26:I[10321,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/2ysmnrb0knc4n.js","/_next/static/chunks/0i2jherxtxs7l.js","/_next/static/chunks/23qlsjvno4-wq.js","/_next/static/chunks/11pkz44bx8x1b.js","/_next/static/chunks/04k_7k5p4krw4.js"],"ReportDetailWrapper"] 37:I[27201,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/2ysmnrb0knc4n.js","/_next/static/chunks/0i2jherxtxs7l.js"],"IconMark"] 25:T4f4,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious CVE-2017-0199 — Falcon Sandbox Report — Score 100/100 — Sample 3c0c58d4b9ee…","description":"Malicious verdict for sandbox report 5cdabffa0288…. Malware family: CVE-2017-0199. Threat score 100/100. 6 malicious and 5 suspicious behavioral indicators across 28 signatures. Detonated in Windows 7 64 bit. View behavioral indicators, network activity, dropped files, and MITRE ATT\u0026CK mappings.","url":"/sample/3c0c58d4b9eefea56e2f7be3f07cdb73e659b4db688bfbf9eacd96ba5ab2dfe5/5cdabffa028838cc0ea26b0a","keywords":["Malicious","CVE-2017-0199","sandbox report","malware analysis","MITRE ATT\u0026CK","3c0c58d4b9eefea56e2f7be3f07cdb73e659b4db688bfbf9eacd96ba5ab2dfe5"],"about":{"@type":"SoftwareApplication","name":"e45f4b641bb48aa110ff64ad59cbeb58.docx","applicationCategory":"Microsoft Word 2007+","identifier":"3c0c58d4b9eefea56e2f7be3f07cdb73e659b4db688bfbf9eacd96ba5ab2dfe5","additionalType":"Malicious sample"},"threatScore":100,"malwareFamily":"CVE-2017-0199","sandboxEnvironment":"Windows 7 64 bit","behavioralIndicators":{"malicious":6,"suspicious":5,"totalSignatures":28},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}27:Ta60,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28:T406,"\Sessions\1\BaseNamedObjects\Global\_MSIExecute" "Global\552FFA80-3393-423d-8671-7BA046BB5906" "Local\CSI_WDW:{1C868000-A643-42F1-ABD6-E88A46C8BF9B}" "{BDD98A3C-B57F-4199-B92A-95A54AA1132E}-94987E20" "Global\MTX_MSO_Formal1_S-1-5-21-686412048-2446563785-1323799475-1001" "{BDD98A3C-B57F-4199-B92A-95A54AA1132E}-C242C5D5" "Local\CSI_WDW:{1E0F6851-E5DF-4134-B765-AB17B8D870AD}" "{BDD98A3C-B57F-4199-B92A-95A54AA1132E}-AD73D398" "{BDD98A3C-B57F-4199-B92A-95A54AA1132E}-271AC32E" "Local\CSI_OMTX:{AFDE3FDD-93CD-48FC-A97B-F14B214D545A}" "Local\CSI_WDW:{AFDE3FDD-93CD-48FC-A97B-F14B214D545A}" "Local\Csi_CTTxnLock:{E9F68CE9-BCEA-480B-86F0-573078F1D906}" "Local\ZonesCacheCounterMutex" "{BDD98A3C-B57F-4199-B92A-95A54AA1132E}-6CD9E1EB" "{BDD98A3C-B57F-4199-B92A-95A54AA1132E}-EC13C7BA" "Local\x64_10MU_ACB10_S-1-5-5-0-61188" "{BDD98A3C-B57F-4199-B92A-95A54AA1132E}-55DB5FB0" "Local\ZonesLockedCacheCounterMutex" "Local\CSI_OMTX:{1E0F6851-E5DF-4134-B765-AB17B8D870AD}" "{BDD98A3C-B57F-4199-B92A-95A54AA1132E}-E3431DA2"29:T538,"e45f4b641bb48aa110ff64ad59cbeb58.LNK" has type "MS Windows shortcut Item id list present Points to a file or directory Has Relative path Archive ctime=Tue May 14 13:18:20 2019 mtime=Tue May 14 13:18:20 2019 atime=Tue May 14 13:18:28 2019 length=223073 window=hide" "~_5f4b641bb48aa110ff64ad59cbeb58.docx" has type "data" "FSD-_BCF4B70A-FA94-4428-943D-15445E647C6C_.FSD" has type "data" "_7B793E9D-6BEF-4168-828E-A67C91675819_" has type "data" "index.dat" has type "data" "FSF-_0E1EEE64-E8C6-4E2A-9759-63CF07FD8988_.FSF" has type "data" "8BA3C6E7.wmf" has type "ms-windows metafont .wmf" "680A306B.htm" has type "HTML document ASCII text" "8CA1D0B1.wmf" has type "ms-windows metafont .wmf" "C52023BC.wmf" has type "ms-windows metafont .wmf" "64488D2A.wmf" has type "ms-windows metafont .wmf" "css_1_.htm" has type "HTML document ASCII text" "12421770.wmf" has type "ms-windows metafont .wmf" "ExcludeDictionaryEN0409.lex" has type "Little-endian UTF-16 Unicode text with no line terminators" "_8EDA4E30-D683-46E3-881E-094476410C2F_" has type "data" "~WRS_68F8ACBD-32CD-42DC-A416-DE5655A25D23_.tmp" has type "data" "MB518E2V.txt" has type "ASCII text" "C907E723.wmf" has type "ms-windows metafont .wmf" "FEA71EFE.wmf" has type "ms-windows metafont .wmf" "~WRS_31186E5D-DB6A-4D36-A4C7-B062610D7218_.tmp" has type "data"2a:T66e,"WINWORD.EXE" touched file "C:\Windows\Globalization\Sorting\SortDefault.nls" "WINWORD.EXE" touched file "C:\Windows\Fonts\StaticCache.dat" "WINWORD.EXE" touched file "C:\Windows\Microsoft.NET\Framework64\v2.0.50727\clr.dll" "WINWORD.EXE" touched file "C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll" "WINWORD.EXE" touched file "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll" "WINWORD.EXE" touched file "C:\Windows\System32\en-US\user32.dll.mui" "WINWORD.EXE" touched file "C:\Users\c1muIHc\AppData\Local\Microsoft\Windows\Caches" "WINWORD.EXE" touched file "C:\Users\%OSUSER%\AppData\Local\Microsoft\Windows\Caches\cversions.1.db" "WINWORD.EXE" touched file "C:\Users\%OSUSER%\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001b.db" "WINWORD.EXE" touched file "C:\Windows\System32\rsaenh.dll" "WINWORD.EXE" touched file "C:\Windows\System32\en-US\KernelBase.dll.mui" "WINWORD.EXE" touched file "C:\Windows\System32\msxml6r.dll" "WINWORD.EXE" touched file "C:\Users\%OSUSER%\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{2294E6D2-4CC0-4B54-A094-199B8AB2B334}.tmp" "WINWORD.EXE" touched file "C:\Windows\System32\en-US\msctf.dll.mui" "WINWORD.EXE" touched file "C:\Users\%OSUSER%\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat" "WINWORD.EXE" touched file "C:\Users\c1muIHc\AppData\Local\Microsoft\Windows\Temporary Internet Files" "WINWORD.EXE" touched file "C:\Users\c1muIHc\AppData\Roaming\Microsoft\Windows\Cookies" "WINWORD.EXE" touched file "C:\Users\c1muIHc\AppData\Local\Microsoft\Windows\History"2b:T746,"WINWORD.EXE" wrote bytes "fbe3afad570ad501" to virtual address "0xE830D610" (part of module "MSO.DLL") "WINWORD.EXE" wrote bytes "2d9aeaac570ad501" to virtual address "0xF2D07450" (part of module "MSCORWKS.DLL") "WINWORD.EXE" wrote bytes "e933ef9700cccc" to virtual address "0xFD511210" ("SysFreeString@OLEAUT32.DLL") "WINWORD.EXE" wrote bytes "e94b9f9700cccccccccc" to virtual address "0xFD516230" ("VariantChangeType@OLEAUT32.DLL") "WINWORD.EXE" wrote bytes "f3231a8d570ad501" to virtual address "0xF283FD60" (part of module "MSCORWKS.DLL") "WINWORD.EXE" wrote bytes "6b77f0ad570ad501" to virtual address "0xF3A40160" (part of module "MSPTLS.DLL") "WINWORD.EXE" wrote bytes "b78256ad570ad501" to virtual address "0xE95B2350" (part of module "OART.DLL") "WINWORD.EXE" wrote bytes "8398758e570ad501" to virtual address "0xF35425D8" (part of module "MSPROOF7.DLL") "WINWORD.EXE" wrote bytes "70fb5ead570ad501" to virtual address "0x3F153258" (part of module "WINWORD.EXE") "WINWORD.EXE" wrote bytes "48b8bc52efe6fe070000ffe0" to virtual address "0x76CF9020" ("SetUnhandledExceptionFilter@KERNEL32.DLL") "WINWORD.EXE" wrote bytes "e9abc09700cc" to virtual address "0xFD514060" ("SysAllocStringByteLen@OLEAUT32.DLL") "WINWORD.EXE" wrote bytes "e933f09700" to virtual address "0xFD511180" ("VariantClear@OLEAUT32.DLL") "WINWORD.EXE" wrote bytes "177856ad570ad501" to virtual address "0xF413FA00" (part of module "GFX.DLL") "WINWORD.EXE" wrote bytes "2ac0e6ad570ad501" to virtual address "0xF37DDE48" (part of module "RICHED20.DLL") "WINWORD.EXE" wrote bytes "e913b00eff" to virtual address "0xFEDA50C0" ("OleLoadFromStream@OLE32.DLL") "WINWORD.EXE" wrote bytes "a817abad570ad501" to virtual address "0xEB5B71C0" (part of module "WWLIB.DLL") "WINWORD.EXE" wrote bytes "c21a068d570ad501" to virtual address "0xF28B2470" (part of module "MSCORWKS.DLL")2c:T535,Found malicious artifacts related to "104.27.183.55": ... URL: http://plet.dk/css/ (AV positives: 8/70 scanned on 05/14/2019 01:42:20) URL: http://phonedog.us/ (AV positives: 5/66 scanned on 05/09/2019 18:39:11) URL: http://plet.dk/css/css.css (AV positives: 10/68 scanned on 05/06/2019 00:38:49) URL: http://plet.dk/ (AV positives: 5/69 scanned on 05/04/2019 00:28:35) URL: http://difinhappiness.faith/ (AV positives: 3/66 scanned on 05/03/2019 10:43:59) File SHA256: 36be54812428b4967c3d25aafdc703567b42ad4536c089aefaef673ce36a958f (AV positives: 20/58 scanned on 04/23/2019 01:42:52) File SHA256: 3c0c58d4b9eefea56e2f7be3f07cdb73e659b4db688bfbf9eacd96ba5ab2dfe5 (Date: 04/17/2019 08:47:36) File SHA256: 680f4305cd96bf3221c223800f413bb942a2aa607229ac0d9c9b87056792fa9e (AV positives: 4/73 scanned on 04/07/2019 01:34:25) File SHA256: 674f1141453539520926c502875f0e6cb32263c4e1890225eaf6545142bd55ef (AV positives: 4/70 scanned on 02/27/2019 01:43:31) File SHA256: 8b77bb2808ae7e314f82e33a84765ea2776f66305165eb831f641c09ce54c621 (AV positives: 29/72 scanned on 01/05/2019 11:31:42) File SHA256: 29123aefa4ad964b636e475d525a1093b76d5544c2d1707d8c6e3efb7756ac18 (AV positives: 20/71 scanned on 12/13/2018 01:49:07) File SHA256: fbe4648b52f9124c93c832a1a3fb494ed65609d4cdcaf805d2d7b86a18e9794c (Date: 12/12/2018 11:44:25)2d:Ta60,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAHjUlEQVR42s2X+2+T5xXH+wc42TSp2gqsdBstLWtWrdLWaRvttlbrqhZUykoZo4ymIW0Yl3XpSi8SascGlADhUkjI/eYkjnOHOOROSCjEy/1CLk58iS+xncSxE4fE9uv3u/M8r21iRpWo2g99pa8SkOzv53vOc87z5oEHvqlPRVMPlqq8sRtlDV1cpfVdKKnrQDFTTQeUNe0ouvofKKrVKCQVqNpIt5BPP595NQ4bt8TiawGs9BFFUvAnye8HBJK86hbij6ZxiF9ujl4eIupgKaL2lyFqXymePkC/xynx5LtF2LBHgQ1vF+CJt+R4fFce1u/MwWM7svHo9kys25YeMubmSwDyrnwJkwPYvv/I8hA/IfNdZ5rR0GuBY85DXyauKP2Ptqbe19xHyq1s5QCjVh82/vGvXw0RFTCfml3Eog+Ymgd008BtK9BnBnpMQJcB6GDSS2L/Zs8PX70UDkC/BAGyyq+HALq18/jZppj7Q7CyN/SaufnoFGlSxLBVxACZdzIzvYhOLaDWAG0aEe1j9P86kff90S13AYrUc2HKLG1eAuBGS78DT734l/+FiNpXwsvOkss+vQ3Z0WHE19vhmPdjfaIGEYe6EV+sx8dKHSL+3IDI11T49suVWPQI+MWu7FB6ZsqeGbcPg0Y30kua0NQ7hbpOO6rUEyhtNUHRaAhB3AXYq+Q911PZY8utkH2uwRsVNswtilh7UgPZRz3YnDyMxoEZRO5sROTWahyTD8FLdX5qW1oYwB2Pn86BiLbBSaQXNyL6Hyfx5nvHsW3vZ9gU/RFe2PEefvVaHIcIAbCTzh7W8/Q2N2THRvBs9jjmPSJVZACyD7vx4PvtWPAKeP7Tbl6BvjEnBAFY98rFMACWXD00Bee8D0XXTShoNkLeNA55nTak3HpdOMCPYxUcoN8sHTDWhifPj6KZ+ib7pBcR73fge/FqaKzzeGh3EyK3qHj5mfHa358NA5A321DYYkVOowWny7S4dNWIz7I7MbcgwnXHjxlqa3bdPQAbYgo5ADvtbXTAZNRz2Yc9eO6LEcjiOyDb34ZvvdOKzSco/bYaRMU0YH5B4J9Z83xiGMBxxTDOVeqQWmPGuQo9LlWbOMDsHRFOAnDM+ZFZawgHeCI6n38ZG62bI8CvTwxB9jc1ZAfUeORQB1KaLPjO29cQ+adaXv4zyhGMmvz8M6t/e5qbs9FjACx5QcsE8pomcP7yOJJUEoCLAGbcfkwTQFrNvQC78/iXsfJ/OQx8UGBBRGwrIva04JnD7VQ+Aat2E8BWFSI3VWLYMIuqm9KiWvObU6Hlw4y+Ss55EQ4CmJr1I6V6PBxg/c5cCYAqcIMAUmpciHizkY/cu0n9sDkEPLS9DpGvVOK7BLBA/c9SSQCrnz0pLR5BhJfk8YlY9Io0DSLcNEVzC37ee2Y+TeZ2lx8Xq0zhAI/tyApVgAFUtfv4qLHEB5P6YLILWE9AkS+W4vE3quC+IyDtigSwamMCFOy0XxtHHs14Tr0eWbU6pF8dQ6pqFMlXNLh4eYSX3u4SYHUKOHfZHA7ALpXQGaBt19QHVHcAKrWI8hsi8mpFJFeATIEMFbh5ciVCACz10uTzS5IH+z5J6a1OPyxUzcSKewDWvZ6Or/swgGDyzFptePLKYXxRPoRzZYOwUfqJGT9M0wISyizhAOxGY5fKDzYn4RFaLGtfuoCH/3AeD9OMf/+FM1jzu0R+2lc/dwqrqOfMdKmCqaWeS/PupHmfdkvJJXOBm49PCThWag0HuN+TWXqdNp/IVdFmRdnNCZTcsEDZYkbhdSPyAz3PDiRPo+QpPPlIKPnZ0kEkltzGaeUAzFR6I5nr7D4cUdqWB8igm4yt4pAWw+WmHrO0TLOBfrPUjlDPhbvJHSy5D3oyH6Ob8bBicgUAxdfoMvLzwxRKTns9n/Z6boOBr9PMGkpeHZ78/JLkpyh5QlE/ThT2SeY2HzQTPnxcML08QJqyiW8vlmyp2EJhSZnYCWerlSWempXGzOaUUrOS855PsrILPPkImQ+ZvfhAvgKA1KJGfnEwk8LAjRZMnhFMXqVBEs34hYolyYsDyRX9+LywF8fze3FU3hMyv2304u+5M8sDpCgaeDKeLpBwMjDPduov22g2l58vFpbYEkhsJBkmpcPGSs7ehoYtXgyaJPO+cS8O5jiXB0gurJdK6hJCpWVihlaa56BpsNTshBtICYo+nvxYfg9P/q+8bhzJ7cIAmfcavOjWe7Evy7UCgII6bsKNZnwkgcs8LRkGTVmPDXapz1q7lJgdtBGWmko+YJJS9xg83LxT50VcxuzyAEn5dXx8TNM+yZDGyEhihuOTNFIkVmad7W6pRya83HiIlZvUP+5BH6XuIeMunQcdWg/Uox7Eps8tD3BRXst7GZQ+0FdmqA2ZejEaSDscSMyNA73u1XvojdpDb9QeepOWzG9pPIhJc68MgJW1tUOH6htjKG7QIueqli4hI87QbRbU6UozEsotOF42gX+X2PDPYjsOF03SrE/RuDn4iT+Q7cJe6vs7GXOIofTRqSsAuJBXg7hPzuLl3Yf4W+zPN+3BT196i3/w/6VvxF/h/wUEhERwDDVFQQAAAABJRU5ErkJggg==2e:Tbe30,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:T146c,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:T146c,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:T146c,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:T460, 0 : 00 00 5E 00 01 01 3C 00 27 A5 AE 37 08 00 45 00 [..^...<.'..7..E.] 10 : 00 DD 03 CC 40 00 80 06 26 19 C0 A8 F0 3A 68 1B [....@...&....:h.] 20 : B7 37 C0 31 00 50 B0 8E 84 3E 3D 5B E8 F0 50 18 [.7.1.P...>=[..P.] 30 : 40 29 10 81 00 00 48 45 41 44 20 2F 63 73 73 2F [@)....HEAD /css/] 40 : 63 73 73 2E 63 73 73 20 48 54 54 50 2F 31 2E 31 [css.css HTTP/1.1] 50 : 0D 0A 43 6F 6E 6E 65 63 74 69 6F 6E 3A 20 4B 65 [..Connection: Ke] 60 : 65 70 2D 41 6C 69 76 65 0D 0A 43 6F 6F 6B 69 65 [ep-Alive..Cookie] 70 : 3A 20 5F 5F 63 66 64 75 69 64 3D 64 36 39 34 32 [: __cfduid=d6942] 80 : 31 64 30 34 33 34 37 31 36 31 36 66 65 64 34 35 [1d043471616fed45] 90 : 39 63 38 64 38 33 65 64 35 61 37 66 31 35 35 37 [9c8d83ed5a7f1557] A0 : 38 33 39 39 32 33 0D 0A 55 73 65 72 2D 41 67 65 [839923..User-Age] B0 : 6E 74 3A 20 4D 69 63 72 6F 73 6F 66 74 20 4F 66 [nt: Microsoft Of] C0 : 66 69 63 65 20 45 78 69 73 74 65 6E 63 65 20 44 [fice Existence D] D0 : 69 73 63 6F 76 65 72 79 0D 0A 48 6F 73 74 3A 20 [iscovery..Host: ] E0 : 70 6C 65 74 2E 64 6B 0D 0A 0D 0A [plet.dk....] 33:T48c, 0 : 00 00 5E 00 01 01 3C 00 27 A5 AE 37 08 00 45 00 [..^...<.'..7..E.] 10 : 00 E5 03 D0 40 00 80 06 26 0D C0 A8 F0 3A 68 1B [....@...&....:h.] 20 : B7 37 C0 32 00 50 80 CE 89 26 DE 50 03 EA 50 18 [.7.2.P...&.P..P.] 30 : 40 29 F8 8D 00 00 4F 50 54 49 4F 4E 53 20 2F 63 [@)....OPTIONS /c] 40 : 73 73 20 48 54 54 50 2F 31 2E 31 0D 0A 43 6F 6E [ss HTTP/1.1..Con] 50 : 6E 65 63 74 69 6F 6E 3A 20 4B 65 65 70 2D 41 6C [nection: Keep-Al] 60 : 69 76 65 0D 0A 43 6F 6F 6B 69 65 3A 20 5F 5F 63 [ive..Cookie: __c] 70 : 66 64 75 69 64 3D 64 36 39 34 32 31 64 30 34 33 [fduid=d69421d043] 80 : 34 37 31 36 31 36 66 65 64 34 35 39 63 38 64 38 [471616fed459c8d8] 90 : 33 65 64 35 61 37 66 31 35 35 37 38 33 39 39 32 [3ed5a7f155783992] A0 : 33 0D 0A 55 73 65 72 2D 41 67 65 6E 74 3A 20 4D [3..User-Agent: M] B0 : 69 63 72 6F 73 6F 66 74 2D 57 65 62 44 41 56 2D [icrosoft-WebDAV-] C0 : 4D 69 6E 69 52 65 64 69 72 2F 36 2E 31 2E 37 36 [MiniRedir/6.1.76] D0 : 30 31 0D 0A 74 72 61 6E 73 6C 61 74 65 3A 20 66 [01..translate: f] E0 : 0D 0A 48 6F 73 74 3A 20 70 6C 65 74 2E 64 6B 0D [..Host: plet.dk.] F0 : 0A 0D 0A [...] 34:T8ac, 0 : 00 00 5E 00 01 01 3C 00 27 A5 AE 37 08 00 45 00 [..^...<.'..7..E.] 10 : 01 C3 03 DD 40 00 80 06 25 22 C0 A8 F0 3A 68 1B [....@...%"...:h.] 20 : B7 37 C0 34 00 50 08 B4 DA 44 8A B4 1A CC 50 18 [.7.4.P...D....P.] 30 : 40 29 33 C1 00 00 47 45 54 20 2F 63 73 73 2F 63 [@)3...GET /css/c] 40 : 73 73 2E 63 73 73 20 48 54 54 50 2F 31 2E 31 0D [ss.css HTTP/1.1.] 