Malicious
Malicious

b7d79d99cc4c9e1ba512e5a24d3e9708

MS Office Document
MD5: b7d79d99cc4c9e1ba512e5a24d3e9708
Size: 484.35 KB
application/vnd.ms-office
Summary by MalvaGPT
Characteristics
Hash
Hash Value
MD5
b7d79d99cc4c9e1ba512e5a24d3e9708
Sha1
55fc85a65e2b1a668c4be048f1b18fa3996cdf73
Sha256
7fa36027da764a24b5a5978390a536d3608ff7e5272b6c51bfb299b33c5ed094
Sha384
a9df2b6255645c1e7c663cc2cf71cff32d2cdd7f7f2b3c7ed49963a3218583d855c83e7ff4ef064bcbe5b9126720273d
Sha512
b8ee5a30c29f6496e6217808e1bc27540360669c34254b0f0f0ceb7f5b349537d64a6d8689572d907a337f87cd6296c8c3896b58e4c2728390b881a8309d8862
SSDeep
12288:kAPXRC0Yr+79QG0Z3S6793jshEdeUgqG0tAKkvO:kA/El/P3g9EG0tAKkG
TLSH
29A42349B0EECC2EC2679174CFC8C187924AFCB36F85D54BB240B34D883579A575E98A
File Structure
[Repaired @0x00000E00]
Malicious
RooT Entry
Malicious
CompObj
Workbook
SummaryInformation
DocumentSummaryInformation
MBD00016040
Malicious
[Content_Types].xml
_rels
.rels
xl
Malicious
_rels
workbook.xml.rels
workbook.xml
worksheets
sheet4.xml
sheet2.xml
sheet3.xml
_rels
sheet1.xml.rels
sheet2.xml.rels
sheet3.xml.rels
sheet7.xml.rels
sheet6.xml.rels
sheet5.xml.rels
sheet4.xml.rels
sheet1.xml
sheet13.xml
sheet11.xml
sheet10.xml
sheet9.xml
sheet7.xml
sheet6.xml
sheet5.xml
sheet14.xml
sheet15.xml
sheet16.xml
media
image1.emf
embeddings
drawings
vmlDrawing1.vml
_rels
vmlDrawing1.vml.rels
sharedStrings.xml
theme
theme1.xml
styles.xml
printerSettings
printerSettings4.bin
printerSettings2.bin
printerSettings3.bin
printerSettings1.bin
printerSettings5.bin
externalLinks
Malicious
externalLink1.xml
_rels
Malicious
docProps
thumbnail.wmf
core.xml
app.xml
CompObj
MBD00016041
Ole
_VBA_PROJECT_CUR
PROJECT
PROJECTwm
VBA
dir
_VBA_PROJECT
Malware Configuration - Remote Template
Config. Field
Value
Target

file:///F:\Copy%20of%20Muiltple%20master%20July%202016%20(003).xlsx

Path

externalLink1.xml.rels

XPath

/Relationships/Relationship

Outer XML

<Relationship Id="rId1" Type="http://schemas.openxmlformats.org/officeDocument/2006/relationships/externalLinkPath" Target="file:///F:\Copy%20of%20Muiltple%20master%20July%202016%20(003).xlsx" TargetMode="External" xmlns="http://schemas.openxmlformats.org/package/2006/relationships" />

Informations
Name
Value
CONTENTS

1.7

CONTENTS

Absa Retail

CONTENTS

D:20260622120032Z

CONTENTS

DocFusion

CONTENTS

D:20260622120032Z

CONTENTS

DocFusion

CONTENTS

DocFusion

CONTENTS

D:20260622120032Z

CONTENTS

D:20260622120032Z

CONTENTS

DocFusion

CONTENTS

Absa Retail

Artefacts
Name
Value
Remote Template - Highly Suspicious

file:///F:\Copy%20of%20Muiltple%20master%20July%202016%20(003).xlsx

URI

mailto:privacy@absa.co.za

b7d79d99cc4c9e1ba512e5a24d3e9708 (484.35 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