Suspicious 80% Download

ROVATTI_OFF26IT00100673_0622271.xls

StdOleLink (external link) (CLSID: 00000300-0000-0000-c000-000000000046) on /MBD002F535COLE2 document contains VBA macros (0 modules: )
SHA-256f41a079d856ce26815a8fd2e4a9210138766be9d32d4f9f555b3cad3e0fe5c24
URLhttps://mb-api.abuse.ch/api/v1/
MaleculeMd₂(Ag₂)

Evidence

Encoded content decoded: hex line 214104
214104BT 564.95 737.10 Td <506F73742C>Tj ET 0 g BT 469.70 725.10 Td <4D2E4D2E48616C6C692C20486F7361706574652D35383320323232>Tj ET 0 g BT 518.40 713.10 Td <4B61726E6174616B61202D20496E646961>Tj ET /F001 8.00 Tf 1.80 Tw q 0.00 w 0

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.