50 : 0A 41 63 63 65 70 74 3A 20 2A 2F 2A 0D 0A 55 73 [.Accept: */*..Us] 60 : 65 72 2D 41 67 65 6E 74 3A 20 4D 6F 7A 69 6C 6C [er-Agent: Mozill] 70 : 61 2F 34 2E 30 20 28 63 6F 6D 70 61 74 69 62 6C [a/4.0 (compatibl] 80 : 65 3B 20 4D 53 49 45 20 37 2E 30 3B 20 57 69 6E [e; MSIE 7.0; Win] 90 : 64 6F 77 73 20 4E 54 20 36 2E 31 3B 20 57 69 6E [dows NT 6.1; Win] A0 : 36 34 3B 20 78 36 34 3B 20 54 72 69 64 65 6E 74 [64; x64; Trident] B0 : 2F 37 2E 30 3B 20 2E 4E 45 54 20 43 4C 52 20 32 [/7.0; .NET CLR 2] C0 : 2E 30 2E 35 30 37 32 37 3B 20 53 4C 43 43 32 3B [.0.50727; SLCC2;] D0 : 20 2E 4E 45 54 20 43 4C 52 20 33 2E 35 2E 33 30 [ .NET CLR 3.5.30] E0 : 37 32 39 3B 20 2E 4E 45 54 20 43 4C 52 20 33 2E [729; .NET CLR 3.] F0 : 30 2E 33 30 37 32 39 3B 20 4D 65 64 69 61 20 43 [0.30729; Media C] 100 : 65 6E 74 65 72 20 50 43 20 36 2E 30 3B 20 2E 4E [enter PC 6.0; .N] 110 : 45 54 34 2E 30 43 3B 20 2E 4E 45 54 34 2E 30 45 [ET4.0C; .NET4.0E] 120 : 3B 20 6D 73 2D 6F 66 66 69 63 65 3B 20 4D 53 4F [; ms-office; MSO] 130 : 66 66 69 63 65 20 31 34 29 0D 0A 55 41 2D 43 50 [ffice 14)..UA-CP] 140 : 55 3A 20 41 4D 44 36 34 0D 0A 41 63 63 65 70 74 [U: AMD64..Accept] 150 : 2D 45 6E 63 6F 64 69 6E 67 3A 20 67 7A 69 70 2C [-Encoding: gzip,] 160 : 20 64 65 66 6C 61 74 65 0D 0A 48 6F 73 74 3A 20 [ deflate..Host: ] 170 : 70 6C 65 74 2E 64 6B 0D 0A 43 6F 6E 6E 65 63 74 [plet.dk..Connect] 180 : 69 6F 6E 3A 20 4B 65 65 70 2D 41 6C 69 76 65 0D [ion: Keep-Alive.] 190 : 0A 43 6F 6F 6B 69 65 3A 20 5F 5F 63 66 64 75 69 [.Cookie: __cfdui] 1A0 : 64 3D 64 36 39 34 32 31 64 30 34 33 34 37 31 36 [d=d69421d0434716] 1B0 : 31 36 66 65 64 34 35 39 63 38 64 38 33 65 64 35 [16fed459c8d83ed5] 1C0 : 61 37 66 31 35 35 37 38 33 39 39 32 33 0D 0A 0D [a7f1557839923...] 1D0 : 0A [.] 35:T4b8, 0 : 00 00 5E 00 01 01 3C 00 27 A5 AE 37 08 00 45 00 [..^...<.'..7..E.] 10 : 00 F0 03 DF 40 00 80 06 25 F3 C0 A8 F0 3A 68 1B [....@...%....:h.] 20 : B7 37 C0 34 00 50 08 B4 DB DF 8A B4 21 D9 50 18 [.7.4.P......!.P.] 30 : 40 29 F5 36 00 00 48 45 41 44 20 2F 63 73 73 2F [@).6..HEAD /css/] 40 : 63 73 73 2E 63 73 73 20 48 54 54 50 2F 31 2E 31 [css.css HTTP/1.1] 50 : 0D 0A 55 73 65 72 2D 41 67 65 6E 74 3A 20 4D 69 [..User-Agent: Mi] 60 : 63 72 6F 73 6F 66 74 20 4F 66 66 69 63 65 20 45 [crosoft Office E] 70 : 78 69 73 74 65 6E 63 65 20 44 69 73 63 6F 76 65 [xistence Discove] 80 : 72 79 0D 0A 48 6F 73 74 3A 20 70 6C 65 74 2E 64 [ry..Host: plet.d] 90 : 6B 0D 0A 43 6F 6E 74 65 6E 74 2D 4C 65 6E 67 74 [k..Content-Lengt] A0 : 68 3A 20 30 0D 0A 43 6F 6E 6E 65 63 74 69 6F 6E [h: 0..Connection] B0 : 3A 20 4B 65 65 70 2D 41 6C 69 76 65 0D 0A 43 6F [: Keep-Alive..Co] C0 : 6F 6B 69 65 3A 20 5F 5F 63 66 64 75 69 64 3D 64 [okie: __cfduid=d] D0 : 36 39 34 32 31 64 30 34 33 34 37 31 36 31 36 66 [69421d043471616f] E0 : 65 64 34 35 39 63 38 64 38 33 65 64 35 61 37 66 [ed459c8d83ed5a7f] F0 : 31 35 35 37 38 33 39 39 32 33 0D 0A 0D 0A [1557839923....] 36:T4b8, 0 : 00 00 5E 00 01 01 3C 00 27 A5 AE 37 08 00 45 00 [..^...<.'..7..E.] 10 : 00 F0 03 E1 40 00 80 06 25 F1 C0 A8 F0 3A 68 1B [....@...%....:h.] 20 : B7 37 C0 34 00 50 08 B4 DC A7 8A B4 22 A0 50 18 [.7.4.P......".P.] 30 : 3F F7 F3 D9 00 00 48 45 41 44 20 2F 63 73 73 2F [?.....HEAD /css/] 40 : 63 73 73 2E 63 73 73 20 48 54 54 50 2F 31 2E 31 [css.css HTTP/1.1] 50 : 0D 0A 55 73 65 72 2D 41 67 65 6E 74 3A 20 4D 69 [..User-Agent: Mi] 60 : 63 72 6F 73 6F 66 74 20 4F 66 66 69 63 65 20 45 [crosoft Office E] 70 : 78 69 73 74 65 6E 63 65 20 44 69 73 63 6F 76 65 [xistence Discove] 80 : 72 79 0D 0A 48 6F 73 74 3A 20 70 6C 65 74 2E 64 [ry..Host: plet.d] 90 : 6B 0D 0A 43 6F 6E 74 65 6E 74 2D 4C 65 6E 67 74 [k..Content-Lengt] A0 : 68 3A 20 30 0D 0A 43 6F 6E 6E 65 63 74 69 6F 6E [h: 0..Connection] B0 : 3A 20 4B 65 65 70 2D 41 6C 69 76 65 0D 0A 43 6F [: Keep-Alive..Co] C0 : 6F 6B 69 65 3A 20 5F 5F 63 66 64 75 69 64 3D 64 [okie: __cfduid=d] D0 : 36 39 34 32 31 64 30 34 33 34 37 31 36 31 36 66 [69421d043471616f] E0 : 65 64 34 35 39 63 38 64 38 33 65 64 35 61 37 66 [ed459c8d83ed5a7f] F0 : 31 35 35 37 38 33 39 39 32 33 0D 0A 0D 0A [1557839923....] 1d:["$","$L2",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"$25"}}],["$","$L26",null,{"initialData":{"job_id":"5cdabffa028838cc0ea26b0a","environment_id":120,"environment_description":"Windows 7 64 bit","size":223073,"type":"Microsoft Word 2007+","type_short":["docx","office"],"type_short_id":"docx","target_url":null,"state":"SUCCESS","error_type":null,"error_origin":null,"submit_name":"e45f4b641bb48aa110ff64ad59cbeb58.docx","md5":"e45f4b641bb48aa110ff64ad59cbeb58","sha1":"686aa1e8db5fa6716c05788a76460b6f3619bd6d","sha256":"3c0c58d4b9eefea56e2f7be3f07cdb73e659b4db688bfbf9eacd96ba5ab2dfe5","sha512":"0f30b65b752f33b631937476266ff6cc71a03833c30b3f13054026ee1619cfa982f5e1c16d85fe316ceb2d4be6e8c3e205247e61a0e3892d7b2dbd0185492d47","ssdeep":"3072:pE6MGHhm0RzOtr4tiTN7R2fFXoukECWtme0CigRmDohgwvSQJOoLo8J+/SgVsDR/:yQOtr7F2fFXhkEC9OzhBStna/","imphash":null,"entrypoint":null,"entrypoint_section":null,"image_base":null,"subsystem":null,"image_file_characteristics":[],"dll_characteristics":[],"major_os_version":null,"minor_os_version":null,"av_detect":8,"vx_family":"CVE-2017-0199","url_analysis":false,"analysis_start_time":"2019-05-14T13:17:27+00:00","threat_score":100,"interesting":false,"threat_level":2,"verdict":"malicious","certificates":[],"is_certificates_valid":null,"certificates_validation_message":null,"domains":["plet.dk"],"compromised_hosts":["104.27.183.55"],"hosts":["104.27.183.55"],"total_network_connections":1,"total_processes":1,"total_signatures":28,"extracted_files":[{"name":"~_5f4b641bb48aa110ff64ad59cbeb58.docx","file_path":null,"file_size":162,"md5":"16cf07b6d6f758652122f5c01b561b38","sha1":"5ef543ce193044191392e2b8e887a300c52baf74","sha256":"3882a3e04d6cf66707b31c8cb14a7c9fe512d10dd355f97a37e8666270f6e17d","sha512":"74c4774646d522d6304e9098345e0231459dd892bc244df95488de34dd0a7fdcb15855e96d6113527d3b6a7d2bfd01819ff4359416df796d31072e8f9ad84b58","type_tags":["data"],"description":"data","runtime_process":"WINWORD.EXE (PID: 3752)","threat_level":0,"threat_level_readable":"no specific threat","group":"clean","av_label":null,"av_matched":0,"av_total":57,"file_available_to_download":true,"download_link":"/bff/report/5cdabffa028838cc0ea26b0a/download/dropped-file?key=317268e47e3ba61706dbe0ba2fdea91f442da5e733b9565c8fef686c663a6a8e6c5d6ceb7fa50e94b0547e91118fc0dee1b4a02d489a60e1a27b22d1cc8e0e731bf5706023f2c64b39f345547ad5c6936475ad4ab9aa9275f7ad34a08d160364","submit_link":"/bff/report/5cdabffa028838cc0ea26b0a/submit/dropped-file?key=317268e47e3ba61706dbe0ba2fdea91f442da5e733b9565c8fef686c663a6a8e6c5d6ceb7fa50e94b0547e91118fc0dee1b4a02d489a60e1a27b22d1cc8e0e731bf5706023f2c64b39f345547ad5c6936475ad4ab9aa9275f7ad34a08d160364","has_overview":true,"extended_details":null},{"name":"e45f4b641bb48aa110ff64ad59cbeb58.LNK","file_path":"%APPDATA%\\Microsoft\\Office\\Recent\\e45f4b641bb48aa110ff64ad59cbeb58.LNK","file_size":578,"md5":"490cf4872a887f1d46ee1481ad77442a","sha1":"07b58630d7a69e2fb1e1edcc179df48f3ad06e9f","sha256":"c2e52dc9a43bd776b242591616ad6034aa0b76cfa46271ffb29393e1e4638976","sha512":"81cb639655d7f90477998d13e4f4e346898726ad37c848e02c8d11ea970703264c021567dd06034099182dc82829e14f96f5f7f1be9411e156f005bf7ed1a073","type_tags":["lnk"],"description":"MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Tue May 14 13:18:20 2019, mtime=Tue May 14 13:18:20 2019, atime=Tue May 14 13:18:28 2019, length=223073, window=hide","runtime_process":"WINWORD.EXE (PID: 3752)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/5cdabffa028838cc0ea26b0a/download/dropped-file?key=96181f49630a2b66399df19df90cc40f44fcbca4786ce2782a1e60b18eb6c2d00f29cdc8cbd191fb5b43c74dcede7ffd6b1be29f30bada34652c05bc9390ba24f2a4eb66086b838eefed4202c408fc4c64373907cfde03bf278888bac642b8","submit_link":"/bff/report/5cdabffa028838cc0ea26b0a/submit/dropped-file?key=96181f49630a2b66399df19df90cc40f44fcbca4786ce2782a1e60b18eb6c2d00f29cdc8cbd191fb5b43c74dcede7ffd6b1be29f30bada34652c05bc9390ba24f2a4eb66086b838eefed4202c408fc4c64373907cfde03bf278888bac642b8","has_overview":false,"extended_details":null},{"name":"index.dat","file_path":"%APPDATA%\\Microsoft\\Office\\Recent\\index.dat","file_size":276,"md5":"a77ebcf69126755f1528f795e7c37736","sha1":"0367d10be117bfa89c5682106d34d8f9cf43f661","sha256":"7fcda3e9b4fd3471e3b30bbd6ef879c984b7b4f9b4c13ed682f15e6fd8683a88","sha512":"4bde141dc72c1fe42783767a6919aead2270828eca542c7b62a2d1eaa6943d6cef0fef897f101e1525c89f8a468ae6ce43285a5c2f46e01cb07c71fe99fc28ef","type_tags":["data"],"description":"data","runtime_process":"WINWORD.EXE (PID: 3752)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/5cdabffa028838cc0ea26b0a/download/dropped-file?key=b521aeaf11b4495009bf1d3206b3517f0a0d7917803d6cc07d5e32d5ee3cecde81b0fa118687447c69e873521aa0841f0e8b3f0347c825f6f5477f3a0528ede77fcce7","submit_link":"/bff/report/5cdabffa028838cc0ea26b0a/submit/dropped-file?key=b521aeaf11b4495009bf1d3206b3517f0a0d7917803d6cc07d5e32d5ee3cecde81b0fa118687447c69e873521aa0841f0e8b3f0347c825f6f5477f3a0528ede77fcce7","has_overview":false,"extended_details":null},{"name":"MB518E2V.txt","file_path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\MB518E2V.txt","file_size":108,"md5":"c07dd89faa42e63f9d826401d9fe921a","sha1":"52a1bcf60461df7fdb11468be24c777c0bff6143","sha256":"0178478058cfb23a85aa2b95768f1e6af77fd6df095fb95df93b1b60df36d1da","sha512":"85830f5777d3b463e9ec70d827e3c8bb3952c122d6c0e69baf8cac8d549ca8b4dcbb618cce6f260957f51e61c7fd08680ce770a088910d9993df4699d0add62c","type_tags":["text"],"description":"ASCII text","runtime_process":"WINWORD.EXE (PID: 3752)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/5cdabffa028838cc0ea26b0a/download/dropped-file?key=8f31b2d2b18996331a7d6f0fd0d168b5149bc61add285786fa64f18caac4543a9fe06d15df83ea4b5b6a59c79816fa837055efc7091b864374f4c9085900d46a949aba49365298","submit_link":"/bff/report/5cdabffa028838cc0ea26b0a/submit/dropped-file?key=8f31b2d2b18996331a7d6f0fd0d168b5149bc61add285786fa64f18caac4543a9fe06d15df83ea4b5b6a59c79816fa837055efc7091b864374f4c9085900d46a949aba49365298","has_overview":false,"extended_details":null},{"name":"FSF-CTBL.FSF","file_path":"%LOCALAPPDATA%\\Microsoft\\Office\\14.0\\OfficeFileCache\\FSF-CTBL.FSF","file_size":114,"md5":"a8b53cb2178cf7172bc0b66c0957bb8a","sha1":"d4e810fa918eb8d256bb398c2b25f31b5a481f07","sha256":"5fd47376da7d51a3433933b14d0cf5b3e3945fb74a573fe07c745fd980ec8079","sha512":"d9fceacf0bd8d394b9948cd22069b750634d08ca76be20ce2c174901d474251d58f5876d812aa46072df1a92dd832b725090c4cd53d15fe06161f5cde14dd133","type_tags":["data"],"description":"data","runtime_process":"WINWORD.EXE (PID: 3752)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"FSD-CNRY.FSD","file_path":"%LOCALAPPDATA%\\Microsoft\\Office\\14.0\\OfficeFileCache\\LocalCacheFileEditManager\\FSD-CNRY.FSD","file_size":131072,"md5":"13983a2d4ef113bcab88736b662d48c7","sha1":"5ff02bbea02c9d3b20d52d917a157d8bbd06d9fc","sha256":"cebc9a4cf61739a5958fe94b67caf110bdea4e383aead7c0232f59bf90dc6895","sha512":"460ffee254c09454b001b3a94a645ccaa81817f96dd80b2e84de09acb324f4066823ad28f6e1197edf78a7374bec4f479a819307572b1c50b1902b9a9738b68b","type_tags":["data"],"description":"data","runtime_process":"WINWORD.EXE (PID: 3752)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"12421770.wmf","file_path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.MSO\\12421770.wmf","file_size":642,"md5":"4f03b86e4d6631c26ff5fffc7332be1d","sha1":"14952a78ea51df67d5b5b6c6b4de3d96ba7935bd","sha256":"83f4ea26254d69825486bffd1d400217aac7245c5c48fe5acc3ccdea173c4851","sha512":"4bed29b66444d826e89589b55dd786758ff68fcd2daf8296703d4443edb991fffce563e20db22bfb34fdb488638bbb43252392b6c105d12e721329adc2774632","type_tags":["unknown"],"description":"ms-windows metafont .wmf","runtime_process":"WINWORD.EXE (PID: 3752)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/5cdabffa028838cc0ea26b0a/download/dropped-file?key=1214bf88b65c875aa4bedb69165a392d14be34180db77fad2b65b177c74302531614bfe27a6ea87e481c57798180a34b70bbc8a34d5a7a5bc8c456d823e82ee53d77bffd31d07c","submit_link":"/bff/report/5cdabffa028838cc0ea26b0a/submit/dropped-file?key=1214bf88b65c875aa4bedb69165a392d14be34180db77fad2b65b177c74302531614bfe27a6ea87e481c57798180a34b70bbc8a34d5a7a5bc8c456d823e82ee53d77bffd31d07c","has_overview":true,"extended_details":null},{"name":"4E3AB88D.wmf","file_path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.MSO\\4E3AB88D.wmf","file_size":502,"md5":"59aea63c4757c2a00594041298750b7e","sha1":"f97375f1e8d0a579791cecc5ee7a93e25ab1763a","sha256":"3d7c80b6638aa4c1e159d3a4d779d5579d817134fcfb872305c29d83eadf8213","sha512":"cd34bbe72ae760b93ca2faafdb3fa81271dcc58e183a26bf1b1ad34d179789063e9ba7c0ebb9b50ce9a65998e8a7f426119e6706d905a30c999ae9dccf70c4d1","type_tags":["unknown"],"description":"ms-windows metafont .wmf","runtime_process":"WINWORD.EXE (PID: 3752)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"64488D2A.wmf","file_path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.MSO\\64488D2A.wmf","file_size":508,"md5":"527900247380ca2d77481eb504c8496e","sha1":"7a12af659c050bf347fec1804aa7175f51fe05ca","sha256":"235324dd73643dfdd7478fdf329a8ec16f4d12486f129b04c8e052398b07c64c","sha512":"f500352494536da51b3a8a82a2947773de896a1ddd6fa8e7c97e7a63b271201c77f8e565ec446407a2a8523ab6c4c5871c47d67eaa635aeb022bb197ca956c27","type_tags":["unknown"],"description":"ms-windows metafont .wmf","runtime_process":"WINWORD.EXE (PID: 3752)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/5cdabffa028838cc0ea26b0a/download/dropped-file?key=4abb4ed20cc97aec61c14d9b8f0632938e3d0c95938169712a03b915db0e74bee359563b5035b39d67dd54ff9452dfc32801fb0687682730414cdea11fdf2931ebfeafb760a547","submit_link":"/bff/report/5cdabffa028838cc0ea26b0a/submit/dropped-file?key=4abb4ed20cc97aec61c14d9b8f0632938e3d0c95938169712a03b915db0e74bee359563b5035b39d67dd54ff9452dfc32801fb0687682730414cdea11fdf2931ebfeafb760a547","has_overview":false,"extended_details":null},{"name":"680A306B.htm","file_path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.MSO\\680A306B.htm","file_size":4062,"md5":"77693d1789a4fcb42f4aecf1693abb87","sha1":"9542b75334f8549c25d0b06b320a6d0bcd2468c8","sha256":"519a39ac7fcbcc1b6bb2850831bffe8c2b4c149f1af2da31c2cf7bb277081ded","sha512":"5bf274d2def8a61f9b16c9e4fe7cd37fcab1727863b986bff9e73580b0518b6aac92bed9eb23cc07e0fe980ffa63aa24628c6686bb643ddc58696c6a6e3451ec","type_tags":["html"],"description":"HTML document, ASCII text","runtime_process":"WINWORD.EXE (PID: 3752)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/5cdabffa028838cc0ea26b0a/download/dropped-file?key=943a4a0aabe83d41e668ba1c5b0ac38280f31c20bee033eb2ed5bd128f6c875f486c020eb20c4739f1c37e13563142c86b96261ec9c400a36b58ad5f6f8ba154fa964918dc74a0","submit_link":"/bff/report/5cdabffa028838cc0ea26b0a/submit/dropped-file?key=943a4a0aabe83d41e668ba1c5b0ac38280f31c20bee033eb2ed5bd128f6c875f486c020eb20c4739f1c37e13563142c86b96261ec9c400a36b58ad5f6f8ba154fa964918dc74a0","has_overview":false,"extended_details":null},{"name":"8BA3C6E7.wmf","file_path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.MSO\\8BA3C6E7.wmf","file_size":1588,"md5":"370bee21da8c79fbd81af2492fa2dcac","sha1":"c6361f302ae3186ea3fc1fcf14596532a7fc8e4d","sha256":"c3bb494f01217a5bd582f7d78bde0fd8e133b8d3f6942382e573943508c240d9","sha512":"1527d3d6888d3871a4e22102e55033c81b73a2fcb8c38846a2edc312ab1ccbe477a6be54b4bbaaa66cccc1e5d3e49f86c6c197b1426f03c1b991de9c445da40a","type_tags":["unknown"],"description":"ms-windows metafont .wmf","runtime_process":"WINWORD.EXE (PID: 