Malicious
Malicious

e62bb1d72781604c255bd9391c389d1e

MS Office Document
MD5: e62bb1d72781604c255bd9391c389d1e
Size: 485.38 KB
application/vnd.ms-office
Summary by MalvaGPT
Characteristics
Hash
Hash Value
MD5
e62bb1d72781604c255bd9391c389d1e
Sha1
8b10a55643785e6cf913dc8c2a6fbd50280c7182
Sha256
561cfc0f5af02ed7c0f75ff56ca280c066b2bb9d675f51321dafe35c7d33f39b
Sha384
54330e0d808301922ef22504fc5d422351a27fd615d19cfaf3ad4627f37efe3441a6d701fc4bb58536dccd364963da0d
Sha512
50fa09fd574b078846c9a91183a82ecad796fc1f7928d21eb31095c9f61c6b2ea558514ea79eed7f4c06975e946b345f5ab7da8ccbf365a15adc6b45383afa63
SSDeep
12288:XAPXRCk+79QG0WW7zzpmszvCfj9fpQJ5yh6D5:XA/EQxEszvChWOm
TLSH
A6A4232931DADE2FC223D2788AC0D586D21DFC671F8CE31B3281339D1475626225F9AB
File Structure
[Repaired @0x00000E00]
Malicious
Root Entry
Malicious
CompObj
Workbook
SummaryInformation
DocumentSummaryInformation
MBD0002771F
Malicious
[Content_Types].xml
_rels
.rels
xl
Malicious
_rels
workbook.xml.rels
workbook.xml
worksheets
sheet4.xml
sheet2.xml
sheet3.xml
_rels
sheet1.xml.rels
sheet2.xml.rels
sheet3.xml.rels
sheet7.xml.rels
sheet6.xml.rels
sheet5.xml.rels
sheet4.xml.rels
sheet1.xml
sheet13.xml
sheet12.xml
sheet11.xml
sheet10.xml
sheet9.xml
sheet8.xml
sheet7.xml
sheet6.xml
sheet5.xml
sheet14.xml
sheet15.xml
sheet16.xml
media
image1.emf
embeddings
drawings
vmlDrawing1.vml
_rels
vmlDrawing1.vml.rels
sharedStrings.xml
theme
theme1.xml
styles.xml
printerSettings
printerSettings4.bin
printerSettings2.bin
printerSettings3.bin
printerSettings1.bin
printerSettings5.bin
externalLinks
Malicious
externalLink1.xml
_rels
Malicious
docProps
thumbnail.wmf
core.xml
app.xml
CompObj
MBD00027720
Ole
_VBA_PROJECT_CUR
PROJECT
PROJECTwm
VBA
dir
_VBA_PROJECT
Malware Configuration - Remote Template
Config. Field
Value
Target

file:///F:\Copy%20of%20Muiltple%20master%20July%202016%20(003).xlsx

Path

externalLink1.xml.rels

XPath

/Relationships/Relationship

Outer XML

<Relationship Id="rId1" Type="http://schemas.openxmlformats.org/officeDocument/2006/relationships/externalLinkPath" Target="file:///F:\Copy%20of%20Muiltple%20master%20July%202016%20(003).xlsx" TargetMode="External" xmlns="http://schemas.openxmlformats.org/package/2006/relationships" />

Informations
Name
Value
CONTENTS

1.7

CONTENTS

Absa Retail

CONTENTS

D:20260622120032Z

CONTENTS

DocFusion

CONTENTS

D:20260622120032Z

CONTENTS

DocFusion

CONTENTS

DocFusion

CONTENTS

D:20260622120032Z

CONTENTS

D:20260622120032Z

CONTENTS

DocFusion

CONTENTS

Absa Retail

Artefacts
Name
Value
Remote Template - Highly Suspicious

file:///F:\Copy%20of%20Muiltple%20master%20July%202016%20(003).xlsx

URI

mailto:privacy@absa.co.za

e62bb1d72781604c255bd9391c389d1e (485.38 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