60f999fee3d6abbb147d8006226680dd

MS Excel Document

MD5: 60f999fee3d6abbb147d8006226680dd

Size: 301.43 KB

application/vnd.ms-excel

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

MD5	60f999fee3d6abbb147d8006226680dd
Sha1	06894d87c02eeff9b75d48ce2f5885165964bb44
Sha256	ce3bd70d21e643e3312f0fa7e2e8a33cf88ba93ce84fffdbf939aef631c72266
Sha384	7a9814d79d52bb62a8932d7cd78f99ec06cae3df9aade9609f5a63437ed72530da61d1ff62bdd1a624d9f5e8ae72fdfc
Sha512	9d583db7724501ed28cea3a36f3136a4ff7456069be7b6f0fdd136feae1a4f7700c46c71e50d3b09038c52f37694793854e16d026c2cc1c06ff1ed9113075dcc
SSDeep	6144:tfVKRPDkHVzQalHeuoaLoNBEi/pRDvjJDJi4Z2EZUTumwH:tkrQVzBHSakNVnbJg4ZATu7
TLSH	C054CFBBB4157C69CAE3643D608C25A1D50C8903B5779E0B2BE1FF8E4A135EB07B609D

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 6 STICH kept: 1secondary ignored: 5

bin 1oox:metadata 1oox:style 1oox:theme 1xml 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path oox:xlsx>oox:rel:ext~T1221

Shape oox:xlsx>oox:rel:ext

technique2 nodes

Config. Field	Value
Target	https:huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	http:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	http:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	https:huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	https:huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	https:huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	http:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	http:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	https:huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	https:huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Remote Template - Highly Suspicious URImalicious

https:huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

http:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

http:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

https:huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

https:huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

http:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

http:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

https:huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

https:huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

Config. Field	Value
Target	https:huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	http:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	http:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	https:huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	https:huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	https:huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	http:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	http:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	https:huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	https:huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Target	file:/huhuhuhuhuhuhuhuhuhuhu
Path	externhuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Remote Template - Highly Suspicious URImalicious

https:huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink1.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink3.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink2.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink2.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink4.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink5.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink6.xml.rels

Remote Template - Highly Suspicious URImalicious

http:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink7.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink10.xml.rels

Remote Template - Highly Suspicious URImalicious

http:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink8.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink9.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink60.xml.rels

Remote Template - Highly Suspicious URImalicious

https:huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink78.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink74.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink75.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink76.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink77.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink13.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink12.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink11.xml.rels

Remote Template - Highly Suspicious URImalicious

https:huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink15.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink14.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink18.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink17.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink16.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink20.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink19.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink22.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink21.xml.rels

Remote Template - Highly Suspicious URImalicious

http:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink71.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink73.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink73.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink68.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink69.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink66.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink67.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink64.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink65.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink62.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink63.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink38.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink61.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink57.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink58.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink55.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink56.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink53.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink54.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink24.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink23.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink27.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink26.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink25.xml.rels

Remote Template - Highly Suspicious URImalicious

http:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink30.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink29.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink28.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink39.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink34.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink31.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink42.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink41.xml.rels

Remote Template - Highly Suspicious URImalicious

https:huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink40.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink43.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink45.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink46.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink47.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink48.xml.rels

Remote Template - Highly Suspicious URImalicious

https:huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink49.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink51.xml.rels

Remote Template - Highly Suspicious URImalicious

file:/huhuhuhuhuhuhuhuhuhuhu

60f999fee3d6abbb147d8006226680dd › xl › externalLinks › _rels › externalLink52.xml.rels

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

You must be signed in to view YARA rules.