Malicious
Malicious

Share on LinkedIn
Print
MS Word Document
MD5:
Size: 0 B
application/msword
Ctrl + scroll to zoom · drag to pan

The file 2acc465117f0fc02dccbf9d5d782ad6d is a MS Word Document for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 43 embedded or derived files and a malware configuration (Remote Template). It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1221. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
—
MD5
-
Verdict
Malicious
File type
MS Word Document
MITRE ATT&CK
T1221

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
Microsoft Office Document

2 malicious · 44 files
DOC2acc465117f0fc02dccbf9d5d782ad6d
XML[Content_Types].xml
BINword
BIN_rels
XMLdocument.xml.rels
XMLheader2.xml.rels
XMLfooter2.xml.rels
OFFsettings.xml.rels
XMLdocument.xml
XMLfootnotes.xml
XMLfooter2.xml
XMLfooter3.xml
XMLheader3.xml
XMLendnotes.xml
XMLheader2.xml
XMLsettings.xml
XMLstyles.xml
XMLwebSettings.xml
XMLfontTable.xml

Config. Field Value
Target https:huhuhuhuhuhuhuhuhuhuhu
Path settihuhuhuhuhuhuhu
XPath /Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML <Relathuhuhuhuhuhuhuhuhuhuhu
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with Essential

Remote Template - Highly Suspicious Document RelationShip URImalicious
https:huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
An error has occurred. This application may no longer respond until reloaded. Reload 🗙