f8ca92e4c11d238d2679a88bf0dc5376

MS Word Document
|
MD5: f8ca92e4c11d238d2679a88bf0dc5376
|
Size: 159.76 KB
|
application/msword

Infection Chain

Summary by MalvaGPT

Characteristics

Hash	Hash Value
MD5	f8ca92e4c11d238d2679a88bf0dc5376
Sha1	fe27a1b144e6e98ab366306d8dbcb35a85ddee1c
Sha256	eccda593bbc09fb143ebd05d1a6116cfb45a61f9e86477d7e33402719bb4c856
Sha384	965d066be68e75a57bba9bc09dfbd6bfdd24510372cfa6060657d4119c9a4d3b1168ee611e1a24eeb32726161c51477c
Sha512	9605b082a4678bce761d7c3c7862c54a3c2dc2924fdb21637cfe9a59f11111b4a65dd4cdbb68baec3be43bd7bd2113ebcbbdf581674126624f9b3741e812341f
SSDeep	3072:m24+PaVngTJ0SLPlNmae3WVzuribeg7tkjfZzEQzCuj5FAXMpSU:mT+PgaJ0YlcuKrbgRMx7zU8pSU
TLSH	C0F31254C8F0DA2ACB99B2795AC4AED5C3F635E3191B8ED50D2008ECC58BAD7B34858D

File Structure

Malware Configuration - Remote Template

Config. Field0	Value
Target	https://urllengthener.com/r/BeLitU/I'll/be/back./-/The/Terminator
Path	settings.xml.rels
XPath	/Relationships/Relationship
Outer XML	<Relationship Id="rId1" Type="http://schemas.openxmlformats.org/officeDocument/2006/relationships/attachedTemplate" Target="https://urllengthener.com/r/BeLitU/I'll/be/back./-/The/Terminator" TargetMode="External" xmlns="http://schemas.openxmlformats.org/package/2006/relationships" />

Artefacts

Name0	Value
Remote Template - Highly Suspicious	https://urllengthener.com/r/BeLitU/I'll/be/back./-/The/Terminator

f8ca92e4c11d238d2679a88bf0dc5376 (159.76 KB)

File Structure

Characteristics

Malware Configuration - Remote Template

Config. Field0	Value
Target	https://urllengthener.com/r/BeLitU/I'll/be/back./-/The/Terminator
Path	settings.xml.rels
XPath	/Relationships/Relationship
Outer XML	<Relationship Id="rId1" Type="http://schemas.openxmlformats.org/officeDocument/2006/relationships/attachedTemplate" Target="https://urllengthener.com/r/BeLitU/I'll/be/back./-/The/Terminator" TargetMode="External" xmlns="http://schemas.openxmlformats.org/package/2006/relationships" />

Artefacts

Name0	Value	Location
Remote Template - Highly Suspicious	https://urllengthener.com/r/BeLitU/I'll/be/back./-/The/Terminator Malicious	f8ca92e4c11d238d2679a88bf0dc5376 > word > _rels > settings.xml.rels

You must be signed in to post a comment.