3752)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/5cdabffa028838cc0ea26b0a/download/dropped-file?key=e5179df14fbbed5db8af0bf3766a6c069f0b04743639d4267177ce74814ac11e66f1176dac5dd1f7fe3c7b1a2fd1f369b4eeb27fac745b1fd8f3f7cba9a3c73fd4bd449e6411fd","submit_link":"/bff/report/5cdabffa028838cc0ea26b0a/submit/dropped-file?key=e5179df14fbbed5db8af0bf3766a6c069f0b04743639d4267177ce74814ac11e66f1176dac5dd1f7fe3c7b1a2fd1f369b4eeb27fac745b1fd8f3f7cba9a3c73fd4bd449e6411fd","has_overview":false,"extended_details":null},{"name":"8CA1D0B1.wmf","file_path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.MSO\\8CA1D0B1.wmf","file_size":642,"md5":"4f03b86e4d6631c26ff5fffc7332be1d","sha1":"14952a78ea51df67d5b5b6c6b4de3d96ba7935bd","sha256":"83f4ea26254d69825486bffd1d400217aac7245c5c48fe5acc3ccdea173c4851","sha512":"4bed29b66444d826e89589b55dd786758ff68fcd2daf8296703d4443edb991fffce563e20db22bfb34fdb488638bbb43252392b6c105d12e721329adc2774632","type_tags":["unknown"],"description":"ms-windows metafont .wmf","runtime_process":"WINWORD.EXE (PID: 3752)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/5cdabffa028838cc0ea26b0a/download/dropped-file?key=f44b70fff28e8a2f3cdc8298c63717ce49d086b596fd1cb039b8a3cc517362e2647099fa20f0fd293307c6faa4603a94fe3b9eec5c37b78cc0314433dec3702bef15d0b13ab369","submit_link":"/bff/report/5cdabffa028838cc0ea26b0a/submit/dropped-file?key=f44b70fff28e8a2f3cdc8298c63717ce49d086b596fd1cb039b8a3cc517362e2647099fa20f0fd293307c6faa4603a94fe3b9eec5c37b78cc0314433dec3702bef15d0b13ab369","has_overview":true,"extended_details":null},{"name":"C52023BC.wmf","file_path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.MSO\\C52023BC.wmf","file_size":502,"md5":"59aea63c4757c2a00594041298750b7e","sha1":"f97375f1e8d0a579791cecc5ee7a93e25ab1763a","sha256":"3d7c80b6638aa4c1e159d3a4d779d5579d817134fcfb872305c29d83eadf8213","sha512":"cd34bbe72ae760b93ca2faafdb3fa81271dcc58e183a26bf1b1ad34d179789063e9ba7c0ebb9b50ce9a65998e8a7f426119e6706d905a30c999ae9dccf70c4d1","type_tags":["unknown"],"description":"ms-windows metafont .wmf","runtime_process":"WINWORD.EXE (PID: 3752)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/5cdabffa028838cc0ea26b0a/download/dropped-file?key=85b1bc09b1638a0dc6038a0bf7cb4abc016def785e8019e7177bdf0f57b2caffa504c3b9cf76c728fef84b85c55aa7b6b27bee00afb9aab2b2906a7b93a03bfe7ca8d12afe0325","submit_link":"/bff/report/5cdabffa028838cc0ea26b0a/submit/dropped-file?key=85b1bc09b1638a0dc6038a0bf7cb4abc016def785e8019e7177bdf0f57b2caffa504c3b9cf76c728fef84b85c55aa7b6b27bee00afb9aab2b2906a7b93a03bfe7ca8d12afe0325","has_overview":false,"extended_details":null},{"name":"C907E723.wmf","file_path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.MSO\\C907E723.wmf","file_size":508,"md5":"527900247380ca2d77481eb504c8496e","sha1":"7a12af659c050bf347fec1804aa7175f51fe05ca","sha256":"235324dd73643dfdd7478fdf329a8ec16f4d12486f129b04c8e052398b07c64c","sha512":"f500352494536da51b3a8a82a2947773de896a1ddd6fa8e7c97e7a63b271201c77f8e565ec446407a2a8523ab6c4c5871c47d67eaa635aeb022bb197ca956c27","type_tags":["unknown"],"description":"ms-windows metafont .wmf","runtime_process":"WINWORD.EXE (PID: 3752)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/5cdabffa028838cc0ea26b0a/download/dropped-file?key=76fc348ebc55d9fc4ee740aaf90f358aca69e43fbfc50ac098dd2dc2aea36f118cc8065a3bde78545bcbe7242da1910942101b92312e8b36e810ed152f07f2ae727f0a8db845a8","submit_link":"/bff/report/5cdabffa028838cc0ea26b0a/submit/dropped-file?key=76fc348ebc55d9fc4ee740aaf90f358aca69e43fbfc50ac098dd2dc2aea36f118cc8065a3bde78545bcbe7242da1910942101b92312e8b36e810ed152f07f2ae727f0a8db845a8","has_overview":false,"extended_details":null},{"name":"EDE9AEC8.png","file_path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.MSO\\EDE9AEC8.png","file_size":158250,"md5":"bb44024643e66ba5c0306da7b4531584","sha1":"2cc65492c1db8115b33ad04e3c62d005836ad259","sha256":"bf8946d96b27224dd8210484bcdf4699d47d43bdf8ad553218c06391ad5168d8","sha512":"a0b9489d07ada2ee6d712ec41df231b72e5978386208a23fd800d7ec131cdb8bed878579f1baa5a1001eaa422effcdc551a8d2b6da89c5d75542d550dae66b1a","type_tags":["img","image"],"description":"PNG image data, 463 x 619, 8-bit/color RGBA, interlaced","runtime_process":"WINWORD.EXE (PID: 3752)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":true,"extended_details":null},{"name":"FEA71EFE.wmf","file_path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.MSO\\FEA71EFE.wmf","file_size":642,"md5":"4f03b86e4d6631c26ff5fffc7332be1d","sha1":"14952a78ea51df67d5b5b6c6b4de3d96ba7935bd","sha256":"83f4ea26254d69825486bffd1d400217aac7245c5c48fe5acc3ccdea173c4851","sha512":"4bed29b66444d826e89589b55dd786758ff68fcd2daf8296703d4443edb991fffce563e20db22bfb34fdb488638bbb43252392b6c105d12e721329adc2774632","type_tags":["unknown"],"description":"ms-windows metafont .wmf","runtime_process":"WINWORD.EXE (PID: 3752)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/5cdabffa028838cc0ea26b0a/download/dropped-file?key=362a9e93c2c8634951b25c6e395d68dde62a70a1bda3203a06497532604dabf8b5fad9788ab7d99152935c56b4e514791c9f1e6ad8b15219e0b989d4b8923bdc5d67a008d03e1e","submit_link":"/bff/report/5cdabffa028838cc0ea26b0a/submit/dropped-file?key=362a9e93c2c8634951b25c6e395d68dde62a70a1bda3203a06497532604dabf8b5fad9788ab7d99152935c56b4e514791c9f1e6ad8b15219e0b989d4b8923bdc5d67a008d03e1e","has_overview":true,"extended_details":null},{"name":"MSForms.exd","file_path":"%TEMP%\\Word8.0\\MSForms.exd","file_size":166724,"md5":"fa290e0aa3245a5fb90dd79a6ae26ea1","sha1":"12d23ed26b61c37c885a86ace26337b7b8c2f806","sha256":"e5b761dba8e72c29c5d59cdf18acd420ecceaab2940a561c43a90a5a299bf6d6","sha512":"6c44b3f74cab6bf2f3cd52468503e9b004a4a82dceddac784d16b4885a73b7b8edb816c669c1a4265400159ad983e6f60fd7b86eeea9157771f93c10b96d567b","type_tags":["data"],"description":"data","runtime_process":"WINWORD.EXE (PID: 3752)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":false,"download_link":null,"submit_link":null,"has_overview":false,"extended_details":null},{"name":"FSD-_BCF4B70A-FA94-4428-943D-15445E647C6C_.FSD","file_path":null,"file_size":131072,"md5":"294bf8a06bf9861f56de0e4c4cf0f3ae","sha1":"d62fe1a538db41a041f6a6cd405871ad385057b9","sha256":"6aaa213855f64d6b0e3f5552e021c0c4baf3a4b266c3361c1d6ef385b5f493f1","sha512":"35a618fe5d277361fca67dd0ee57fd2a897ae82d92795f70fb356c8a7e30000e872590520c11bf996c64b497401f4bf5430752aa7a3c1a244342bc47aaa625d9","type_tags":["data"],"description":"data","runtime_process":"WINWORD.EXE (PID: 3752)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/5cdabffa028838cc0ea26b0a/download/dropped-file?key=bf5ba599705f5e6db52d879d557a9a17b5d449a126369b592bda77fa56ec6cc873078f223aaf4c53f25c4740c906da30b72d9cadd804a83523fc2fb958f2593195126c48999953d5c6a651dca6b8a1b5965452d16e3af795d4f5630af746c1346c5dad1edd232307","submit_link":"/bff/report/5cdabffa028838cc0ea26b0a/submit/dropped-file?key=bf5ba599705f5e6db52d879d557a9a17b5d449a126369b592bda77fa56ec6cc873078f223aaf4c53f25c4740c906da30b72d9cadd804a83523fc2fb958f2593195126c48999953d5c6a651dca6b8a1b5965452d16e3af795d4f5630af746c1346c5dad1edd232307","has_overview":false,"extended_details":null},{"name":"_7B793E9D-6BEF-4168-828E-A67C91675819_","file_path":null,"file_size":131072,"md5":"40db1d740359c0ab8dfb7216531ae12f","sha1":"c9f0c341fb0ed226f057121e00ccf2ef76bfe496","sha256":"e8593474dc6e81e165c91c5c9721a97571ae211610239e7fa950ab3480161e2d","sha512":"48a6a5509c8cc3e70e74eb3f15ef6032f0f7737ea809da41cd5afc9ca4d0c9e8ffa9f49f43e3371b2e25bec6d0738ed8ebbe4aee39cf9fc98078a95c221a27de","type_tags":["data"],"description":"data","runtime_process":"WINWORD.EXE (PID: 3752)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/5cdabffa028838cc0ea26b0a/download/dropped-file?key=5fc7533b01d5819e69c8d442fb3a625b7dd57eccc854027f636d3f5346f6f20688ef263f156c289d9cb846f063a9f243d922dfe7dd8d8366bfd09ce6832478a0f2125e2f3c235c02ac94fa9ef99a6a029c01b06068285faf495abe03ad07d774","submit_link":"/bff/report/5cdabffa028838cc0ea26b0a/submit/dropped-file?key=5fc7533b01d5819e69c8d442fb3a625b7dd57eccc854027f636d3f5346f6f20688ef263f156c289d9cb846f063a9f243d922dfe7dd8d8366bfd09ce6832478a0f2125e2f3c235c02ac94fa9ef99a6a029c01b06068285faf495abe03ad07d774","has_overview":false,"extended_details":null},{"name":"FSF-_0E1EEE64-E8C6-4E2A-9759-63CF07FD8988_.FSF","file_path":null,"file_size":114,"md5":"ea2e1a61480d71c6d9921d0d4ee14294","sha1":"62f98d32a64237131918401344827fa9b09e38a4","sha256":"fbbca82414b3d719fbcd2c3f5f28d57d87a762654bccacb8e8ff435cbd69a940","sha512":"f8fb84d52bd4d91e8d6187d22c8aee33e909bab0cf0234931b13fd0b21f3b47a3ae0328d87f0e9891d249e2dd1796eb839c0707d7ab221abe52639cfdc60df5b","type_tags":["data"],"description":"data","runtime_process":"WINWORD.EXE (PID: 3752)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/5cdabffa028838cc0ea26b0a/download/dropped-file?key=5b8ab4d4f2380c692ad7247e08a9ab679e3060567e502f71db81f529e8fc1dffad5fec2c7a00c3f6862b44f8d5da1c157b53fe894912fe4c437ca3edb98edf77ae8a21f12329d6c4618100e4e97ab41bc9f29e6369c6982da28cc3114d1e4ee37ee01e20f6a1427b45","submit_link":"/bff/report/5cdabffa028838cc0ea26b0a/submit/dropped-file?key=5b8ab4d4f2380c692ad7247e08a9ab679e3060567e502f71db81f529e8fc1dffad5fec2c7a00c3f6862b44f8d5da1c157b53fe894912fe4c437ca3edb98edf77ae8a21f12329d6c4618100e4e97ab41bc9f29e6369c6982da28cc3114d1e4ee37ee01e20f6a1427b45","has_overview":false,"extended_details":null}],"file_metadata":{"file_compositions":[],"imported_objects":[],"file_analysis":[],"total_file_compositions_imports":null},"processes":[{"uid":"00016468-00003752","parentuid":null,"name":"WINWORD.EXE","normalized_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\WINWORD.EXE","command_line":"/n \"C:\\e45f4b641bb48aa110ff64ad59cbeb58.docx\"","sha256":"c0a081e6d5e0279be4503f26f0b01bcedeebf1dfb95fcbe4fb935f881d111da0","av_label":null,"av_matched":null,"av_total":null,"pid":"3752","icon":"$27","process_flags":[{"name":"Network Activity","data":null}]}],"mitre_attcks":[{"tactic":"Execution","technique":"Service Execution","attck_id":"T1035","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1035","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Opened the service control manager"],"parent":null},{"tactic":"Execution","technique":"Exploitation for Client Execution","attck_id":"T1203","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1203","malicious_identifiers_count":1,"malicious_identifiers":["Possible document exploit detected"],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Persistence","technique":"Hooking","attck_id":"T1179","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1179","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":3,"informative_identifiers":["Hooks API calls","Installs hooks/patches the running process","Loads rich edit control libraries"],"parent":null},{"tactic":"Privilege Escalation","technique":"Hooking","attck_id":"T1179","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1179","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":3,"informative_identifiers":["Hooks API calls","Installs hooks/patches the running process","Loads rich edit control libraries"],"parent":null},{"tactic":"Privilege Escalation","technique":"Process Injection","attck_id":"T1055","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1055","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Found a string that may be used as part of an injection method"],"parent":null},{"tactic":"Defense Evasion","technique":"Process Injection","attck_id":"T1055","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1055","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Found a string that may be used as part of an injection method"],"parent":null},{"tactic":"Defense Evasion","technique":"Modify Registry","attck_id":"T1112","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1112","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Removes Office resiliency keys (often used to avoid problems opening documents)"],"parent":null},{"tactic":"Credential Access","technique":"Hooking","attck_id":"T1179","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1179","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":3,"informative_identifiers":["Hooks API calls","Installs hooks/patches the running process","Loads rich edit control libraries"],"parent":null},{"tactic":"Discovery","technique":"Application Window Discovery","attck_id":"T1010","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1010","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Scanning for window names"],"parent":null},{"tactic":"Discovery","technique":"Peripheral Device Discovery","attck_id":"T1120","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1120","malicious_identifiers_count":1,"malicious_identifiers":["Found an IP/URL artifact that was identified as malicious by a significant amount of reputation engines"],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null}],"network_mode":"default","signatures":[{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"network-0","type":7,"relevance":1,"name":"Contacts domains","description":"\"plet.dk\"","description_v2":["\"plet.dk\""],"description_v3":[{"type":"text","value":"\"plet.dk\""}],"origin":"Network Traffic","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"network-1","type":7,"relevance":1,"name":"Contacts server","description":"\"104.27.183.55:80\"","description_v2":["\"104.27.183.55:80\""],"description_v3":[{"type":"text","value":"\"104.27.183.55:80\""}],"origin":"Network Traffic","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"api-4","type":6,"relevance":1,"name":"Creates a writable file in a temporary directory","description":"\"WINWORD.EXE\" created file \"%TEMP%\\{7B793E9D-6BEF-4168-828E-A67C91675819}\"\n \"WINWORD.EXE\" created file \"%TEMP%\\{8EDA4E30-D683-46E3-881E-094476410C2F}\"\n \"WINWORD.EXE\" created file \"%TEMP%\\Word8.0\\MSForms.exd\"","description_v2":["\"WINWORD.EXE\" created file \"%TEMP%\\{7B793E9D-6BEF-4168-828E-A67C91675819}\"","\"WINWORD.EXE\" created file \"%TEMP%\\{8EDA4E30-D683-46E3-881E-094476410C2F}\"","\"WINWORD.EXE\" created file \"%TEMP%\\Word8.0\\MSForms.exd\""],"description_v3":[{"type":"text","value":"\"WINWORD.EXE\" created file \"%TEMP%\\{7B793E9D-6BEF-4168-828E-A67C91675819}\""},{"type":"linebreak"},{"type":"text","value":"\"WINWORD.EXE\" created file \"%TEMP%\\{8EDA4E30-D683-46E3-881E-094476410C2F}\""},{"type":"linebreak"},{"type":"text","value":"\"WINWORD.EXE\" created file \"%TEMP%\\Word8.0\\MSForms.exd\""}],"origin":"API Call","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"mutant-0","type":4,"relevance":3,"name":"Creates