Suspicious
Suspect

614639e42d575cc59fd264857ae58220

MS Office Document
MD5: 614639e42d575cc59fd264857ae58220
Size: 975.36 KB
application/vnd.ms-office

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 614639e42d575cc59fd264857ae58220
Sha1 2c9a0b33982e5c5c8240aa10bb5cf7b6469f5d3c
Sha256 7c4c140a210226990d078ec1e406a3cd16f8217bdd879f17526bcd0348670dfd
Sha384 28f3170eaef2a0dde7d30490afc21183ead999976be7a8c7087637a612b5bd0d3631c2e777450ca686b13829ac6f89f8
Sha512 090d55729ce1029fb9083b1640e978932294341200beb4309c1fc52bbaecc08bfddaae06d57e10b99ecc58e769f027d729a58cc92c6dbf7e882265136d1693b3
SSDeep 24576:Hjg5A4DiMcqEeO058lr1EXKDTICYIg7RYTFl:ZEiMcqEF0+1UqECYIkYTFl
TLSH CD252314B7E0EB17D56BA83C54A7D9B22849FCE6AF85EE4730443F0D35329B12A6350E
614639e42d575cc59fd264857ae58220
Root Entry
CompObj
Workbook
SummaryInformation
DocumentSummaryInformation
MBD0022A68A
Ole
MBD00255A66
[Content_Types].xml
_rels
.rels
xl
_rels
workbook.xml.rels
workbook.xml
worksheets
sheet4.xml
_rels
sheet1.xml.rels
sheet2.xml.rels
sheet4.xml.rels
sheet3.xml.rels
sheet2.xml
sheet3.xml
sheet1.xml
sheet5.xml
charts
chart1.xml
_rels
chart1.xml.rels
style1.xml
colors1.xml
drawings
_rels
drawing1.xml.rels
vmlDrawing1.vml.rels
drawing2.xml.rels
drawing2.xml
drawing1.xml
vmlDrawing1.vml
embeddings
oleObject1.bin
Root Entry
Ole10Native
PDF @0x000000C5
oleObject2.bin
Root Entry
Ole
CompObj
CONTENTS
#Stream obj 4 0
#Stream obj 7 0
#Stream obj 12 0
#Stream obj 17 0
Structure
media
image1.png
image1.png-preview.png
image3.emf
image2.emf
styles.xml
theme
theme1.xml
sharedStrings.xml
printerSettings
printerSettings3.bin
printerSettings2.bin
printerSettings4.bin
docProps
core.xml
app.xml
CompObj
_VBA_PROJECT_CUR
PROJECT
PROJECTwm
VBA
dir
_VBA_PROJECT
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 11 STICH kept: 2secondary ignored: 9
bin 4img 1oox:metadata 1oox:style 1oox:theme 1xml 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path ole:doc>oox:xlsx>oox:media>pdf>pdf
Shape ole:doc>oox:xlsx>oox:media>pdf>pdf
5 nodes
Path ole:doc>oox:xlsx>oox:media>ole:doc
Shape ole:doc>oox:xlsx>oox:media>ole:doc
4 nodes
Name Value
Version
1.3
Author
JCHURCH
CreationDate
D:20260717153138
Creator
Form ZZ_FSDSL_QUOTATION_R2 EN
Producer
SAP NetWeaver 750
/Author
JCHURCH
/CreationDate
D:20260717153138
/Creator
Form ZZ_FSDSL_QUOTATION_R2 EN
/Producer
SAP NetWeaver 750
614639e42d575cc59fd264857ae58220
Root Entry
CompObj
Workbook
SummaryInformation
DocumentSummaryInformation
MBD0022A68A
Ole
MBD00255A66
[Content_Types].xml
_rels
.rels
xl
_rels
workbook.xml.rels
workbook.xml
worksheets
sheet4.xml
_rels
sheet1.xml.rels
sheet2.xml.rels
sheet4.xml.rels
sheet3.xml.rels
sheet2.xml
sheet3.xml
sheet1.xml
sheet5.xml
charts
chart1.xml
_rels
chart1.xml.rels
style1.xml
colors1.xml
drawings
_rels
drawing1.xml.rels
vmlDrawing1.vml.rels
drawing2.xml.rels
drawing2.xml
drawing1.xml
vmlDrawing1.vml
embeddings
oleObject1.bin
Root Entry
Ole10Native
PDF @0x000000C5
oleObject2.bin
Root Entry
Ole
CompObj
CONTENTS
#Stream obj 4 0
#Stream obj 7 0
#Stream obj 12 0
#Stream obj 17 0
Structure
media
image1.png
image1.png-preview.png
image3.emf
image2.emf
styles.xml
theme
theme1.xml
sharedStrings.xml
printerSettings
printerSettings3.bin
printerSettings2.bin
printerSettings4.bin
docProps
core.xml
app.xml
CompObj
_VBA_PROJECT_CUR
PROJECT
PROJECTwm
VBA
dir
_VBA_PROJECT
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