Malicious MS Word Document analysis – 984ae4f139b7

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

File

Type

Microsoft Office Document

2 malicious · 63 files

DOC984ae4f139b7da1574a57501061e1eff

XML[Content_Types].xml

BIN_rels

BINword

BIN_rels

XMLdocument.xml.rels

XMLfooter2.xml.rels

OFFsettings.xml.rels

XMLdocument.xml

XMLfootnotes.xml

XMLfooter3.xml

XMLfooter2.xml

XMLheader2.xml

XMLendnotes.xml

BINtheme

BINembeddings

BINmedia

XMLsettings.xml

XMLwebSettings.xml

XMLfontTable.xml

XMLstyles.xml

BINdocProps

Config. Field	Value
Target	https:huhuhuhuhuhuhuhuhuhuhu
Path	settihuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Name	Value
CONTENTS	1.4
CONTENTS	D:20251009073557-05'00'
CONTENTS	KM_C450i
CONTENTS	D:20251009082612-04'00'
CONTENTS	SKM_C450i25100907350
CONTENTS	KONICA MINOLTA bizhub C450i
CONTENTS	D:20251009073557-05'00'
CONTENTS	KM_C450i
CONTENTS	D:20251009082612-04'00'
CONTENTS	KONICA MINOLTA bizhub C450i
CONTENTS	SKM_C450i25100907350
CONTENTS	1.4
CONTENTS	D:20250922084949+01'00'
CONTENTS	Adobe Photoshop 21.2 (Windows)
CONTENTS	D:20250922090806+01'00'
CONTENTS	Adobe Photoshop for Windows -- Image Conversion Plug-in
CONTENTS	D:20250922084949+01'00'
CONTENTS	Adobe Photoshop 21.2 (Windows)
CONTENTS	D:20250922090806+01'00'
CONTENTS	Adobe Photoshop for Windows -- Image Conversion Plug-in

Remote Template - Highly Suspicious URImalicious

https:huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.