mutants","description":"$28","description_v2":["\"\\Sessions\\1\\BaseNamedObjects\\Global\\_MSIExecute\"","\"Global\\552FFA80-3393-423d-8671-7BA046BB5906\"","\"Local\\CSI_WDW:{1C868000-A643-42F1-ABD6-E88A46C8BF9B}\"","\"{BDD98A3C-B57F-4199-B92A-95A54AA1132E}-94987E20\"","\"Global\\MTX_MSO_Formal1_S-1-5-21-686412048-2446563785-1323799475-1001\"","\"{BDD98A3C-B57F-4199-B92A-95A54AA1132E}-C242C5D5\"","\"Local\\CSI_WDW:{1E0F6851-E5DF-4134-B765-AB17B8D870AD}\"","\"{BDD98A3C-B57F-4199-B92A-95A54AA1132E}-AD73D398\"","\"{BDD98A3C-B57F-4199-B92A-95A54AA1132E}-271AC32E\"","\"Local\\CSI_OMTX:{AFDE3FDD-93CD-48FC-A97B-F14B214D545A}\"","\"Local\\CSI_WDW:{AFDE3FDD-93CD-48FC-A97B-F14B214D545A}\"","\"Local\\Csi_CTTxnLock:{E9F68CE9-BCEA-480B-86F0-573078F1D906}\"","\"Local\\ZonesCacheCounterMutex\"","\"{BDD98A3C-B57F-4199-B92A-95A54AA1132E}-6CD9E1EB\"","\"{BDD98A3C-B57F-4199-B92A-95A54AA1132E}-EC13C7BA\"","\"Local\\x64_10MU_ACB10_S-1-5-5-0-61188\"","\"{BDD98A3C-B57F-4199-B92A-95A54AA1132E}-55DB5FB0\"","\"Local\\ZonesLockedCacheCounterMutex\"","\"Local\\CSI_OMTX:{1E0F6851-E5DF-4134-B765-AB17B8D870AD}\"","\"{BDD98A3C-B57F-4199-B92A-95A54AA1132E}-E3431DA2\""],"description_v3":[{"type":"text","value":"\"\\Sessions\\1\\BaseNamedObjects\\Global\\_MSIExecute\""},{"type":"linebreak"},{"type":"text","value":"\"Global\\552FFA80-3393-423d-8671-7BA046BB5906\""},{"type":"linebreak"},{"type":"text","value":"\"Local\\CSI_WDW:{1C868000-A643-42F1-ABD6-E88A46C8BF9B}\""},{"type":"linebreak"},{"type":"text","value":"\"{BDD98A3C-B57F-4199-B92A-95A54AA1132E}-94987E20\""},{"type":"linebreak"},{"type":"text","value":"\"Global\\MTX_MSO_Formal1_S-1-5-21-686412048-2446563785-1323799475-1001\""},{"type":"linebreak"},{"type":"text","value":"\"{BDD98A3C-B57F-4199-B92A-95A54AA1132E}-C242C5D5\""},{"type":"linebreak"},{"type":"text","value":"\"Local\\CSI_WDW:{1E0F6851-E5DF-4134-B765-AB17B8D870AD}\""},{"type":"linebreak"},{"type":"text","value":"\"{BDD98A3C-B57F-4199-B92A-95A54AA1132E}-AD73D398\""},{"type":"linebreak"},{"type":"text","value":"\"{BDD98A3C-B57F-4199-B92A-95A54AA1132E}-271AC32E\""},{"type":"linebreak"},{"type":"text","value":"\"Local\\CSI_OMTX:{AFDE3FDD-93CD-48FC-A97B-F14B214D545A}\""},{"type":"linebreak"},{"type":"text","value":"\"Local\\CSI_WDW:{AFDE3FDD-93CD-48FC-A97B-F14B214D545A}\""},{"type":"linebreak"},{"type":"text","value":"\"Local\\Csi_CTTxnLock:{E9F68CE9-BCEA-480B-86F0-573078F1D906}\""},{"type":"linebreak"},{"type":"text","value":"\"Local\\ZonesCacheCounterMutex\""},{"type":"linebreak"},{"type":"text","value":"\"{BDD98A3C-B57F-4199-B92A-95A54AA1132E}-6CD9E1EB\""},{"type":"linebreak"},{"type":"text","value":"\"{BDD98A3C-B57F-4199-B92A-95A54AA1132E}-EC13C7BA\""},{"type":"linebreak"},{"type":"text","value":"\"Local\\x64_10MU_ACB10_S-1-5-5-0-61188\""},{"type":"linebreak"},{"type":"text","value":"\"{BDD98A3C-B57F-4199-B92A-95A54AA1132E}-55DB5FB0\""},{"type":"linebreak"},{"type":"text","value":"\"Local\\ZonesLockedCacheCounterMutex\""},{"type":"linebreak"},{"type":"text","value":"\"Local\\CSI_OMTX:{1E0F6851-E5DF-4134-B765-AB17B8D870AD}\""},{"type":"linebreak"},{"type":"text","value":"\"{BDD98A3C-B57F-4199-B92A-95A54AA1132E}-E3431DA2\""}],"origin":"Created Mutant","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"binary-16","type":8,"relevance":10,"name":"Drops files marked as clean","description":"Antivirus vendors marked dropped file \"~_5f4b641bb48aa110ff64ad59cbeb58.docx\" as clean (type is \"data\")","description_v2":["Antivirus vendors marked dropped file \"~_5f4b641bb48aa110ff64ad59cbeb58.docx\" as clean (type is \"data\")"],"description_v3":[{"type":"text","value":"Antivirus vendors marked dropped file \"~_5f4b641bb48aa110ff64ad59cbeb58.docx\" as clean (type is \"data\")"}],"origin":"Binary File","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"module-2","type":10,"relevance":0,"name":"Loads rich edit control libraries","description":"\"WINWORD.EXE\" loaded module \"%COMMONPROGRAMFILES%\\Microsoft Shared\\OFFICE14\\RICHED20.DLL\" at F3670000","description_v2":["\"WINWORD.EXE\" loaded module \"%COMMONPROGRAMFILES%\\Microsoft Shared\\OFFICE14\\RICHED20.DLL\" at F3670000"],"description_v3":[{"type":"text","value":"\"WINWORD.EXE\" loaded module \"%COMMONPROGRAMFILES%\\Microsoft Shared\\OFFICE14\\RICHED20.DLL\" at F3670000"}],"origin":"Loaded Module","attck_id":"T1179","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1179","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"api-77","type":6,"relevance":10,"name":"Opened the service control manager","description":"\"WINWORD.EXE\" called \"OpenSCManager\" requesting access rights \"SC_MANAGER_CONNECT\" (0x1)","description_v2":["\"WINWORD.EXE\" called \"OpenSCManager\" requesting access rights \"SC_MANAGER_CONNECT\" (0x1)"],"description_v3":[{"type":"text","value":"\"WINWORD.EXE\" called \"OpenSCManager\" requesting access rights \"SC_MANAGER_CONNECT\" (0x1)"}],"origin":"API Call","attck_id":"T1035","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1035","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"registry-68","type":3,"relevance":10,"name":"Removes Office resiliency keys (often used to avoid problems opening documents)","description":"\"WINWORD.EXE\" (Access type: \"DELETEVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\14.0\\WORD\\RESILIENCY\\STARTUPITEMS\"; Key: \"}-2\")\n \"WINWORD.EXE\" (Access type: \"DELETEVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\14.0\\WORD\\RESILIENCY\\STARTUPITEMS\"; Key: \"`.2\")\n \"WINWORD.EXE\" (Access type: \"DELETEVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\14.0\\WORD\\RESILIENCY\\STARTUPITEMS\"; Key: \"K02\")\n \"WINWORD.EXE\" (Access type: \"DELETEVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\14.0\\WORD\\RESILIENCY\\STARTUPITEMS\"; Key: \"|*2\")\n \"WINWORD.EXE\" (Access type: \"DELETE\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\14.0\\WORD\\RESILIENCY\\STARTUPITEMS\")","description_v2":["\"WINWORD.EXE\" (Access type: \"DELETEVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\14.0\\WORD\\RESILIENCY\\STARTUPITEMS\"; Key: \"}-2\")","\"WINWORD.EXE\" (Access type: \"DELETEVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\14.0\\WORD\\RESILIENCY\\STARTUPITEMS\"; Key: \"`.2\")","\"WINWORD.EXE\" (Access type: \"DELETEVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\14.0\\WORD\\RESILIENCY\\STARTUPITEMS\"; Key: \"K02\")","\"WINWORD.EXE\" (Access type: \"DELETEVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\14.0\\WORD\\RESILIENCY\\STARTUPITEMS\"; Key: \"|*2\")","\"WINWORD.EXE\" (Access type: \"DELETE\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\14.0\\WORD\\RESILIENCY\\STARTUPITEMS\")"],"description_v3":[{"type":"text","value":"\"WINWORD.EXE\" (Access type: \"DELETEVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\14.0\\WORD\\RESILIENCY\\STARTUPITEMS\"; Key: \"}-2\")"},{"type":"linebreak"},{"type":"text","value":"\"WINWORD.EXE\" (Access type: \"DELETEVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\14.0\\WORD\\RESILIENCY\\STARTUPITEMS\"; Key: \"`.2\")"},{"type":"linebreak"},{"type":"text","value":"\"WINWORD.EXE\" (Access type: \"DELETEVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\14.0\\WORD\\RESILIENCY\\STARTUPITEMS\"; Key: \"K02\")"},{"type":"linebreak"},{"type":"text","value":"\"WINWORD.EXE\" (Access type: \"DELETEVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\14.0\\WORD\\RESILIENCY\\STARTUPITEMS\"; Key: \"|*2\")"},{"type":"linebreak"},{"type":"text","value":"\"WINWORD.EXE\" (Access type: \"DELETE\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\14.0\\WORD\\RESILIENCY\\STARTUPITEMS\")"}],"origin":"Registry Access","attck_id":"T1112","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1112","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"api-70","type":6,"relevance":10,"name":"Scanning for window names","description":"\"WINWORD.EXE\" searching for class \"MSOBALLOON\"\n \"WINWORD.EXE\" searching for class \"MsoHelp10\"\n \"WINWORD.EXE\" searching for class \"AgentAnim\"\n \"WINWORD.EXE\" searching for class \"Shell_TrayWnd\"\n \"WINWORD.EXE\" searching for class \"NetUICtrlNotifySink\"\n \"WINWORD.EXE\" searching for class \"REListbox20W\"\n \"WINWORD.EXE\" searching for class \"OfficeTooltip\"\n \"WINWORD.EXE\" searching for class \"MsoCommandBarPopup\"\n \"WINWORD.EXE\" searching for class \"mspim_wnd32\"","description_v2":["\"WINWORD.EXE\" searching for class \"MSOBALLOON\"","\"WINWORD.EXE\" searching for class \"MsoHelp10\"","\"WINWORD.EXE\" searching for class \"AgentAnim\"","\"WINWORD.EXE\" searching for class \"Shell_TrayWnd\"","\"WINWORD.EXE\" searching for class \"NetUICtrlNotifySink\"","\"WINWORD.EXE\" searching for class \"REListbox20W\"","\"WINWORD.EXE\" searching for class \"OfficeTooltip\"","\"WINWORD.EXE\" searching for class \"MsoCommandBarPopup\"","\"WINWORD.EXE\" searching for class \"mspim_wnd32\""],"description_v3":[{"type":"text","value":"\"WINWORD.EXE\" searching for class \"MSOBALLOON\""},{"type":"linebreak"},{"type":"text","value":"\"WINWORD.EXE\" searching for class \"MsoHelp10\""},{"type":"linebreak"},{"type":"text","value":"\"WINWORD.EXE\" searching for class \"AgentAnim\""},{"type":"linebreak"},{"type":"text","value":"\"WINWORD.EXE\" searching for class \"Shell_TrayWnd\""},{"type":"linebreak"},{"type":"text","value":"\"WINWORD.EXE\" searching for class \"NetUICtrlNotifySink\""},{"type":"linebreak"},{"type":"text","value":"\"WINWORD.EXE\" searching for class \"REListbox20W\""},{"type":"linebreak"},{"type":"text","value":"\"WINWORD.EXE\" searching for class \"OfficeTooltip\""},{"type":"linebreak"},{"type":"text","value":"\"WINWORD.EXE\" searching for class \"MsoCommandBarPopup\""},{"type":"linebreak"},{"type":"text","value":"\"WINWORD.EXE\" searching for class \"mspim_wnd32\""}],"origin":"API Call","attck_id":"T1010","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1010","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Installation/Persistance","identifier":"binary-0","type":8,"relevance":3,"name":"Dropped files","description":"$29","description_v2":["\"e45f4b641bb48aa110ff64ad59cbeb58.LNK\" has type \"MS Windows shortcut Item id list present Points to a file or directory Has Relative path Archive ctime=Tue May 14 13:18:20 2019 mtime=Tue May 14 13:18:20 2019 atime=Tue May 14 13:18:28 2019 length=223073 window=hide\"","\"~_5f4b641bb48aa110ff64ad59cbeb58.docx\" has type \"data\"","\"FSD-_BCF4B70A-FA94-4428-943D-15445E647C6C_.FSD\" has type \"data\"","\"_7B793E9D-6BEF-4168-828E-A67C91675819_\" has type \"data\"","\"index.dat\" has type \"data\"","\"FSF-_0E1EEE64-E8C6-4E2A-9759-63CF07FD8988_.FSF\" has type \"data\"","\"8BA3C6E7.wmf\" has type \"ms-windows metafont .wmf\"","\"680A306B.htm\" has type \"HTML document ASCII text\"","\"8CA1D0B1.wmf\" has type \"ms-windows metafont .wmf\"","\"C52023BC.wmf\" has type \"ms-windows metafont .wmf\"","\"64488D2A.wmf\" has type \"ms-windows metafont .wmf\"","\"css_1_.htm\" has type \"HTML document ASCII text\"","\"12421770.wmf\" has type \"ms-windows metafont .wmf\"","\"ExcludeDictionaryEN0409.lex\" has type \"Little-endian UTF-16 Unicode text with no line terminators\"","\"_8EDA4E30-D683-46E3-881E-094476410C2F_\" has type \"data\"","\"~WRS_68F8ACBD-32CD-42DC-A416-DE5655A25D23_.tmp\" has type \"data\"","\"MB518E2V.txt\" has type \"ASCII text\"","\"C907E723.wmf\" has type \"ms-windows metafont .wmf\"","\"FEA71EFE.wmf\" has type \"ms-windows metafont .wmf\"","\"~WRS_31186E5D-DB6A-4D36-A4C7-B062610D7218_.tmp\" has type \"data\""],"description_v3":[{"type":"text","value":"\"e45f4b641bb48aa110ff64ad59cbeb58.LNK\" has type \"MS Windows shortcut Item id list present Points to a file or directory Has Relative path Archive ctime=Tue May 14 13:18:20 2019 mtime=Tue May 14 13:18:20 2019 atime=Tue May 14 13:18:28 2019 length=223073 window=hide\""},{"type":"linebreak"},{"type":"text","value":"\"~_5f4b641bb48aa110ff64ad59cbeb58.docx\" has type \"data\""},{"type":"linebreak"},{"type":"text","value":"\"FSD-_BCF4B70A-FA94-4428-943D-15445E647C6C_.FSD\" has type \"data\""},{"type":"linebreak"},{"type":"text","value":"\"_7B793E9D-6BEF-4168-828E-A67C91675819_\" has type \"data\""},{"type":"linebreak"},{"type":"text","value":"\"index.dat\" has type \"data\""},{"type":"linebreak"},{"type":"text","value":"\"FSF-_0E1EEE64-E8C6-4E2A-9759-63CF07FD8988_.FSF\" has type \"data\""},{"type":"linebreak"},{"type":"text","value":"\"8BA3C6E7.wmf\" has type \"ms-windows metafont .wmf\""},{"type":"linebreak"},{"type":"text","value":"\"680A306B.htm\" has type \"HTML document ASCII text\""},{"type":"linebreak"},{"type":"text","value":"\"8CA1D0B1.wmf\" has type \"ms-windows metafont .wmf\""},{"type":"linebreak"},{"type":"text","value":"\"C52023BC.wmf\" has type \"ms-windows metafont .wmf\""},{"type":"linebreak"},{"type":"text","value":"\"64488D2A.wmf\" has type \"ms-windows metafont .wmf\""},{"type":"linebreak"},{"type":"text","value":"\"css_1_.htm\" has type \"HTML document ASCII text\""},{"type":"linebreak"},{"type":"text","value":"\"12421770.wmf\" has type \"ms-windows metafont .wmf\""},{"type":"linebreak"},{"type":"text","value":"\"ExcludeDictionaryEN0409.lex\" has type \"Little-endian UTF-16 Unicode text with no line terminators\""},{"type":"linebreak"},{"type":"text","value":"\"_8EDA4E30-D683-46E3-881E-094476410C2F_\" has type \"data\""},{"type":"linebreak"},{"type":"text","value":"\"~WRS_68F8ACBD-32CD-42DC-A416-DE5655A25D23_.tmp\" has type \"data\""},{"type":"linebreak"},{"type":"text","value":"\"MB518E2V.txt\" has type \"ASCII text\""},{"type":"linebreak"},{"type":"text","value":"\"C907E723.wmf\" has type \"ms-windows metafont .wmf\""},{"type":"linebreak"},{"type":"text","value":"\"FEA71EFE.wmf\" has type \"ms-windows metafont .wmf\""},{"type":"linebreak"},{"type":"text","value":"\"~WRS_31186E5D-DB6A-4D36-A4C7-B062610D7218_.tmp\" has type \"data\""}],"origin":"Binary File","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Installation/Persistance","identifier":"string-4","type":2,"relevance":4,"name":"Found a string that may be used as part of an injection method","description":"\"Shell_TrayWnd\" (Taskbar window class may be used to inject into explorer with the SetWindowLong method)","description_v2":["\"Shell_TrayWnd\" (Taskbar window class may be used to inject into explorer with the SetWindowLong method)"],"description_v3":[{"type":"text","value":"\"Shell_TrayWnd\" (Taskbar window class may be used to inject into explorer with the SetWindowLong method)"}],"origin":"File/Memory","attck_id":"T1055","capec_id":"CAPEC-242","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1055","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Installation/Persistance","identifier":"api-51","type":6,"relevance":5,"name":"Opens the MountPointManager (often used to detect additional infection locations)","description":"\"WINWORD.EXE\" opened \"\\Device\\MountPointManager\"","description_v2":["\"WINWORD.EXE\" opened \"\\Device\\MountPointManager\""],"description_v3":[{"type":"text","value":"\"WINWORD.EXE\" opened \"\\Device\\MountPointManager\""}],"origin":"API Call","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Installation/Persistance","identifier":"api-55","type":6,"relevance":7,"name":"Touches files in the Windows directory","description":"$2a","description_v2":["\"WINWORD.EXE\" touched