Suspicious
Suspect

PDF Document
MD5: 18121770bb3181c6e529d5edd19414b7
Size: 128.86 KB
application/pdf

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 18121770bb3181c6e529d5edd19414b7
Sha1 167ee725bf3d063fbdc05e4b0fa84360003c7427
Sha256 47476f8794856949179cc2fa4c63ef7e27d3de9b0deb2808927d7ca7a8f6b8aa
Sha384 458108452c0f44902cf5160ce64c341b586c9f530d7ac979471849daafb11393fc7da0816f7d6d145f50ecff928ebf9a
Sha512 f476d538c7d6d4353eb45cc4e19d62f74a2b7116b900417f160db0a39033637d2e58bfe27744c8e409e20ce4f938b2adbc6a062fbfda9e8c2a6f05fa790a4c90
SSDeep 3072:lxak2MImKJAo9CAtsEOOFCgY1zawN8Dt/O3WJPlSL:faeImKOoIAaBOFI+ppoWJPYL
TLSH 66C3D09CE48CE288057A9BC2F766D0C7A6CE63BF498E9476706E4FD30B02C91F952C55
18121770bb3181c6e529d5edd19414b7
Text (Preview)
Page #1
#Stream {3}
#Stream {239}
#Stream {119}
#Stream {120}
#Stream {121}
#Stream {122}
#Stream {123}
#Stream {124}
#Stream {125}
#Stream {137}
#Stream {259}
#Stream {260}
#Stream {255}
#Stream {252}
#Stream {253}
#Stream {248}
#Stream {127}
#Stream {128}
#Stream {129}
#Stream {130}
#Stream {131}
#Stream {132}
#Stream {133}
#Stream {134}
#Stream {135}
#Stream {136}
#Stream {245}
#Stream {246}
#Stream {241}
#Stream {138}
#Stream {139}
#Stream {140}
#Stream {141}
#Stream {142}
#Stream {144}
#Stream {145}
#Stream {146}
#Stream {147}
Structure
Config. Field Value
URL #1 https:huhuhuhuhuhuhuhuhuhuhu
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with Essential
Name Value
18121770bb3181c6e529d5edd19414b7
1.7
18121770bb3181c6e529d5edd19414b7
1.7
18121770bb3181c6e529d5edd19414b7
Federica
18121770bb3181c6e529d5edd19414b7
Federica
18121770bb3181c6e529d5edd19414b7
D:20250706014901+02'00'
18121770bb3181c6e529d5edd19414b7
D:20250706014901+02'00'
18121770bb3181c6e529d5edd19414b7
Microsoft® Word for Microsoft 365
18121770bb3181c6e529d5edd19414b7
Microsoft® Word for Microsoft 365
18121770bb3181c6e529d5edd19414b7
D:20250709061532+02'00'
18121770bb3181c6e529d5edd19414b7
D:20250709061532+02'00'
18121770bb3181c6e529d5edd19414b7
Microsoft® Word for Microsoft 365
18121770bb3181c6e529d5edd19414b7
Microsoft® Word for Microsoft 365
18121770bb3181c6e529d5edd19414b7
Federica
18121770bb3181c6e529d5edd19414b7
Federica
18121770bb3181c6e529d5edd19414b7
D:20250706014901+02'00'
18121770bb3181c6e529d5edd19414b7
D:20250706014901+02'00'
18121770bb3181c6e529d5edd19414b7
Microsoft® Word for Microsoft 365
18121770bb3181c6e529d5edd19414b7
Microsoft® Word for Microsoft 365
18121770bb3181c6e529d5edd19414b7
D:20250709061532+02'00'
18121770bb3181c6e529d5edd19414b7
D:20250709061532+02'00'
18121770bb3181c6e529d5edd19414b7
Microsoft® Word for Microsoft 365
18121770bb3181c6e529d5edd19414b7
Microsoft® Word for Microsoft 365
URI URI
https:huhuhuhuhuhuhuhuhuhuhu
URI URI
https:huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
18121770bb3181c6e529d5edd19414b7
Text (Preview)
Page #1
#Stream {3}
#Stream {239}
#Stream {119}
#Stream {120}
#Stream {121}
#Stream {122}
#Stream {123}
#Stream {124}
#Stream {125}
#Stream {137}
#Stream {259}
#Stream {260}
#Stream {255}
#Stream {252}
#Stream {253}
#Stream {248}
#Stream {127}
#Stream {128}
#Stream {129}
#Stream {130}
#Stream {131}
#Stream {132}
#Stream {133}
#Stream {134}
#Stream {135}
#Stream {136}
#Stream {245}
#Stream {246}
#Stream {241}
#Stream {138}
#Stream {139}
#Stream {140}
#Stream {141}
#Stream {142}
#Stream {144}
#Stream {145}
#Stream {146}
#Stream {147}
Structure
Config. Field Value
URL #1 https:huhuhuhuhuhuhuhuhuhuhu
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with Essential
URI URI
https:huhuhuhuhuhuhuhuhuhuhu
18121770bb3181c6e529d5edd19414b7
URI URI
https:huhuhuhuhuhuhuhuhuhuhu
18121770bb3181c6e529d5edd19414b7
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