Suspicious
Suspect

Share on LinkedIn
Print
PDF Document
MD5: 18121770bb3181c6e529d5edd19414b7
Size: 128.86 KB
application/pdf

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 18121770bb3181c6e529d5edd19414b7
Sha1 167ee725bf3d063fbdc05e4b0fa84360003c7427
Sha256 47476f8794856949179cc2fa4c63ef7e27d3de9b0deb2808927d7ca7a8f6b8aa
Sha384 458108452c0f44902cf5160ce64c341b586c9f530d7ac979471849daafb11393fc7da0816f7d6d145f50ecff928ebf9a
Sha512 f476d538c7d6d4353eb45cc4e19d62f74a2b7116b900417f160db0a39033637d2e58bfe27744c8e409e20ce4f938b2adbc6a062fbfda9e8c2a6f05fa790a4c90
SSDeep 3072:lxak2MImKJAo9CAtsEOOFCgY1zawN8Dt/O3WJPlSL:faeImKOoIAaBOFI+ppoWJPYL
TLSH 66C3D09CE48CE288057A9BC2F766D0C7A6CE63BF498E9476706E4FD30B02C91F952C55
18121770bb3181c6e529d5edd19414b7
Text (Preview)
Page #1
#Stream {3}
#Stream {239}
#Stream {119}
#Stream {120}
#Stream {121}
#Stream {122}
#Stream {123}
#Stream {124}
#Stream {125}
#Stream {137}
#Stream {259}
#Stream {260}
#Stream {255}
#Stream {252}
#Stream {253}
#Stream {248}
#Stream {127}
#Stream {128}
#Stream {129}
#Stream {130}
#Stream {131}
#Stream {132}
#Stream {133}
#Stream {134}
#Stream {135}
#Stream {136}
#Stream {245}
#Stream {246}
#Stream {241}
#Stream {138}
#Stream {139}
#Stream {140}
#Stream {141}
#Stream {142}
#Stream {144}
#Stream {145}
#Stream {146}
#Stream {147}
Structure
Config. Field Value
URL #1 https:huhuhuhuhuhuhuhuhuhuhu
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with Essential
Name Value
18121770bb3181c6e529d5edd19414b7
1.7
18121770bb3181c6e529d5edd19414b7
1.7
18121770bb3181c6e529d5edd19414b7
Federica
18121770bb3181c6e529d5edd19414b7
Federica
18121770bb3181c6e529d5edd19414b7
D:20250706014901+02'00'
18121770bb3181c6e529d5edd19414b7
D:20250706014901+02'00'
18121770bb3181c6e529d5edd19414b7
Microsoft® Word for Microsoft 365
18121770bb3181c6e529d5edd19414b7
Microsoft® Word for Microsoft 365
18121770bb3181c6e529d5edd19414b7
D:20250709061532+02'00'
18121770bb3181c6e529d5edd19414b7
D:20250709061532+02'00'
18121770bb3181c6e529d5edd19414b7
Microsoft® Word for Microsoft 365
18121770bb3181c6e529d5edd19414b7
Microsoft® Word for Microsoft 365
18121770bb3181c6e529d5edd19414b7
Federica
18121770bb3181c6e529d5edd19414b7
Federica
18121770bb3181c6e529d5edd19414b7
D:20250706014901+02'00'
18121770bb3181c6e529d5edd19414b7
D:20250706014901+02'00'
18121770bb3181c6e529d5edd19414b7
Microsoft® Word for Microsoft 365
18121770bb3181c6e529d5edd19414b7
Microsoft® Word for Microsoft 365
18121770bb3181c6e529d5edd19414b7
D:20250709061532+02'00'
18121770bb3181c6e529d5edd19414b7
D:20250709061532+02'00'
18121770bb3181c6e529d5edd19414b7
Microsoft® Word for Microsoft 365
18121770bb3181c6e529d5edd19414b7
Microsoft® Word for Microsoft 365
URI URI
https:huhuhuhuhuhuhuhuhuhuhu
URI URI
https:huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
An error has occurred. This application may no longer respond until reloaded. Reload 🗙