file \"C:\\Windows\\Globalization\\Sorting\\SortDefault.nls\"","\"WINWORD.EXE\" touched file \"C:\\Windows\\Fonts\\StaticCache.dat\"","\"WINWORD.EXE\" touched file \"C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\clr.dll\"","\"WINWORD.EXE\" touched file \"C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\mscorwks.dll\"","\"WINWORD.EXE\" touched file \"C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll\"","\"WINWORD.EXE\" touched file \"C:\\Windows\\System32\\en-US\\user32.dll.mui\"","\"WINWORD.EXE\" touched file \"C:\\Users\\c1muIHc\\AppData\\Local\\Microsoft\\Windows\\Caches\"","\"WINWORD.EXE\" touched file \"C:\\Users\\%OSUSER%\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db\"","\"WINWORD.EXE\" touched file \"C:\\Users\\%OSUSER%\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001b.db\"","\"WINWORD.EXE\" touched file \"C:\\Windows\\System32\\rsaenh.dll\"","\"WINWORD.EXE\" touched file \"C:\\Windows\\System32\\en-US\\KernelBase.dll.mui\"","\"WINWORD.EXE\" touched file \"C:\\Windows\\System32\\msxml6r.dll\"","\"WINWORD.EXE\" touched file \"C:\\Users\\%OSUSER%\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.Word\\~WRS{2294E6D2-4CC0-4B54-A094-199B8AB2B334}.tmp\"","\"WINWORD.EXE\" touched file \"C:\\Windows\\System32\\en-US\\msctf.dll.mui\"","\"WINWORD.EXE\" touched file \"C:\\Users\\%OSUSER%\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\counters.dat\"","\"WINWORD.EXE\" touched file \"C:\\Users\\c1muIHc\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\"","\"WINWORD.EXE\" touched file \"C:\\Users\\c1muIHc\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\"","\"WINWORD.EXE\" touched file \"C:\\Users\\c1muIHc\\AppData\\Local\\Microsoft\\Windows\\History\""],"description_v3":[{"type":"text","value":"\"WINWORD.EXE\" touched file \"C:\\Windows\\Globalization\\Sorting\\SortDefault.nls\""},{"type":"linebreak"},{"type":"text","value":"\"WINWORD.EXE\" touched file \"C:\\Windows\\Fonts\\StaticCache.dat\""},{"type":"linebreak"},{"type":"text","value":"\"WINWORD.EXE\" touched file \"C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\clr.dll\""},{"type":"linebreak"},{"type":"text","value":"\"WINWORD.EXE\" touched file \"C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\mscorwks.dll\""},{"type":"linebreak"},{"type":"text","value":"\"WINWORD.EXE\" touched file \"C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll\""},{"type":"linebreak"},{"type":"text","value":"\"WINWORD.EXE\" touched file \"C:\\Windows\\System32\\en-US\\user32.dll.mui\""},{"type":"linebreak"},{"type":"text","value":"\"WINWORD.EXE\" touched file \"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches\""},{"type":"linebreak"},{"type":"text","value":"\"WINWORD.EXE\" touched file \"C:\\Users\\%USERNAME%\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db\""},{"type":"linebreak"},{"type":"text","value":"\"WINWORD.EXE\" touched file \"C:\\Users\\%USERNAME%\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001b.db\""},{"type":"linebreak"},{"type":"text","value":"\"WINWORD.EXE\" touched file \"C:\\Windows\\System32\\rsaenh.dll\""},{"type":"linebreak"},{"type":"text","value":"\"WINWORD.EXE\" touched file \"C:\\Windows\\System32\\en-US\\KernelBase.dll.mui\""},{"type":"linebreak"},{"type":"text","value":"\"WINWORD.EXE\" touched file \"C:\\Windows\\System32\\msxml6r.dll\""},{"type":"linebreak"},{"type":"text","value":"\"WINWORD.EXE\" touched file \"C:\\Users\\%USERNAME%\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.Word\\~WRS{2294E6D2-4CC0-4B54-A094-199B8AB2B334}.tmp\""},{"type":"linebreak"},{"type":"text","value":"\"WINWORD.EXE\" touched file \"C:\\Windows\\System32\\en-US\\msctf.dll.mui\""},{"type":"linebreak"},{"type":"text","value":"\"WINWORD.EXE\" touched file \"C:\\Users\\%USERNAME%\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\counters.dat\""},{"type":"linebreak"},{"type":"text","value":"\"WINWORD.EXE\" touched file \"C:\\Users\\%USERNAME%\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\""},{"type":"linebreak"},{"type":"text","value":"\"WINWORD.EXE\" touched file \"C:\\Users\\%USERNAME%\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\""},{"type":"linebreak"},{"type":"text","value":"\"WINWORD.EXE\" touched file \"C:\\Users\\%USERNAME%\\AppData\\Local\\Microsoft\\Windows\\History\""}],"origin":"API Call","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Network Related","identifier":"string-3","type":2,"relevance":10,"name":"Found potential URL in binary/memory","description":"Pattern match: \"http://plet.dk/css/css.css\"\n Pattern match: \"https://www.cloudflare.com/5xx-error-landing?utm_source=error_footer\"\n Heuristic match: \"plet.dk\"\n Heuristic match: \"HEAD /css/css.css HTTP/1.1\nConnection: Keep-Alive\nCookie: __cfduid=d69421d043471616fed459c8d83ed5a7f1557839923\nUser-Agent: Microsoft Office Existence Discovery\nHost: plet.dk\"\n Heuristic match: \"OPTIONS /css HTTP/1.1\nConnection: Keep-Alive\nCookie: __cfduid=d69421d043471616fed459c8d83ed5a7f1557839923\nUser-Agent: Microsoft-WebDAV-MiniRedir/6.1.7601\ntranslate: f\nHost: plet.dk\"","description_v2":["Pattern match: \"http://plet.dk/css/css.css\"","Pattern match: \"https://www.cloudflare.com/5xx-error-landing?utm_source=error_footer\"","Heuristic match: \"plet.dk\"","Heuristic match: \"HEAD /css/css.css HTTP/1.1","Connection: Keep-Alive","Cookie: __cfduid=d69421d043471616fed459c8d83ed5a7f1557839923","User-Agent: Microsoft Office Existence Discovery","Host: plet.dk\"","Heuristic match: \"OPTIONS /css HTTP/1.1","Connection: Keep-Alive","Cookie: __cfduid=d69421d043471616fed459c8d83ed5a7f1557839923","User-Agent: Microsoft-WebDAV-MiniRedir/6.1.7601","translate: f","Host: plet.dk\""],"description_v3":[{"type":"text","value":"Pattern match: \"http://plet.dk/css/css.css\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"https://www.cloudflare.com/5xx-error-landing?utm_source=error_footer\""},{"type":"linebreak"},{"type":"text","value":"Heuristic match: \"plet.dk\""},{"type":"linebreak"},{"type":"text","value":"Heuristic match: \"HEAD /css/css.css HTTP/1.1"},{"type":"linebreak"},{"type":"text","value":"Connection: Keep-Alive"},{"type":"linebreak"},{"type":"text","value":"Cookie: __cfduid=d69421d043471616fed459c8d83ed5a7f1557839923"},{"type":"linebreak"},{"type":"text","value":"User-Agent: Microsoft Office Existence Discovery"},{"type":"linebreak"},{"type":"text","value":"Host: plet.dk\""},{"type":"linebreak"},{"type":"text","value":"Heuristic match: \"OPTIONS /css HTTP/1.1"},{"type":"linebreak"},{"type":"text","value":"Connection: Keep-Alive"},{"type":"linebreak"},{"type":"text","value":"Cookie: __cfduid=d69421d043471616fed459c8d83ed5a7f1557839923"},{"type":"linebreak"},{"type":"text","value":"User-Agent: Microsoft-WebDAV-MiniRedir/6.1.7601"},{"type":"linebreak"},{"type":"text","value":"translate: f"},{"type":"linebreak"},{"type":"text","value":"Host: plet.dk\""}],"origin":"File/Memory","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"System Security","identifier":"hooks-0","type":11,"relevance":10,"name":"Hooks API calls","description":"\"SysFreeString@OLEAUT32.DLL\" in \"WINWORD.EXE\"\n \"VariantChangeType@OLEAUT32.DLL\" in \"WINWORD.EXE\"\n \"SysAllocStringByteLen@OLEAUT32.DLL\" in \"WINWORD.EXE\"\n \"VariantClear@OLEAUT32.DLL\" in \"WINWORD.EXE\"\n \"OleLoadFromStream@OLE32.DLL\" in \"WINWORD.EXE\"","description_v2":["\"SysFreeString@OLEAUT32.DLL\" in \"WINWORD.EXE\"","\"VariantChangeType@OLEAUT32.DLL\" in \"WINWORD.EXE\"","\"SysAllocStringByteLen@OLEAUT32.DLL\" in \"WINWORD.EXE\"","\"VariantClear@OLEAUT32.DLL\" in \"WINWORD.EXE\"","\"OleLoadFromStream@OLE32.DLL\" in \"WINWORD.EXE\""],"description_v3":[{"type":"text","value":"\"SysFreeString@OLEAUT32.DLL\" in \"WINWORD.EXE\""},{"type":"linebreak"},{"type":"text","value":"\"VariantChangeType@OLEAUT32.DLL\" in \"WINWORD.EXE\""},{"type":"linebreak"},{"type":"text","value":"\"SysAllocStringByteLen@OLEAUT32.DLL\" in \"WINWORD.EXE\""},{"type":"linebreak"},{"type":"text","value":"\"VariantClear@OLEAUT32.DLL\" in \"WINWORD.EXE\""},{"type":"linebreak"},{"type":"text","value":"\"OleLoadFromStream@OLE32.DLL\" in \"WINWORD.EXE\""}],"origin":"Hook Detection","attck_id":"T1179","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1179","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Unusual Characteristics","identifier":"hooks-8","type":11,"relevance":10,"name":"Installs hooks/patches the running process","description":"$2b","description_v2":["\"WINWORD.EXE\" wrote bytes \"fbe3afad570ad501\" to virtual address \"0xE830D610\" (part of module \"MSO.DLL\")","\"WINWORD.EXE\" wrote bytes \"2d9aeaac570ad501\" to virtual address \"0xF2D07450\" (part of module \"MSCORWKS.DLL\")","\"WINWORD.EXE\" wrote bytes \"e933ef9700cccc\" to virtual address \"0xFD511210\" (\"SysFreeString@OLEAUT32.DLL\")","\"WINWORD.EXE\" wrote bytes \"e94b9f9700cccccccccc\" to virtual address \"0xFD516230\" (\"VariantChangeType@OLEAUT32.DLL\")","\"WINWORD.EXE\" wrote bytes \"f3231a8d570ad501\" to virtual address \"0xF283FD60\" (part of module \"MSCORWKS.DLL\")","\"WINWORD.EXE\" wrote bytes \"6b77f0ad570ad501\" to virtual address \"0xF3A40160\" (part of module \"MSPTLS.DLL\")","\"WINWORD.EXE\" wrote bytes \"b78256ad570ad501\" to virtual address \"0xE95B2350\" (part of module \"OART.DLL\")","\"WINWORD.EXE\" wrote bytes \"8398758e570ad501\" to virtual address \"0xF35425D8\" (part of module \"MSPROOF7.DLL\")","\"WINWORD.EXE\" wrote bytes \"70fb5ead570ad501\" to virtual address \"0x3F153258\" (part of module \"WINWORD.EXE\")","\"WINWORD.EXE\" wrote bytes \"48b8bc52efe6fe070000ffe0\" to virtual address \"0x76CF9020\" (\"SetUnhandledExceptionFilter@KERNEL32.DLL\")","\"WINWORD.EXE\" wrote bytes \"e9abc09700cc\" to virtual address \"0xFD514060\" (\"SysAllocStringByteLen@OLEAUT32.DLL\")","\"WINWORD.EXE\" wrote bytes \"e933f09700\" to virtual address \"0xFD511180\" (\"VariantClear@OLEAUT32.DLL\")","\"WINWORD.EXE\" wrote bytes \"177856ad570ad501\" to virtual address \"0xF413FA00\" (part of module \"GFX.DLL\")","\"WINWORD.EXE\" wrote bytes \"2ac0e6ad570ad501\" to virtual address \"0xF37DDE48\" (part of module \"RICHED20.DLL\")","\"WINWORD.EXE\" wrote bytes \"e913b00eff\" to virtual address \"0xFEDA50C0\" (\"OleLoadFromStream@OLE32.DLL\")","\"WINWORD.EXE\" wrote bytes \"a817abad570ad501\" to virtual address \"0xEB5B71C0\" (part of module \"WWLIB.DLL\")","\"WINWORD.EXE\" wrote bytes \"c21a068d570ad501\" to virtual address \"0xF28B2470\" (part of module \"MSCORWKS.DLL\")"],"description_v3":[{"type":"text","value":"\"WINWORD.EXE\" wrote bytes \"fbe3afad570ad501\" to virtual address \"0xE830D610\" (part of module \"MSO.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\"WINWORD.EXE\" wrote bytes \"2d9aeaac570ad501\" to virtual address \"0xF2D07450\" (part of module \"MSCORWKS.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\"WINWORD.EXE\" wrote bytes \"e933ef9700cccc\" to virtual address \"0xFD511210\" (\"SysFreeString@OLEAUT32.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\"WINWORD.EXE\" wrote bytes \"e94b9f9700cccccccccc\" to virtual address \"0xFD516230\" (\"VariantChangeType@OLEAUT32.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\"WINWORD.EXE\" wrote bytes \"f3231a8d570ad501\" to virtual address \"0xF283FD60\" (part of module \"MSCORWKS.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\"WINWORD.EXE\" wrote bytes \"6b77f0ad570ad501\" to virtual address \"0xF3A40160\" (part of module \"MSPTLS.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\"WINWORD.EXE\" wrote bytes \"b78256ad570ad501\" to virtual address \"0xE95B2350\" (part of module \"OART.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\"WINWORD.EXE\" wrote bytes \"8398758e570ad501\" to virtual address \"0xF35425D8\" (part of module \"MSPROOF7.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\"WINWORD.EXE\" wrote bytes \"70fb5ead570ad501\" to virtual address \"0x3F153258\" (part of module \"WINWORD.EXE\")"},{"type":"linebreak"},{"type":"text","value":"\"WINWORD.EXE\" wrote bytes \"48b8bc52efe6fe070000ffe0\" to virtual address \"0x76CF9020\" (\"SetUnhandledExceptionFilter@KERNEL32.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\"WINWORD.EXE\" wrote bytes \"e9abc09700cc\" to virtual address \"0xFD514060\" (\"SysAllocStringByteLen@OLEAUT32.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\"WINWORD.EXE\" wrote bytes \"e933f09700\" to virtual address \"0xFD511180\" (\"VariantClear@OLEAUT32.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\"WINWORD.EXE\" wrote bytes \"177856ad570ad501\" to virtual address \"0xF413FA00\" (part of module \"GFX.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\"WINWORD.EXE\" wrote bytes \"2ac0e6ad570ad501\" to virtual address \"0xF37DDE48\" (part of module \"RICHED20.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\"WINWORD.EXE\" wrote bytes \"e913b00eff\" to virtual address \"0xFEDA50C0\" (\"OleLoadFromStream@OLE32.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\"WINWORD.EXE\" wrote bytes \"a817abad570ad501\" to virtual address \"0xEB5B71C0\" (part of module \"WWLIB.