MS Office Document · 17.8 MB

Cite this report: https://app.malva.re/sha256/04395a955f57f772cfb4d0d6161bf085c48e6d55ed6fc7cbbf522867099957d7

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

Microsoft Office Document

Size

18.62 MB · 18,616,320 B

First seen

2026-11-02 09:45 · 7 hours ago

Last seen

2026-11-02 09:45 · 7 hours ago

Last analysis

2026-11-02 09:45 · 7 hours ago

Hashes

MD5 f66176e082519e29d0e79e5c1d9a4054 Sha1 a1e4d32939c75e225d27533c2560feea7a5d18f0 Sha256 04395a955f57f772cfb4d0d6161bf085c48e6d55ed6fc7cbbf522867099957d7 Sha384 c86b4566b788c4623371e353f6bb2a81e0167d3e7daeed5e0161c7bcc4273e93a49ba94f734049a4bef3b9c3ffe23bb9 Sha512 d47fa83a7112848529fa3a12e1e3ae12275fecebf14906cd4092e7ab6a8409d95700704807f83ccc05f2943e429d13869bcd2de595479882cf07ca14a3844112 SSDeep 393216:28bR+raaElaEfGm2ueWNnFMwdywjhwLOkQ820ooqzdIOzkUE2Q3/6CX1XZNG+CCs:ZbkzEla5NTGb820GWZ3/32 TLSH 9C179D0AB550E36CF4972131E83D66FA59212E61D73641CF9BB47C84BBF46E2203A74B

612 files

OFFf66176e082519e29d0e79e5c1d9a4054

7Z7z-stream @ 0x0099BE0E.7z

BINRoot Entry

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 15 STICH kept: 4secondary ignored: 11

bin 9img 2

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

4 / 4

Path ole:doc>html>pe:exe>html

Shape ole:doc>html>pe:exe>html

4 nodes

Path ole:doc>html>html

Shape ole:doc>html>html

3 nodes

f66176e082519e29d0e79e5c1d9a4054

Overview

Summary by MalvaGPT

Characteristics

File Structure

f66176e082519e29d0e79e5c1d9a4054 (18.62 MB)

File Structure