Malicious
Malicious

f8ca92e4c11d238d2679a88bf0dc5376

MS Word Document
|
MD5: f8ca92e4c11d238d2679a88bf0dc5376
|
Size: 159.76 KB
|
application/msword


Print
General
Structural Analysis
Config.1
Yara Rules9
Sync
Community
Infection Chain
Summary by MalvaGPT
Characteristics
Hash
Hash Value
MD5
f8ca92e4c11d238d2679a88bf0dc5376
Sha1
fe27a1b144e6e98ab366306d8dbcb35a85ddee1c
Sha256
eccda593bbc09fb143ebd05d1a6116cfb45a61f9e86477d7e33402719bb4c856
Sha384
965d066be68e75a57bba9bc09dfbd6bfdd24510372cfa6060657d4119c9a4d3b1168ee611e1a24eeb32726161c51477c
Sha512
9605b082a4678bce761d7c3c7862c54a3c2dc2924fdb21637cfe9a59f11111b4a65dd4cdbb68baec3be43bd7bd2113ebcbbdf581674126624f9b3741e812341f
SSDeep
3072:m24+PaVngTJ0SLPlNmae3WVzuribeg7tkjfZzEQzCuj5FAXMpSU:mT+PgaJ0YlcuKrbgRMx7zU8pSU
TLSH
C0F31254C8F0DA2ACB99B2795AC4AED5C3F635E3191B8ED50D2008ECC58BAD7B34858D
File Structure
[Content_Types].xml
_rels
.rels
word
Malicious
_rels
Malicious
document.xml.rels
document.xml
media
image1.emf
embeddings
Microsoft_Office_Excel_Worksheet1.xlsx
[Content_Types].xml
_rels
.rels
xl
_rels
workbook.xml.rels
workbook.xml
sharedStrings.xml
drawings
_rels
drawing1.xml.rels
drawing1.xml
worksheets
_rels
sheet1.xml.rels
sheet1.xml
theme
theme1.xml
styles.xml
media
image2.png
image2.png-preview.png
image1.png
image1.png-preview.png
docProps
thumbnail.wmf
core.xml
app.xml
custom.xml
theme
theme1.xml
settings.xml
webSettings.xml
styles.xml
fontTable.xml
docProps
core.xml
app.xml
Malware Configuration - Remote Template
Config. Field
Value
Target

https://urllengthener.com/r/BeLitU/I'll/be/back./-/The/Terminator

Path

settings.xml.rels

XPath

/Relationships/Relationship

Outer XML

<Relationship Id="rId1" Type="http://schemas.openxmlformats.org/officeDocument/2006/relationships/attachedTemplate" Target="https://urllengthener.com/r/BeLitU/I'll/be/back./-/The/Terminator" TargetMode="External" xmlns="http://schemas.openxmlformats.org/package/2006/relationships" />

Artefacts
Name
Value
Remote Template - Highly Suspicious

https://urllengthener.com/r/BeLitU/I'll/be/back./-/The/Terminator

f8ca92e4c11d238d2679a88bf0dc5376 (159.76 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