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\"WINWORD.EXE\" wrote bytes \"c21a068d570ad501\" to virtual address \"0xF28B2470\" (part of module \"MSCORWKS.DLL\")"}],"origin":"Hook Detection","attck_id":"T1179","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1179","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"External Systems","identifier":"avtest-6","type":12,"relevance":10,"name":"Found an IP/URL artifact that was identified as malicious by at least one reputation engine","description":"9/68 reputation engines marked \"http://plet.dk/css/css.css\" as malicious (13% detection rate)\n 5/69 reputation engines marked \"http://plet.dk\" as malicious (7% detection rate)","description_v2":["9/68 reputation engines marked \"http://plet.dk/css/css.css\" as malicious (13% detection rate)","5/69 reputation engines marked \"http://plet.dk\" as malicious (7% detection rate)"],"description_v3":[{"type":"text","value":"9/68 reputation engines marked \"http://plet.dk/css/css.css\" as malicious (13% detection rate)"},{"type":"linebreak"},{"type":"text","value":"5/69 reputation engines marked \"http://plet.dk\" as malicious (7% detection rate)"}],"origin":"External System","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Network Related","identifier":"string-14","type":2,"relevance":3,"name":"Found potential IP address in binary/memory","description":"Heuristic match: \"\"","description_v2":["Heuristic match: \"\""],"description_v3":[{"type":"text","value":"Heuristic match: \"\""}],"origin":"File/Memory","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Network Related","identifier":"network-23","type":7,"relevance":5,"name":"Sends traffic on typical HTTP outbound port, but without HTTP header","description":"TCP traffic to 104.27.183.55 on port 80 is sent without HTTP header","description_v2":["TCP traffic to 104.27.183.55 on port 80 is sent without HTTP header"],"description_v3":[{"type":"text","value":"TCP traffic to 104.27.183.55 on port 80 is sent without HTTP header"}],"origin":"Network Traffic","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Network Related","identifier":"network-22","type":7,"relevance":10,"name":"Uses a User Agent typical for browsers, although no browser was ever launched","description":"Found user agent(s): Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; ms-office; MSOffice 14)","description_v2":["Found user agent(s): Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; ms-office; MSOffice 14)"],"description_v3":[{"type":"text","value":"Found user agent(s): Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; ms-office; MSOffice 14)"}],"origin":"Network Traffic","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Ransomware/Banking","identifier":"string-17","type":2,"relevance":8,"name":"Contains calling to enable macros (often the case for malicious documents)","description":"\"Enable Editing and then click Enable Content\" (Indicator: \"enable content\")","description_v2":["\"Enable Editing and then click Enable Content\" (Indicator: \"enable content\")"],"description_v3":[{"type":"text","value":"\"Enable Editing and then click Enable Content\" (Indicator: \"enable content\")"}],"origin":"File/Memory","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":2,"threat_level_human":"malicious","category":"External Systems","identifier":"avtest-7","type":12,"relevance":10,"name":"Found an IP/URL artifact that was identified as malicious by a significant amount of reputation engines","description":"9/68 reputation engines marked \"http://plet.dk/css/css.css\" as malicious (13% detection rate)\n 5/69 reputation engines marked \"http://plet.dk\" as malicious (7% detection rate)","description_v2":["9/68 reputation engines marked \"http://plet.dk/css/css.css\" as malicious (13% detection rate)","5/69 reputation engines marked \"http://plet.dk\" as malicious (7% detection rate)"],"description_v3":[{"type":"text","value":"9/68 reputation engines marked \"http://plet.dk/css/css.css\" as malicious (13% detection rate)"},{"type":"linebreak"},{"type":"text","value":"5/69 reputation engines marked \"http://plet.dk\" as malicious (7% detection rate)"}],"origin":"External System","attck_id":"T1120","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1120","stream_data":null},{"threat_level":2,"threat_level_human":"malicious","category":"External Systems","identifier":"avtest-0","type":12,"relevance":8,"name":"Sample was identified as malicious by at least one Antivirus engine","description":"1/37 Antivirus vendors marked sample as malicious (2% detection rate)\n 7/61 Antivirus vendors marked sample as malicious (11% detection rate)","description_v2":["1/37 Antivirus vendors marked sample as malicious (2% detection rate)","7/61 Antivirus vendors marked sample as malicious (11% detection rate)"],"description_v3":[{"type":"text","value":"1/37 Antivirus vendors marked sample as malicious (2% detection rate)"},{"type":"linebreak"},{"type":"text","value":"7/61 Antivirus vendors marked sample as malicious (11% detection rate)"}],"origin":"External System","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":2,"threat_level_human":"malicious","category":"General","identifier":"network-16","type":7,"relevance":10,"name":"GETs files from a webserver","description":"\"GET /css/css.css HTTP/1.1\nAccept: */*\nUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; ms-office; MSOffice 14)\nUA-CPU: AMD64\nAccept-Encoding: gzip, deflate\nHost: plet.dk\nConnection: Keep-Alive\nCookie: __cfduid=d69421d043471616fed459c8d83ed5a7f1557839923\"","description_v2":["\"GET /css/css.css HTTP/1.1","Accept: */*","User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; ms-office; MSOffice 14)","UA-CPU: AMD64","Accept-Encoding: gzip, deflate","Host: plet.dk","Connection: Keep-Alive","Cookie: __cfduid=d69421d043471616fed459c8d83ed5a7f1557839923\""],"description_v3":[{"type":"text","value":"\"GET /css/css.css HTTP/1.1"},{"type":"linebreak"},{"type":"text","value":"Accept: */*"},{"type":"linebreak"},{"type":"text","value":"User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; ms-office; MSOffice 14)"},{"type":"linebreak"},{"type":"text","value":"UA-CPU: AMD64"},{"type":"linebreak"},{"type":"text","value":"Accept-Encoding: gzip, deflate"},{"type":"linebreak"},{"type":"text","value":"Host: plet.dk"},{"type":"linebreak"},{"type":"text","value":"Connection: Keep-Alive"},{"type":"linebreak"},{"type":"text","value":"Cookie: __cfduid=d69421d043471616fed459c8d83ed5a7f1557839923\""}],"origin":"Network Traffic","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":2,"threat_level_human":"malicious","category":"Network Related","identifier":"network-15","type":7,"relevance":5,"name":"Found more than one unique User-Agent","description":"Found the following User-Agents: Microsoft Office Protocol Discovery\n Microsoft Office Existence Discovery\n Microsoft-WebDAV-MiniRedir/6.1.7601\n Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; ms-office; MSOffice 14)","description_v2":["Found the following User-Agents: Microsoft Office Protocol Discovery","Microsoft Office Existence Discovery","Microsoft-WebDAV-MiniRedir/6.1.7601","Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; ms-office; MSOffice 14)"],"description_v3":[{"type":"text","value":"Found the following User-Agents: Microsoft Office Protocol Discovery"},{"type":"linebreak"},{"type":"text","value":"Microsoft Office Existence Discovery"},{"type":"linebreak"},{"type":"text","value":"Microsoft-WebDAV-MiniRedir/6.1.7601"},{"type":"linebreak"},{"type":"text","value":"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; ms-office; MSOffice 14)"}],"origin":"Network Traffic","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":2,"threat_level_human":"malicious","category":"Network Related","identifier":"network-21","type":7,"relevance":10,"name":"Malicious artifacts seen in the context of a contacted host","description":"$2c","description_v2":["Found malicious artifacts related to \"104.27.183.55\": ...","","URL: http://plet.dk/css/ (AV positives: 8/70 scanned on 05/14/2019 01:42:20)","URL: http://phonedog.us/ (AV positives: 5/66 scanned on 05/09/2019 18:39:11)","URL: http://plet.dk/css/css.css (AV positives: 10/68 scanned on 05/06/2019 00:38:49)","URL: http://plet.dk/ (AV positives: 5/69 scanned on 05/04/2019 00:28:35)","URL: http://difinhappiness.faith/ (AV positives: 3/66 scanned on 05/03/2019 10:43:59)","File SHA256: 36be54812428b4967c3d25aafdc703567b42ad4536c089aefaef673ce36a958f (AV positives: 20/58 scanned on 04/23/2019 01:42:52)","File SHA256: 3c0c58d4b9eefea56e2f7be3f07cdb73e659b4db688bfbf9eacd96ba5ab2dfe5 (Date: 04/17/2019 08:47:36)","File SHA256: 680f4305cd96bf3221c223800f413bb942a2aa607229ac0d9c9b87056792fa9e (AV positives: 4/73 scanned on 04/07/2019 01:34:25)","File SHA256: 674f1141453539520926c502875f0e6cb32263c4e1890225eaf6545142bd55ef (AV positives: 4/70 scanned on 02/27/2019 01:43:31)","File SHA256: 8b77bb2808ae7e314f82e33a84765ea2776f66305165eb831f641c09ce54c621 (AV positives: 29/72 scanned on 01/05/2019 11:31:42)","File SHA256: 29123aefa4ad964b636e475d525a1093b76d5544c2d1707d8c6e3efb7756ac18 (AV positives: 20/71 scanned on 12/13/2018 01:49:07)","File SHA256: fbe4648b52f9124c93c832a1a3fb494ed65609d4cdcaf805d2d7b86a18e9794c (Date: 12/12/2018 11:44:25)"],"description_v3":[{"type":"text","value":"Found malicious artifacts related to \"104.27.183.55\": ..."},{"type":"linebreak"},{"type":"linebreak"},{"type":"text","value":"URL: http://plet.dk/css/ (AV positives: 8/70 scanned on 05/14/2019 01:42:20)"},{"type":"linebreak"},{"type":"text","value":"URL: http://phonedog.us/ (AV positives: 5/66 scanned on 05/09/2019 18:39:11)"},{"type":"linebreak"},{"type":"text","value":"URL: http://plet.dk/css/css.css (AV positives: 10/68 scanned on 05/06/2019 00:38:49)"},{"type":"linebreak"},{"type":"text","value":"URL: http://plet.dk/ (AV positives: 5/69 scanned on 05/04/2019 00:28:35)"},{"type":"linebreak"},{"type":"text","value":"URL: http://difinhappiness.faith/ (AV positives: 3/66 scanned on 05/03/2019 10:43:59)"},{"type":"linebreak"},{"type":"text","value":"File SHA256: 36be54812428b4967c3d25aafdc703567b42ad4536c089aefaef673ce36a958f (AV positives: 20/58 scanned on 04/23/2019 01:42:52)"},{"type":"linebreak"},{"type":"text","value":"File SHA256: 3c0c58d4b9eefea56e2f7be3f07cdb73e659b4db688bfbf9eacd96ba5ab2dfe5 (Date: 04/17/2019 08:47:36)"},{"type":"linebreak"},{"type":"text","value":"File SHA256: 680f4305cd96bf3221c223800f413bb942a2aa607229ac0d9c9b87056792fa9e (AV positives: 4/73 scanned on 04/07/2019 01:34:25)"},{"type":"linebreak"},{"type":"text","value":"File SHA256: 674f1141453539520926c502875f0e6cb32263c4e1890225eaf6545142bd55ef (AV positives: 4/70 scanned on 02/27/2019 01:43:31)"},{"type":"linebreak"},{"type":"text","value":"File SHA256: 8b77bb2808ae7e314f82e33a84765ea2776f66305165eb831f641c09ce54c621 (AV positives: 29/72 scanned on 01/05/2019 11:31:42)"},{"type":"linebreak"},{"type":"text","value":"File SHA256: 29123aefa4ad964b636e475d525a1093b76d5544c2d1707d8c6e3efb7756ac18 (AV positives: 20/71 scanned on 12/13/2018 01:49:07)"},{"type":"linebreak"},{"type":"text","value":"File SHA256: fbe4648b52f9124c93c832a1a3fb494ed65609d4cdcaf805d2d7b86a18e9794c (Date: 12/12/2018 11:44:25)"}],"origin":"Network Traffic","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":2,"threat_level_human":"malicious","category":"Unusual Characteristics","identifier":"summary-2","type":15,"relevance":10,"name":"Possible document exploit detected","description":"Document is downloading files although no macro is present","description_v2":["Document is downloading files although no macro is present"],"description_v3":[{"type":"text","value":"Document is downloading files although no macro is present"}],"origin":"Indicator Combinations","attck_id":"T1203","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1203","stream_data":null}],"detonation_parameters":{"action_script":"default","experimental_anti_evasion":true,"script_logging":false,"allow_sample_tampering":false,"network_mode":"default","custom_system_date_time":null,"custom_commandline":null,"document_password":null,"document_password_exists":false,"environment_variable":null,"dynamic_analysis_time":180,"comment":null},"falcon_mal_query_results":[],"falcon_intelligence_data":null,"search_tags":[],"execution_mode":"KERNELMODE","monitor_script":"default.au3","monitor_script_description":"Default analysis","windows_version_name":"Windows 7","windows_version_edition":"Professional","windows_version_service_pack":"Service Pack 1","windows_version_version":"6.1 (build 7601)","windows_version_bitness":"64","custom_date_time":null,"sandbox_version":"8.30","report_generator_version":null,"signature_engine_version":null,"mitre_version":null,"office_analysis":true,"office_version":"Office 2010 v14.0.4","incidents":[{"name":"Network Behavior","details":["Contacts 1 domain and 1 host"]}],"icon":"$2d","visualization":"$2e","classification":["51.0% (.DOCX) Word Microsoft Office Open XML Format document","38.0% (.ZIP) Open Packaging Conventions container","8.6% (.ZIP) ZIP compressed archive","2.1% (.BIN) PrintFox/Pagefox bitmap (var. P)"],"dns_requests":[{"compromised":true,"domain":"plet.dk","address":"104.27.183.55","ttl":299,"country":"United States","registrar_name":null,"registrar_organization":null,"registrar_name_servers":null,"registrar_creation_date":null,"who_is":[],"associated_sha256s":[{"sha256":"3c0c58d4b9eefea56e2f7be3f07cdb73e659b4db688bfbf9eacd96ba5ab2dfe5","verdict":"no verdict","positives":null,"total":null,"scan_date":"2019-04-17T08:47:36+00:00","reference":{"name":"AlienVault","url":"https://otx.alienvault.com/indicator/file/3c0c58d4b9eefea56e2f7be3f07cdb73e659b4db688bfbf9eacd96ba5ab2dfe5/"}}]}],"contacted_hosts":[{"compromised":true,"address":"104.27.183.55","port":80,"protocol":"TCP","associated_runtime":[{"name":"winword.exe","pid":"3752"},{"name":"svchost.exe","pid":"900"}],"country":"United States","associated_sha256s":[{"sha256":"3c0c58d4b9eefea56e2f7be3f07cdb73e659b4db688bfbf9eacd96ba5ab2dfe5","verdict":"no verdict","positives":null,"total":null,"scan_date":"2019-04-17T08:47:36+00:00","reference":{"name":"AlienVault","url":"https://otx.alienvault.com/indicator/file/3c0c58d4b9eefea56e2f7be3f07cdb73e659b4db688bfbf9eacd96ba5ab2dfe5/"}}]}],"contacted_countries":{"countries":["USA"],"coordinates":[{"origin":{"latitude":"36.8102","longitude":"-119.382"},"destination":{"latitude":"37.751","longitude":"-97.822"}}]},"port_infos":[{"port":80,"description":"Hypertext Transfer Protocol (HTTP)"}],"extracted_strings":{"all":[{"value":"JVRFTVAlXFdvcmQ4LjA=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JVRFTVAlXFdvcmQ4LjBcTVNGb3Jtcy5leGQ=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"LCwuX187Liws","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_5.png","compromised":null,"detection_total":null,"total":null},{"value":"Ly8oJGEkZ2RQM2dkUDNnZEYmIDxgfH5qaFAzVW1Ibkh1aFAzaFAzQipDSiRhSiRwaGhQMzVCKkNKJFxhSiRwaGhQM0IqQ0okYUokcGhoUDNCKkNKIGFKIHBoaFAzQipDSjhhSjhwaGhQM0IqQ0pIYUpIcGhoRmhG","type":"Ansi","source":"Dropped File","process":null,"filename":"~WRS_31186E5D-DB6A-4D36-A4C7-B062610D7218_.tmp","compromised":null,"detection_total":null,"total":null},{"value":"L2Nzcy9jc3MuY3Nz","type":"Ansi","source":"PCAP Processing","process":null,"filename":"PCAP","compromised":null,"detection_total":null,"total":null},{"value":"L24gIkM6XGU0NWY0YjY0MWJiNDhhYTExMGZmNjRhZDU5Y2JlYjU4LmRvY3gi","type":"Ansi","source":"Process Commandline","process":null,"filename":"WINWORD.EXE","compromised":null,"detection_total":null,"total":null},{"value":"MF9fMF9fXyxfXw==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_5.png","compromised":null,"detection_total":null,"total":null},{"value":"MTA1NTkzNzI4","type":"Ansi","source":"Dropped File","process":null,"filename":"MB518E2V.txt","compromised":null,"detection_total":null,"total":null},{"value":"MjM3ODYwMzU3NA==","type":"Ansi","source":"Dropped File","process":null,"filename":"MB518E2V.txt","compromised":null,"detection_total":null,"total":null},{"value":"MzA4MTI0NTc=","type":"Ansi","source":"Dropped