Malicious MS Word Document analysis – d04ad86a679e

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

File

Type

Microsoft Office Document

6 malicious · 38 files

DOCFactar_9026821_Heineken.docx

XML[Content_Types].xml

BIN_rels

BINword

BIN_rels

XMLdocument.xml.rels

XMLheader2.xml.rels

XMLfooter2.xml.rels

OFFsettings.xml.rels

XMLdocument.xml

XMLfootnotes.xml

XMLfooter2.xml

XMLfooter3.xml

XMLheader3.xml

XMLendnotes.xml

XMLheader2.xml

BINmedia

BINembeddings

OFFMicrosoft_Office_Excel_97-2003_Worksheet1.xls

BIN.

BIN[Formulas]

OFFMicrosoft_Office_Excel_97-2003_Worksheet2.xls

BIN.

BIN[Formulas]

BINtheme

XMLsettings.xml

XMLstyles.xml

XMLwebSettings.xml

XMLfontTable.xml

BINdocProps

Config. Field	Value
Target	https:huhuhuhuhuhuhuhuhuhuhu
Path	settihuhuhuhuhuhuhu
XPath	/Relathuhuhuhuhuhuhuhuhuhuhu
Outer XML	<Relathuhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Remote Template - Highly Suspicious Document RelationShip URImalicious

https:huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.