Malicious
Malicious

Share on LinkedIn
Print
ZIP Archive
MD5:
Size: 0 B
application/zip
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
ZIP archive
3 malicious · 67 files
ZIP41e1b7fbdf603e17845aff82b49fe9d2
DOCAcuerdo de factura_Nestle_Factura_1023_2025-05-08.docx
XML[Content_Types].xml
BINword
BIN_rels
XMLdocument.xml.rels
XMLfooter2.xml.rels
OFFsettings.xml.rels
XMLdocument.xml
XMLfootnotes.xml
XMLfooter3.xml
XMLfooter2.xml
XMLheader2.xml
XMLendnotes.xml
XMLsettings.xml
XMLwebSettings.xml
XMLfontTable.xml
XMLstyles.xml
Config. Field Value
Target https:huhuhuhuhuhuhuhuhuhuhu
Path settihuhuhuhuhuhuhu
XPath /Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML <Relathuhuhuhuhuhuhuhuhuhuhu
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with Essential
Remote Template - Highly Suspicious Document RelationShip URImalicious
https:huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
An error has occurred. This application may no longer respond until reloaded. Reload 🗙