File","process":null,"filename":"MB518E2V.txt","compromised":null,"detection_total":null,"total":null},{"value":"Nl9fX18wX19fX18=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_9.png","compromised":null,"detection_total":null,"total":null},{"value":"PCFET0NUWVBFIGh0bWw+","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"$2f","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":0,"total":197},{"value":"PC9kaXY+ICAvI2NmLWVycm9yLWRldGFpbHMgLS0+","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PC9kaXY+ICAvI2NmLXdyYXBwZXIgLS0+","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PC9kaXY+ICAvLmVycm9yLWZvb3RlciAtLT4=","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PC9kaXY+ICAvLmhlYWRlciAtLT4=","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PC9kaXY+ICAvLnNlY3Rpb24gLS0+","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PC9zY3JpcHQ+","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PGJ1dHRvbiB0eXBlPSJzdWJtaXQiIGNsYXNzPSJjZi1idG4gY2YtYnRuLWRhbmdlciIgZGF0YS10cmFuc2xhdGU9ImRpc21pc3NfYW5kX2VudGVyIj5EaXNtaXNzIHRoaXMgd2FybmluZyBhbmQgZW50ZXIgc2l0ZTwvYnV0dG9uPg==","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PGRpdiBjbGFzcz0iY2YtYWxlcnQgY2YtYWxlcnQtZXJyb3IgY2YtY29va2llLWVycm9yIiBpZD0iY29va2llLWFsZXJ0IiBkYXRhLXRyYW5zbGF0ZT0iZW5hYmxlX2Nvb2tpZXMiPlBsZWFzZSBlbmFibGUgY29va2llcy48L2Rpdj4=","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PGRpdiBjbGFzcz0iY2YtY29sdW1uIj4=","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PGRpdiBjbGFzcz0iY2YtY29sdW1ucyB0d28iPg==","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PGRpdiBjbGFzcz0iY2YtZXJyb3ItZm9vdGVyIGNmLXdyYXBwZXIiPg==","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PGRpdiBjbGFzcz0iY2Ytc2VjdGlvbiBjZi13cmFwcGVyIj4=","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PGRpdiBjbGFzcz0iY2Ytd3JhcHBlciBjZi1oZWFkZXIgY2YtZXJyb3Itb3ZlcnZpZXciPg==","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PGRpdiBpZD0iY2YtZXJyb3ItZGV0YWlscyIgY2xhc3M9ImNmLWVycm9yLWRldGFpbHMtd3JhcHBlciI+","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PGRpdiBpZD0iY2Ytd3JhcHBlciI+","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PGZvcm0gYWN0aW9uPSIvY2RuLWNnaS9waGlzaC1ieXBhc3MiIG1ldGhvZD0iR0VUIj4=","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PGgxIGNsYXNzPSJjZi10ZXh0LWVycm9yIj48aSBjbGFzcz0iY2YtaWNvbi1leGNsYW1hdGlvbi1zaWduIj48L2k+IFdhcm5pbmc6IFN1c3BlY3RlZCBQaGlzaGluZyBTaXRlIEFoZWFkITwvaDE+","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PGgyIGNsYXNzPSJjZi1zdWJoZWFkbGluZSI+VGhpcyBsaW5rIGhhcyBiZWVuIGZsYWdnZWQgYXMgcGhpc2hpbmcuIFdlIHN1Z2dlc3QgeW91IGF2b2lkIGl0LjwvaDI+","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PGgyPldoYXQgY2FuIEkgZG8/PC9oMj4=","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PGgyPldoYXQgaXMgcGhpc2hpbmc/PC9oMj4=","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PGlucHV0IHR5cGU9ImhpZGRlbiIgbmFtZT0iYXRvayIgdmFsdWU9IjIzNTdiNWE5MmY5ODU1NDNkZTJiYjY1YzEyZTQwZDQ4Ij4=","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PGlucHV0IHR5cGU9ImhpZGRlbiIgbmFtZT0idSIgdmFsdWU9Ii9jc3MvY3NzLmNzcyI+","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PGxpbmsgcmVsPSJzdHlsZXNoZWV0IiBpZD0iY2Zfc3R5bGVzLWNzcyIgaHJlZj0iL2Nkbi1jZ2kvc3R5bGVzL2NmLmVycm9ycy5jc3MiIHR5cGU9InRleHQvY3NzIiBtZWRpYT0ic2NyZWVuLHByb2plY3Rpb24iIC8+","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PG1ldGEgY2hhcnNldD0iVVRGLTgiIC8+","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PG1ldGEgaHR0cC1lcXVpdj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9VVRGLTgiIC8+","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PG1ldGEgaHR0cC1lcXVpdj0iWC1VQS1Db21wYXRpYmxlIiBjb250ZW50PSJJRT1FZGdlLGNocm9tZT0xIiAvPg==","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PG1ldGEgbmFtZT0icm9ib3RzIiBjb250ZW50PSJub2luZGV4LCBub2ZvbGxvdyIgLz4=","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PG1ldGEgbmFtZT0idmlld3BvcnQiIGNvbnRlbnQ9IndpZHRoPWRldmljZS13aWR0aCxpbml0aWFsLXNjYWxlPTEsbWF4aW11bS1zY2FsZT0xIiAvPg==","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PHA+PHN0cm9uZz5JZiB5b3UncmUgYSB2aXNpdG9yIG9mIHRoaXMgd2Vic2l0ZTwvc3Ryb25nPjxiciAvPg==","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PHA+PHN0cm9uZz5JZiB5b3UncmUgdGhlIG93bmVyIG9mIHRoaXMgd2Vic2l0ZTwvc3Ryb25nPjxiciAvPg==","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PHA+VGhpcyBsaW5rIGhhcyBiZWVuIGZsYWdnZWQgYXMgcGhpc2hpbmcuIFBoaXNoaW5nIGlzIGFuIGF0dGVtcHQgdG8gYWNxdWlyZSBwZXJzb25hbCBpbmZvcm1hdGlvbiBzdWNoIGFzIHBhc3N3b3JkcyBhbmQgY3JlZGl0IGNhcmQgZGV0YWlscyBieSBwcmV0ZW5kaW5nIHRvIGJlIGEgdHJ1c3R3b3J0aHkgc291cmNlLjwvcD4=","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PHNjcmlwdCB0eXBlPSJ0ZXh0L2phdmFzY3JpcHQiPg==","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PHNlY3Rpb24+PC9zZWN0aW9uPiAgc3BhY2VyIC0tPg==","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PHNwYW4gY2xhc3M9ImNmLWZvb3Rlci1pdGVtIj48c3Bhbj5QZXJmb3JtYW5jZSAmYW1wOyBzZWN1cml0eSBieTwvc3Bhbj4gPGEgaHJlZj0iaHR0cHM6Ly93d3cuY2xvdWRmbGFyZS5jb20vNXh4LWVycm9yLWxhbmRpbmc/dXRtX3NvdXJjZT1lcnJvcl9mb290ZXIiIGlkPSJicmFuZF9saW5rIiB0YXJnZXQ9Il9ibGFuayI+Q2xvdWRmbGFyZTwvYT48L3NwYW4+","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PHNwYW4gY2xhc3M9ImNmLWZvb3Rlci1pdGVtIj48c3Bhbj5Zb3VyIElQPC9zcGFuPjogNjQuMTI0LjEyLjE2Mjwvc3Bhbj4=","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PHNwYW4gY2xhc3M9ImNmLWZvb3Rlci1pdGVtIj5DbG91ZGZsYXJlIFJheSBJRDogPHN0cm9uZz40ZDZkMjkwYmQ5MTg2YzUwPC9zdHJvbmc+PC9zcGFuPg==","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PHNwYW4gY2xhc3M9ImNmLWZvb3Rlci1zZXBhcmF0b3IiPiZidWxsOzwvc3Bhbj4=","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PHN0eWxlIHR5cGU9InRleHQvY3NzIj5ib2R5e21hcmdpbjowO3BhZGRpbmc6MH08L3N0eWxlPg==","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PHRpdGxlPlN1c3BlY3RlZCBwaGlzaGluZyBzaXRlIHwgQ2xvdWRmbGFyZTwvdGl0bGU+","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"P19fX19fX2lfX19xMF9fX19fXw==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_5.png","compromised":null,"detection_total":null,"total":null},{"value":"W0YwMDAwMDAwMF1bVDAxRDUwQTU3OTQ2NUE2RTBdW08wMDAwMDAwMF0qQzpc","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"W0YwMDAwMDAwMF1bVDAxRDUwQTU3OTQ2ODE3RTBdW08wMDAwMDAwMF0qQzpcZTQ1ZjRiNjQxYmI0OGFhMTEwZmY2NGFkNTljYmViNTguZG9jeA==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"W2lmIGd0IElFIDhdPiA+IDxodG1sIGNsYXNzPSJuby1qcyIgbGFuZz0iZW4tVVMiPiAgPCFbZW5kaWZdLS0+","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"W2lmIGd0ZSBJRSAxMF0+ID48c2NyaXB0IHR5cGU9InRleHQvamF2YXNjcmlwdCIgc3JjPSIvY2RuLWNnaS9zY3JpcHRzL2NmLmNvbW1vbi5qcyI+PC9zY3JpcHQ+IDwhW2VuZGlmXS0tPg==","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"W2lmIGd0ZSBJRSAxMF0+ID48c2NyaXB0IHR5cGU9InRleHQvamF2YXNjcmlwdCIgc3JjPSIvY2RuLWNnaS9zY3JpcHRzL3plcHRvLm1pbi5qcyI+PC9zY3JpcHQ+IDwhW2VuZGlmXS0tPg==","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"W2lmIElFIDddPiAgICA8aHRtbCBjbGFzcz0ibm8tanMgaWU3IG9sZGllIiBsYW5nPSJlbi1VUyI+IDwhW2VuZGlmXS0tPg==","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"W2lmIElFIDhdPiAgICA8aHRtbCBjbGFzcz0ibm8tanMgaWU4IG9sZGllIiBsYW5nPSJlbi1VUyI+IDwhW2VuZGlmXS0tPg==","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"W2lmIGx0IElFIDddPiA8aHRtbCBjbGFzcz0ibm8tanMgaWU2IG9sZGllIiBsYW5nPSJlbi1VUyI+IDwhW2VuZGlmXS0tPg==","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"W2lmIGx0IElFIDldPjxsaW5rIHJlbD0ic3R5bGVzaGVldCIgaWQ9J2NmX3N0eWxlcy1pZS1jc3MnIGhyZWY9Ii9jZG4tY2dpL3N0eWxlcy9jZi5lcnJvcnMuaWUuY3NzIiB0eXBlPSJ0ZXh0L2NzcyIgbWVkaWE9InNjcmVlbixwcm9qZWN0aW9uIiAvPjwhW2VuZGlmXS0tPg==","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"XycwX19fX19fcV9f","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_5.png","compromised":null,"detection_total":null,"total":null},{"value":"XzBpX19fX19fXzAwXw==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_5.png","compromised":null,"detection_total":null,"total":null},{"value":"Xz9fX19fX18wXz9fX2xfX19fX19xX18/P19f","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_0.png","compromised":null,"detection_total":null,"total":null},{"value":"X18wX19fX19f","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_9.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX19fXzBf","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_9.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX19fX18wXw==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_5.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX19fX19fXz8=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_5.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX19fX19fX18=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_9.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX19fX19fcmU=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_9.png","compromised":null,"detection_total":null,"total":null},{"value":"X19jZmR1aWRkNjk0MjFkMDQzNDcxNjE2ZmVkNDU5YzhkODNlZDVhN2YxNTU3ODM5OTIzcGxldC5kay85MjE2MTA1NTkzNzI4MzA4MTI0NTcyMzc4NjAzNTc0MzA3MzkwMzEq","type":"Ansi","source":"Dropped File","process":null,"filename":"MB518E2V.txt","compromised":null,"detection_total":null,"total":null},{"value":"X2hsX0xZX0lf","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_0.png","compromised":null,"detection_total":null,"total":null},{"value":"X1VzZXJGb3Jt","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YFw/P1xWb2x1bWV7ZTQ3ZjRmNDMtZDg2My0xMWU3LTlkOGYtODA2ZTZmNmU2OTYzfQ==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YFw/P1xWb2x1bWV7ZTQ3ZjRmNDQtZDg2My0xMWU3LTlkOGYtODA2ZTZmNmU2OTYzfQ==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YFw/P1xWb2x1bWV7ZTQ3ZjRmNDctZDg2My0xMWU3LTlkOGYtODA2ZTZmNmU2OTYzfQ==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QWdlbnRBbmlt","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QXV0b0NvbmZpZ1VSTA==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QXV0b0RldGVjdA==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2FjaGVQcmVmaXg=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29iYWx0TWFqb3JWZXJzaW9u","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29iYWx0TWlub3JWZXJzaW9u","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tbWFuZEJ1dHRvbkV2ZW50cw==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29udHJvbEV2ZW50cw==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ZDY5NDIxZDA0MzQ3MTYxNmZlZDQ1OWM4ZDgzZWQ1YTdmMTU1NzgzOTkyMw==","type":"Ansi","source":"Dropped File","process":null,"filename":"MB518E2V.txt","compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlIEVkaXRpbmcgIGFuZCB0aGVuIGNsaWNrICBFbmFibGUgQ29udGVudA==","type":"Ansi","source":"Dropped File","process":null,"filename":"~WRS_31186E5D-DB6A-4D36-A4C7-B062610D7218_.tmp","compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlQkhP","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RXhwaXJhdGlvbg==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Rm9ybUV2ZW50cw==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"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","type":"Ansi","source":"PCAP Processing","process":null,"filename":"PCAP","compromised":null,"detection_total":null,"total":null},{"value":"SEVBRCAvY3NzL2Nzcy5jc3MgSFRUUC8xLjFDb25uZWN0aW9uOiBLZWVwLUFsaXZlQ29va2llOiBfX2NmZHVpZD1kNjk0MjFkMDQzNDcxNjE2ZmVkNDU5YzhkODNlZDVhN2YxNTU3ODM5OTIzVXNlci1BZ2VudDogTWljcm9zb2Z0IE9mZmljZSBFeGlzdGVuY2UgRGlzY292ZXJ5SG9zdDogcGxldC5kaw==","type":"Ansi","source":"PCAP Processing","process":null,"filename":"PCAP","compromised":null,"detection_total":null,"total":null},{"value":"SEVBRCAvY3NzL2Nzcy5jc3MgSFRUUC8xLjFVc2VyLUFnZW50OiBNaWNyb3NvZnQgT2ZmaWNlIEV4aXN0ZW5jZSBEaXNjb3ZlcnlIb3N0OiBwbGV0LmRrQ29udGVudC1MZW5ndGg6IDBDb25uZWN0aW9uOiBLZWVwLUFsaXZlQ29va2llOiBfX2NmZHVpZD1kNjk0MjFkMDQzNDcxNjE2ZmVkNDU5YzhkODNlZDVhN2YxNTU3ODM5OTIz","type":"Ansi","source":"PCAP Processing","process":null,"filename":"PCAP","compromised":null,"detection_total":null,"total":null},{"value":"aHR0cDovL3BsZXQuZGsvY3NzL2Nzcy5jc3M=","type":"Ansi","source":"Hybrid Analysis","process":null,"filename":"3c0c58d4b9eefea56e2f7be3f07cdb73e659b4db688bfbf9eacd96ba5ab2dfe5.docx.bin","compromised":true,"detection_total":14,"total":137},{"value":"SUNvbW1hbmRCdXR0b24=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SURhdGFBdXRvV3JhcHBlcg==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SUxhYmVsQ29udHJvbA==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW1hZ2VFdmVudHM=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SU1kY0NoZWNrQm94","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SU1kY0NvbWJv","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SU1kY0xpc3Q=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SU1kY09wdGlvbkJ1dHRvbg==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SU1kY1RleHQ=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SU1kY1RvZ2dsZUJ1dHRvbg==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SU11bHRpUGFnZQ==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW4gb3JkZXIgdG8gZGlzcGxheSB0aGlzIGRvY3VtZW50IHlvdSB3aWxsIGhhdmUgdG8gY2xpY2s=","type":"Ansi","source":"Dropped File","process":null,"filename":"~WRS_31186E5D-DB6A-4D36-A4C7-B062610D7218_.tmp","compromised":null,"detection_total":null,"total":null},{"value":"SW50cmFuZXROYW1l","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SU9wdGlvbkZyYW1l","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SVJldHVybkJvb2xlYW4=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SVJldHVybkVmZmVjdA==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SVJldHVybkludGVnZXI=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SVJldHVyblNpbmdsZQ==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SVJldHVyblN0cmluZw==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SVNjcm9sbGJhcg==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SVNwaW5idXR0b24=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SVRhYlN0cmlw","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SVdIVE1MQ2hlY2tib3g=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SVdIVE1MSGlkZGVu","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SVdIVE1MSW1hZ2U=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SVdIVE1MT3B0aW9u","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SVdIVE1MUGFzc3dvcmQ=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SVdIVE1MUmVzZXQ=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SVdIVE1MU2VsZWN0","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SVdIVE1MU3VibWl0QnV0dG9u","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SVdIVE1MVGV4dA==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SVdIVE1MVGV4dEFyZWE=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TGFiZWxDb250cm9sRXZlbnRz","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4IERpc3BsYXk=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWRjQ2hlY2tCb3hFdmVudHM=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWRjQ29tYm9FdmVudHM=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWRjTGlzdEV2ZW50cw==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWRjT3B0aW9uQnV0dG9uRXZlbnRz","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWRjVGV4dEV2ZW50cw==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWRjVG9nZ2xlQnV0dG9uRXZlbnRz","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWljcm81b2Zf","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_5.png","compromised":null,"detection_total":null,"total":null},{"value":"TWljcm9fMGZ0","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_9.png","compromised":null,"detection_total":null,"total":null},{"value":"TWljcm9zb2Z0IEZvcm1zIDIuMCBPYmplY3QgTGlicmFyeQ==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWljcm9zb2Z0IE9mZmljZSBFeGlzdGVuY2UgRGlzY292ZXJ5","type":"Ansi","source":"PCAP