Suspect
99f3771ca5d389bbcdfc7c935fb5658a
MS Excel Document
MD5: 99f3771ca5d389bbcdfc7c935fb5658a
Size: 946.11 KB
application/vnd.ms-excel
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | 99f3771ca5d389bbcdfc7c935fb5658a |
| Sha1 | 04429404f0a56e61b1279a71a014715628e7a2d4 |
| Sha256 | 7de8b252898d22bde75ef132e2c46d1c96d53ea534755e8cda17618e3006b4b0 |
| Sha384 | ffb84fd012ec75ab5aaa5a85bb30e3b6e2b9c6bb4d11a0bdd7c09ad6c0f094fe15553651feac26364258b54c9f9c294d |
| Sha512 | cb673884f6d3c1ead307cccd6f26563c9690b149a579be65bae430ba89b82135a01acce6fd687de975d750ef6a71b86c7882a484a30a8081c465af66dcb326c6 |
| SSDeep | 24576:+clP31RgDUQaxqsxzVkswRagRQYRjr/+3Gg3dhk5uj:+01R4nsxZ39YRjT+P1j |
| TLSH | 0C15336559A58433B312311B7DB038C2763EA44F6D8A4F67FFF028AE3C606E15B65227 |
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 9
STICH kept: 2secondary ignored: 7
bin
2img
1oox:metadata
1oox:style
1oox:theme
1xml
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
oox:xlsx>oox:media>ole:doc
Shape
oox:xlsx>oox:media>ole:doc
3 nodes
Path
oox:xlsx>oox:rel:ext
Shape
oox:xlsx>oox:rel:ext
2 nodes
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › drawings › _rels › drawing1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › drawings › _rels › drawing1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › drawings › _rels › drawing1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › drawings › _rels › drawing1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › drawings › _rels › drawing1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › worksheets › _rels › sheet1.xml.rels
Remote Resource Reference
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
99f3771ca5d389bbcdfc7c935fb5658a › xl › worksheets › _rels › sheet1.xml.rels
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.