Malicious
Malicious

Share on LinkedIn
Print
MS Word Document
MD5:
Size: 0 B
application/msword
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
Microsoft Office Document
2 malicious · 153 files
DOC601036290777f77cad931ef0a77351bc
XML[Content_Types].xml
BINword
BIN_rels
XMLdocument.xml.rels
XMLheader2.xml.rels
OFFsettings.xml.rels
XMLdocument.xml
XMLfootnotes.xml
XMLfooter3.xml
XMLheader3.xml
XMLendnotes.xml
XMLheader2.xml
XMLsettings.xml
XMLfontTable.xml
XMLstyles.xml
XMLwebSettings.xml
Config. Field Value
Target http:/huhuhuhuhuhuhu
Path settihuhuhuhuhuhuhu
XPath /Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML <Relathuhuhuhuhuhuhuhuhuhuhu
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with Essential
Name Value
CONTENTS
1.6
CONTENTS
TROX
CONTENTS
D:20111121181423+02'00'
CONTENTS
PScript5.dll Version 5.2.2
CONTENTS
D:20251018211827+03'00'
CONTENTS
Microsoft Word - docs12
CONTENTS
Acrobat Distiller 10.1.1 (Windows)
CONTENTS
TROX
CONTENTS
D:20111121181423+02'00'
CONTENTS
PScript5.dll Version 5.2.2
CONTENTS
D:20251018211827+03'00'
CONTENTS
Acrobat Distiller 10.1.1 (Windows)
CONTENTS
Microsoft Word - docs12
Remote Template - Highly Suspicious URImalicious
http:/huhuhuhuhuhuhu
URI URI
/Helvhuhuhuhuhuhuhu
URI URI
fihuhuhuhu
URI URI
Оргаhuhuhuhu
URI URI
ЯСМИН huhuhuhuhuhuhu
URI URI
fihuhuhuhu
URI URI
№huhuhuhu
URI URI
1huhuhuhu
URI URI
fihuhuhuhu
URI URI
дhuhuhuhu
URI URI
01.huhuhuhu
URI URI
fihuhuhuhu
URI URI
Да сеhuhuhuhuhuhuhu
URI URI
РАДОСТhuhuhuhuhuhuhu
URI URI
fihuhuhuhu
URI URI
ЕГhuhuhuhu
URI URI
781huhuhuhu
URI URI
fihuhuhuhu
URI URI
Оснhuhuhuhu
URI URI
ДНЕВНИhuhuhuhuhuhuhu
URI URI
0huhuhuhu
URI URI
fihuhuhuhu
URI URI
Суhuhuhuhu
URI URI
99huhuhuhu
URI URI
Bhuhuhuhu
URI URI
fihuhuhuhu
URI URI
Ваhuhuhuhu
URI URI
Thuhuhuhu
URI URI
деветсhuhuhuhuhuhuhuhuhuhuhu
URI URI
FR_000huhuhuhuhuhuhuhuhuhuhu
URI URI
/Helhuhuhuhuhuhuhu
URI URI
Jahuhuhuhu
URI URI
2huhuhuhu
URI URI
Fehuhuhuhu
URI URI
3huhuhuhu
URI URI
Mhuhuhuhu
URI URI
4huhuhuhu
URI URI
Ahuhuhuhu
URI URI
5huhuhuhu
URI URI
Mhuhuhuhu
URI URI
6huhuhuhu
URI URI
Jhuhuhuhu
URI URI
7huhuhuhu
URI URI
Jhuhuhuhu
URI URI
8huhuhuhu
URI URI
Auhuhuhuhu
URI URI
9huhuhuhu
URI URI
Sephuhuhuhu
URI URI
1huhuhuhu
URI URI
Ochuhuhuhu
URI URI
1huhuhuhu
URI URI
Nohuhuhuhu
URI URI
1huhuhuhu
URI URI
Dehuhuhuhu
URI URI
Calehuhuhuhuhuhuhu
URI URI
Calehuhuhuhu
URI URI
2huhuhuhu
URI URI
/Helvhuhuhuhuhuhuhu
URI URI
Calehuhuhuhuhuhuhu
URI URI
/HeBhuhuhuhuhuhuhu
URI URI
Shuhuhuhu
URI URI
Suhuhuhuhu
URI URI
Mhuhuhuhu
URI URI
Mohuhuhuhu
URI URI
Thuhuhuhu
URI URI
Tuhuhuhuhu
URI URI
Whuhuhuhu
URI URI
Wedhuhuhuhu
URI URI
Thuhuhuhu
URI URI
Thhuhuhuhu
URI URI
Fhuhuhuhu
URI URI
Frhuhuhuhu
URI URI
Shuhuhuhu
URI URI
Sahuhuhuhu
URI URI
Dhuhuhuhu
URI URI
Dhuhuhuhu
URI URI
Dhuhuhuhu
URI URI
Dhuhuhuhu
URI URI
Dhuhuhuhu
URI URI
Dhuhuhuhu
URI URI
Dhuhuhuhu
URI URI
Dhuhuhuhu
URI URI
Dhuhuhuhu
URI URI
Dahuhuhuhu
URI URI
Dahuhuhuhu
URI URI
Dahuhuhuhu
URI URI
1huhuhuhu
URI URI
Dahuhuhuhu
URI URI
1huhuhuhu
URI URI
Dahuhuhuhu
URI URI
1huhuhuhu
URI URI
Dahuhuhuhu
URI URI
1huhuhuhu
URI URI
Dahuhuhuhu
URI URI
1huhuhuhu
URI URI
Dahuhuhuhu
URI URI
1huhuhuhu
URI URI
Dahuhuhuhu
URI URI
1huhuhuhu
URI URI
Dahuhuhuhu
URI URI
2huhuhuhu
URI URI
Dahuhuhuhu
URI URI
2huhuhuhu
URI URI
Dahuhuhuhu
URI URI
2huhuhuhu
URI URI
Dahuhuhuhu
URI URI
2huhuhuhu
URI URI
Dahuhuhuhu
URI URI
2huhuhuhu
URI URI
Dahuhuhuhu
URI URI
2huhuhuhu
URI URI
Dahuhuhuhu
URI URI
2huhuhuhu
URI URI
Dahuhuhuhu
URI URI
2huhuhuhu
URI URI
Dahuhuhuhu
URI URI
2huhuhuhu
URI URI
Dahuhuhuhu
URI URI
2huhuhuhu
URI URI
Dahuhuhuhu
URI URI
3huhuhuhu
URI URI
Dahuhuhuhu
URI URI
3huhuhuhu
URI URI
Dahuhuhuhu
URI URI
FR_00huhuhuhuhuhuhu
URI URI
Calehuhuhuhu
URI URI
dd.huhuhuhu
URI URI
Idhuhuhuhu
URI URI
Ahuhuhuhu
URI URI
Timeshuhuhuhuhuhuhu
URI URI
fihuhuhuhu
URI URI
Ehuhuhuhu
URI URI
204huhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
An error has occurred. This application may no longer respond until reloaded. Reload 🗙