Malicious
MS Word Document
MD5:
Size: 0 B
application/msword
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Microsoft Office Document
2 malicious · 36 files
DOCe6995a538737f809617afdf59e3eb0bcT1221
XML[Content_Types].xml
BIN_rels
BINword
BIN_rels
XMLdocument.xml.rels
OFFsettings.xml.relsT1221
XMLdocument.xml
BINmedia
BINembeddings
BINtheme
XMLsettings.xml
XMLwebSettings.xml
XMLstyles.xml
XMLfontTable.xml
BINdocProps
| Config. Field | Value |
|---|---|
| Target | https:huhuhuhuhuhuhuhuhuhuhu |
| Path | settihuhuhuhuhuhuhu |
| XPath | /Relathuhuhuhuhuhuhuhuhuhuhu |
| Outer XML | <Relathuhuhuhuhuhuhuhuhuhuhu |
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with Essential| Name | Value |
|---|---|
| CONTENTS | 1.6 |
| CONTENTS | Karim Naghi |
| CONTENTS | D:20240604155102+04'00' |
| CONTENTS | Acrobat PDFMaker 24 for Word |
| CONTENTS | D:20240604155104+04'00' |
| CONTENTS | Terms & Conditions |
| CONTENTS | Terms & Conditions of PO |
| CONTENTS | Adobe PDF Library 24.2.23 |
| CONTENTS | Karim Naghi |
| CONTENTS | DAS Holding |
| CONTENTS | D:20240604155102+04'00' |
| CONTENTS | Acrobat PDFMaker 24 for Word |
| CONTENTS | Karim Naghi |
| CONTENTS | D:20240604155104+04'00' |
| CONTENTS | Adobe PDF Library 24.2.23 |
| CONTENTS | D:20240604114755 |
| CONTENTS | Terms & Conditions |
| CONTENTS | Terms & Conditions of PO |
Remote Template - Highly Suspicious
URImalicious
https:huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential