CLEAN — document.xml.rels

CLEAN — document.xml.rels is a unknown sample analyzed by MalwareAnalyzer by Cyble with a clean verdict (21/100). 0 of 53 detection engines flagged it.

Identification

• SHA-256: 6c0ce29eb60dfa596a6f1058a1512f59d012db1f67eedcb4dfd27b10c37ee9b4
• SHA-1: 5f850ddc53d6402a8eb3e85a97f416dda8ae6309
• MD5: e2f19a22f7ba8d020da31b0359bb43be
• ssdeep: 384:9Es5uTIFtjb87Fvxh8bL4hlHVY/SJqhlUhlxj2NGhlehlhzhl4hl7ZhlKMhltnhI:9Es5uTIFtjb87Fvxh8bL47HVY/SJq7UI
• TLSH: T1102AF155A835227C682796FBA784C0DC02FC8FDE2238735F49E96BB94074C509E66F60
• Submitted as: document.xml.rels
• File type: unknown · Size: 21659 bytes
• Verdict: clean (21/100)

Detections (0 of 53 engines)

No engine flagged this sample.

Why this verdict

The clean score of 21/100 is the fusion of 1 weighted signal:

• Embedded network infrastructure: https://unctad.org/publication/world-investment-report-2026-international-investment-turbulent-era?utm_source, https://unctad.org/news/governments-still-want-foreign-investment-more-selective-terms?utm_source, https://aawsat.com/%D8%A7%D9%84%D8%A7%D9%82%D8%AA%D8%B5%D8%A7%D8%AF/5293153-%D8%A7%D9%84%D8%A3%D9%88%D9%86%D9%83%D8%AA%D8%A7%D8%AF-%D8%A7%D9%84%D8%A7%D8%B3%D8%AA%D8%AB%D9%85%D8%A7%D8%B1-%D8%A7%D9%84%D8%A3%D8%AC%D9%86%D8%A8%D9%8A-%D8%A7%D9%84%D9%85%D8%A8%D8%A7%D8%B4%D8%B1-%D9%8A%D8%B1%D8%AA%D9%81%D8%B9-6-%D8%A5%D9%84%D9%89-16-%D8%AA%D8%B1%D9%8A%D9%84%D9%8A%D9%88%D9%86-%D8%AF%D9%88%D9%84%D8%A7%D8%B1-%D9%81%D9%8A-2025 - static signal, weight 0.35, confidence 0.60

Dynamic analysis

No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.

Embedded URLs

• http://schemas.openxmlformats.org/package/2006/relationships
• http://schemas.openxmlformats.org/officeDocument/2006/relationships/hyperlink
• https://unctad.org/publication/world-investment-report-2026-international-investment-turbulent-era?utm_source
• http://schemas.openxmlformats.org/officeDocument/2006/relationships/theme
• http://schemas.openxmlformats.org/officeDocument/2006/relationships/settings
• http://schemas.openxmlformats.org/officeDocument/2006/relationships/fontTable
• http://schemas.openxmlformats.org/officeDocument/2006/relationships/numbering
• https://unctad.org/news/governments-still-want-foreign-investment-more-selective-terms?utm_source
• http://schemas.openxmlformats.org/officeDocument/2006/relationships/styles
• http://schemas.openxmlformats.org/officeDocument/2006/relationships/image
• https://aawsat.com/%D8%A7%D9%84%D8%A7%D9%82%D8%AA%D8%B5%D8%A7%D8%AF/5293153-%D8%A7%D9%84%D8%A3%D9%88%D9%86%D9%83%D8%AA%D8%A7%D8%AF-%D8%A7%D9%84%D8%A7%D8%B3%D8%AA%D8%AB%D9%85%D8%A7%D8%B1-%D8%A7%D9%84%D8%A3%D8%AC%D9%86%D8%A8%D9%8A-%D8%A7%D9%84%D9%85%D8%A8%D8%A7%D8%B4%D8%B1-%D9%8A%D8%B1%D8%AA%D9%81%D8%B9-6-%D8%A5%D9%84%D9%89-16-%D8%AA%D8%B1%D9%8A%D9%84%D9%8A%D9%88%D9%86-%D8%AF%D9%88%D9%84%D8%A7%D8%B1-%D9%81%D9%8A-2025

Embedded domains

• schemas.openxmlformats.org
• unctad.org
• aawsat.com

Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report