Processing","process":null,"filename":"PCAP","compromised":null,"detection_total":null,"total":null},{"value":"TWljcm9zb2Z0IE9mZmljZSBQcm90b2NvbCBEaXNjb3Zlcnk=","type":"Ansi","source":"PCAP Processing","process":null,"filename":"PCAP","compromised":null,"detection_total":null,"total":null},{"value":"TWljcm9zb2Z0LVdlYkRBVi1NaW5pUmVkaXIvNi4xLjc2MDE=","type":"Ansi","source":"PCAP Processing","process":null,"filename":"PCAP","compromised":null,"detection_total":null,"total":null},{"value":"TW96aWxsYS80LjAgKGNvbXBhdGlibGU7IE1TSUUgNy4wOyBXaW5kb3dzIE5UIDYuMTsgV2luNjQ7IHg2NDsgVHJpZGVudC83LjA7IC5ORVQgQ0xSIDIuMC41MDcyNzsgU0xDQzI7IC5ORVQgQ0xSIDMuNS4zMDcyOTsgLk5FVCBDTFIgMy4wLjMwNzI5OyBNZWRpYSBDZW50ZXIgUEMgNi4wOyAuTkVUNC4wQzsgLk5FVDQuMEU7IG1zLW9mZmljZTsgTVNPZmZpY2UgMTQp","type":"Ansi","source":"PCAP Processing","process":null,"filename":"PCAP","compromised":null,"detection_total":null,"total":null},{"value":"TXNEYXZFeHQ=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TVNPQkFMTE9PTg==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TXNvQ29tbWFuZEJhclBvcHVw","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TXNvSGVscDEw","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bXNwaW1fd25kMzI=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TXVsdGlQYWdlRXZlbnRz","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TmV0VUlDdHJsTm90aWZ5U2luaw==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TmV0d29yayAgMw==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TmV4dFVwZGF0ZQ==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"T2ZmaWNlVG9vbHRpcA==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"T3B0aW9uRnJhbWVFdmVudHM=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"T1BUSU9OUyAvY3NzIEhUVFAvMS4xQ29ubmVjdGlvbjogS2VlcC1BbGl2ZUNvb2tpZTogX19jZmR1aWQ9ZDY5NDIxZDA0MzQ3MTYxNmZlZDQ1OWM4ZDgzZWQ1YTdmMTU1NzgzOTkyM1VzZXItQWdlbnQ6IE1pY3Jvc29mdC1XZWJEQVYtTWluaVJlZGlyLzYuMS43NjAxdHJhbnNsYXRlOiBmSG9zdDogcGxldC5kaw==","type":"Ansi","source":"PCAP Processing","process":null,"filename":"PCAP","compromised":null,"detection_total":null,"total":null},{"value":"T1BUSU9OUyAvY3NzLyBIVFRQLzEuMVVzZXItQWdlbnQ6IE1pY3Jvc29mdCBPZmZpY2UgUHJvdG9jb2wgRGlzY292ZXJ5SG9zdDogcGxldC5ka0NvbnRlbnQtTGVuZ3RoOiAwQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ==","type":"Ansi","source":"PCAP Processing","process":null,"filename":"PCAP","compromised":null,"detection_total":null,"total":null},{"value":"UGxlYXNlIGxvZyBpbiB0byBjbG91ZGZsYXJlLmNvbSB0byByZXZpZXcgeW91ciBmbGFnZ2VkIHdlYnNpdGUuIElmIHlvdSBoYXZlIHF1ZXN0aW9ucyBhYm91dCB3aHkgdGhpcyB3YXMgZmxhZ2dlZCBhcyBwaGlzaGluZyBwbGVhc2UgY29udGFjdCB0aGUgVHJ1c3QgJmFtcDsgU2FmZXR5IHRlYW0gZm9yIG1vcmUgaW5mb3JtYXRpb24uPC9wPg==","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"cGxldC5kaw==","type":"Ansi","source":"PCAP Processing","process":null,"filename":"PCAP","compromised":null,"detection_total":null,"total":null},{"value":"cGxldC5kay8=","type":"Ansi","source":"Dropped File","process":null,"filename":"MB518E2V.txt","compromised":null,"detection_total":null,"total":null},{"value":"UHJvZHVjdEZpbGVz","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJveHlCeXBhc3M=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJveHlFbmFibGU=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJveHlPdmVycmlkZQ==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJveHlTZXJ2ZXI=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UkVMaXN0Ym94MjBX","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmV2aWV3VG9rZW4=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"cmw5aHRzcmVzZV9lZF8=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_5.png","compromised":null,"detection_total":null,"total":null},{"value":"U2F2ZWRMZWdhY3lTZXR0aW5ncw==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2Nyb2xsYmFyRXZlbnRz","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2hlbGxfVHJheVduZA==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3BlbGxpbmdBbmRHcmFtbWFyRmlsZXNfMTAzMw==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3BlbGxpbmdBbmRHcmFtbWFyRmlsZXNfMTAzNg==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3BlbGxpbmdBbmRHcmFtbWFyRmlsZXNfMzA4Mg==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3BpbmJ1dHRvbkV2ZW50cw==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VGFiU3RyaXBFdmVudHM=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VGhlIHdlYnNpdGUgb3duZXIgaGFzIGJlZW4gbm90aWZpZWQgYW5kIGlzIGluIHRoZSBwcm9jZXNzIG9mIHJlc29sdmluZyB0aGUgaXNzdWUuIEZvciBub3csIGl0IGlzIHJlY29tbWVuZGVkIHRoYXQgeW91IGRvIG5vdCBjb250aW51ZSB0byB0aGUgbGluayB0aGF0IGhhcyBiZWVuIGZsYWdnZWQuPC9wPg==","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"VGhpcyBEb2N1bWVudCBoYXMgYmVlbiBtYWRlIGluIGFuIG9sZCB2ZXJzaW9uIG9mIE1pY3Jvc29mdCBXb3JkLg==","type":"Ansi","source":"Dropped File","process":null,"filename":"~WRS_31186E5D-DB6A-4D36-A4C7-B062610D7218_.tmp","compromised":null,"detection_total":null,"total":null},{"value":"VU5DQXNJbnRyYW5ldA==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VkJBRmlsZXM=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2ViY2xpZW50","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V0hUTUxDb250cm9sRXZlbnRz","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V0hUTUxDb250cm9sRXZlbnRzMQ==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V0hUTUxDb250cm9sRXZlbnRzMTA=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V0hUTUxDb250cm9sRXZlbnRzMg==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V0hUTUxDb250cm9sRXZlbnRzMw==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V0hUTUxDb250cm9sRXZlbnRzNA==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V0hUTUxDb250cm9sRXZlbnRzNQ==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V0hUTUxDb250cm9sRXZlbnRzNg==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V0hUTUxDb250cm9sRXZlbnRzNw==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V0hUTUxDb250cm9sRXZlbnRzOQ==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"d2luZG93Ll9jZl90cmFuc2xhdGlvbiA9IHt9Ow==","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"V09SREZpbGVz","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V3BhZERlY2lzaW9u","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V3BhZERlY2lzaW9uUmVhc29u","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V3BhZERlY2lzaW9uVGltZQ==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V3BhZERldGVjdGVkVXJs","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V3BhZE5ldHdvcmtOYW1l","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"d3BjX19yMF9jb2Vsc29zbHJudl85X2NyY3NjX2NjcnBjcmF0bGNuXw==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_5.png","compromised":null,"detection_total":null,"total":null},{"value":"ezBENDUyRUUxLUUwOEYtMTAxQS04NTJFLTAyNjA4QzREMEJCNH0=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ezE1RjMzQzk3LTJDNjAtNDlCMS1BNjM4LUMwQTQ0RjlCNDE4NX0=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null}],"interesting":[{"value":"JVRFTVAlXFdvcmQ4LjBcTVNGb3Jtcy5leGQ=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Ly8oJGEkZ2RQM2dkUDNnZEYmIDxgfH5qaFAzVW1Ibkh1aFAzaFAzQipDSiRhSiRwaGhQMzVCKkNKJFxhSiRwaGhQM0IqQ0okYUokcGhoUDNCKkNKIGFKIHBoaFAzQipDSjhhSjhwaGhQM0IqQ0pIYUpIcGhoRmhG","type":"Ansi","source":"Dropped File","process":null,"filename":"~WRS_31186E5D-DB6A-4D36-A4C7-B062610D7218_.tmp","compromised":null,"detection_total":null,"total":null},{"value":"L24gIkM6XGU0NWY0YjY0MWJiNDhhYTExMGZmNjRhZDU5Y2JlYjU4LmRvY3gi","type":"Ansi","source":"Process Commandline","process":null,"filename":"WINWORD.EXE","compromised":null,"detection_total":null,"total":null},{"value":"$30","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":0,"total":197},{"value":"PC9kaXY+ICAvI2NmLWVycm9yLWRldGFpbHMgLS0+","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PC9kaXY+ICAvI2NmLXdyYXBwZXIgLS0+","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PC9kaXY+ICAvLmVycm9yLWZvb3RlciAtLT4=","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PC9kaXY+ICAvLmhlYWRlciAtLT4=","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PC9kaXY+ICAvLnNlY3Rpb24gLS0+","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PC9zY3JpcHQ+","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PGJ1dHRvbiB0eXBlPSJzdWJtaXQiIGNsYXNzPSJjZi1idG4gY2YtYnRuLWRhbmdlciIgZGF0YS10cmFuc2xhdGU9ImRpc21pc3NfYW5kX2VudGVyIj5EaXNtaXNzIHRoaXMgd2FybmluZyBhbmQgZW50ZXIgc2l0ZTwvYnV0dG9uPg==","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PGRpdiBjbGFzcz0iY2YtYWxlcnQgY2YtYWxlcnQtZXJyb3IgY2YtY29va2llLWVycm9yIiBpZD0iY29va2llLWFsZXJ0IiBkYXRhLXRyYW5zbGF0ZT0iZW5hYmxlX2Nvb2tpZXMiPlBsZWFzZSBlbmFibGUgY29va2llcy48L2Rpdj4=","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PGRpdiBjbGFzcz0iY2YtZXJyb3ItZm9vdGVyIGNmLXdyYXBwZXIiPg==","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PGRpdiBjbGFzcz0iY2Ytd3JhcHBlciBjZi1oZWFkZXIgY2YtZXJyb3Itb3ZlcnZpZXciPg==","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PGRpdiBpZD0iY2YtZXJyb3ItZGV0YWlscyIgY2xhc3M9ImNmLWVycm9yLWRldGFpbHMtd3JhcHBlciI+","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PGZvcm0gYWN0aW9uPSIvY2RuLWNnaS9waGlzaC1ieXBhc3MiIG1ldGhvZD0iR0VUIj4=","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PGgxIGNsYXNzPSJjZi10ZXh0LWVycm9yIj48aSBjbGFzcz0iY2YtaWNvbi1leGNsYW1hdGlvbi1zaWduIj48L2k+IFdhcm5pbmc6IFN1c3BlY3RlZCBQaGlzaGluZyBTaXRlIEFoZWFkITwvaDE+","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PGgyIGNsYXNzPSJjZi1zdWJoZWFkbGluZSI+VGhpcyBsaW5rIGhhcyBiZWVuIGZsYWdnZWQgYXMgcGhpc2hpbmcuIFdlIHN1Z2dlc3QgeW91IGF2b2lkIGl0LjwvaDI+","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PGxpbmsgcmVsPSJzdHlsZXNoZWV0IiBpZD0iY2Zfc3R5bGVzLWNzcyIgaHJlZj0iL2Nkbi1jZ2kvc3R5bGVzL2NmLmVycm9ycy5jc3MiIHR5cGU9InRleHQvY3NzIiBtZWRpYT0ic2NyZWVuLHByb2plY3Rpb24iIC8+","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PG1ldGEgaHR0cC1lcXVpdj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9VVRGLTgiIC8+","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PG1ldGEgaHR0cC1lcXVpdj0iWC1VQS1Db21wYXRpYmxlIiBjb250ZW50PSJJRT1FZGdlLGNocm9tZT0xIiAvPg==","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PG1ldGEgbmFtZT0idmlld3BvcnQiIGNvbnRlbnQ9IndpZHRoPWRldmljZS13aWR0aCxpbml0aWFsLXNjYWxlPTEsbWF4aW11bS1zY2FsZT0xIiAvPg==","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PHA+VGhpcyBsaW5rIGhhcyBiZWVuIGZsYWdnZWQgYXMgcGhpc2hpbmcuIFBoaXNoaW5nIGlzIGFuIGF0dGVtcHQgdG8gYWNxdWlyZSBwZXJzb25hbCBpbmZvcm1hdGlvbiBzdWNoIGFzIHBhc3N3b3JkcyBhbmQgY3JlZGl0IGNhcmQgZGV0YWlscyBieSBwcmV0ZW5kaW5nIHRvIGJlIGEgdHJ1c3R3b3J0aHkgc291cmNlLjwvcD4=","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PHNjcmlwdCB0eXBlPSJ0ZXh0L2phdmFzY3JpcHQiPg==","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PHNwYW4gY2xhc3M9ImNmLWZvb3Rlci1pdGVtIj48c3Bhbj5QZXJmb3JtYW5jZSAmYW1wOyBzZWN1cml0eSBieTwvc3Bhbj4gPGEgaHJlZj0iaHR0cHM6Ly93d3cuY2xvdWRmbGFyZS5jb20vNXh4LWVycm9yLWxhbmRpbmc/dXRtX3NvdXJjZT1lcnJvcl9mb290ZXIiIGlkPSJicmFuZF9saW5rIiB0YXJnZXQ9Il9ibGFuayI+Q2xvdWRmbGFyZTwvYT48L3NwYW4+","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PHNwYW4gY2xhc3M9ImNmLWZvb3Rlci1pdGVtIj48c3Bhbj5Zb3VyIElQPC9zcGFuPjogNjQuMTI0LjEyLjE2Mjwvc3Bhbj4=","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PHNwYW4gY2xhc3M9ImNmLWZvb3Rlci1pdGVtIj5DbG91ZGZsYXJlIFJheSBJRDogPHN0cm9uZz40ZDZkMjkwYmQ5MTg2YzUwPC9zdHJvbmc+PC9zcGFuPg==","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PHN0eWxlIHR5cGU9InRleHQvY3NzIj5ib2R5e21hcmdpbjowO3BhZGRpbmc6MH08L3N0eWxlPg==","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"W0YwMDAwMDAwMF1bVDAxRDUwQTU3OTQ2NUE2RTBdW08wMDAwMDAwMF0qQzpc","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"W0YwMDAwMDAwMF1bVDAxRDUwQTU3OTQ2ODE3RTBdW08wMDAwMDAwMF0qQzpcZTQ1ZjRiNjQxYmI0OGFhMTEwZmY2NGFkNTljYmViNTguZG9jeA==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"W2lmIGd0IElFIDhdPiA+IDxodG1sIGNsYXNzPSJuby1qcyIgbGFuZz0iZW4tVVMiPiAgPCFbZW5kaWZdLS0+","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"W2lmIGd0ZSBJRSAxMF0+ID48c2NyaXB0IHR5cGU9InRleHQvamF2YXNjcmlwdCIgc3JjPSIvY2RuLWNnaS9zY3JpcHRzL2NmLmNvbW1vbi5qcyI+PC9zY3JpcHQ+IDwhW2VuZGlmXS0tPg==","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"W2lmIGd0ZSBJRSAxMF0+ID48c2NyaXB0IHR5cGU9InRleHQvamF2YXNjcmlwdCIgc3JjPSIvY2RuLWNnaS9zY3JpcHRzL3plcHRvLm1pbi5qcyI+PC9zY3JpcHQ+IDwhW2VuZGlmXS0tPg==","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"W2lmIElFIDddPiAgICA8aHRtbCBjbGFzcz0ibm8tanMgaWU3IG9sZGllIiBsYW5nPSJlbi1VUyI+IDwhW2VuZGlmXS0tPg==","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"W2lmIElFIDhdPiAgICA8aHRtbCBjbGFzcz0ibm8tanMgaWU4IG9sZGllIiBsYW5nPSJlbi1VUyI+IDwhW2VuZGlmXS0tPg==","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"W2lmIGx0IElFIDddPiA8aHRtbCBjbGFzcz0ibm8tanMgaWU2IG9sZGllIiBsYW5nPSJlbi1VUyI+IDwhW2VuZGlmXS0tPg==","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"W2lmIGx0IElFIDldPjxsaW5rIHJlbD0ic3R5bGVzaGVldCIgaWQ9J2NmX3N0eWxlcy1pZS1jc3MnIGhyZWY9Ii9jZG4tY2dpL3N0eWxlcy9jZi5lcnJvcnMuaWUuY3NzIiB0eXBlPSJ0ZXh0L2NzcyIgbWVkaWE9InNjcmVlbixwcm9qZWN0aW9uIiAvPjwhW2VuZGlmXS0tPg==","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"YFw/P1xWb2x1bWV7ZTQ3ZjRmNDMtZDg2My0xMWU3LTlkOGYtODA2ZTZmNmU2OTYzfQ==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YFw/P1xWb2x1bWV7ZTQ3ZjRmNDQtZDg2My0xMWU3LTlkOGYtODA2ZTZmNmU2OTYzfQ==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YFw/P1xWb2x1bWV7ZTQ3ZjRmNDctZDg2My0xMWU3LTlkOGYtODA2ZTZmNmU2OTYzfQ==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29iYWx0TWFqb3JWZXJzaW9u","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29iYWx0TWlub3JWZXJzaW9u","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tbWFuZEJ1dHRvbkV2ZW50cw==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlIEVkaXRpbmcgIGFuZCB0aGVuIGNsaWNrICBFbmFibGUgQ29udGVudA==","type":"Ansi","source":"Dropped File","process":null,"filename":"~WRS_31186E5D-DB6A-4D36-A4C7-B062610D7218_.tmp","compromised":null,"detection_total":null,"total":null},{"value":"R0VUIC9jc3MvY3NzLmNzcyBIVFRQLzEuMUFjY2VwdDogKi8qVXNlci1BZ2VudDogTW96aWxsYS80LjAgKGNvbXBhdGlibGU7IE1TSUUgNy4wOyBXaW5kb3dzIE5UIDYuMTsgV2luNjQ7IHg2NDsgVHJpZGVudC83LjA7IC5ORVQgQ0xSIDIuMC41MDcyNzsgU0xDQzI7IC5ORVQgQ0xSIDMuNS4zMDcyOTsgLk5FVCBDTFIgMy4wLjMwNzI5OyBNZWRpYSBDZW50ZXIgUEMgNi4wOyAuTkVUNC4wQzsgLk5FVDQuMEU7IG1zLW9mZmljZTsgTVNPZmZpY2UgMTQpVUEtQ1BVOiBBTUQ2NEFjY2VwdC1FbmNvZGluZzogZ3ppcCwgZGVmbGF0ZUhvc3Q6IHBsZXQuZGtDb25uZWN0aW9uOiBLZWVwLUFsaXZlQ29va2llOiBfX2NmZHVpZD1kNjk0MjFkMDQzNDcxNjE2ZmVkNDU5YzhkODNlZDVhN2YxNTU3ODM5OTIz","type":"Ansi","source":"PCAP Processing","process":null,"filename":"PCAP","compromised":null,"detection_total":null,"total":null},{"value":"SEVBRCAvY3NzL2Nzcy5jc3MgSFRUUC8xLjFDb25uZWN0aW9uOiBLZWVwLUFsaXZlQ29va2llOiBfX2NmZHVpZD1kNjk0MjFkMDQzNDcxNjE2ZmVkNDU5YzhkODNlZDVhN2YxNTU3ODM5OTIzVXNlci1BZ2VudDogTWljcm9zb2Z0IE9mZmljZSBFeGlzdGVuY2UgRGlzY292ZXJ5SG9zdDogcGxldC5kaw==","type":"Ansi","source":"PCAP Processing","process":null,"filename":"PCAP","compromised":null,"detection_total":null,"total":null},{"value":"SEVBRCAvY3NzL2Nzcy5jc3MgSFRUUC8xLjFVc2VyLUFnZW50OiBNaWNyb3NvZnQgT2ZmaWNlIEV4aXN0ZW5jZSBEaXNjb3ZlcnlIb3N0OiBwbGV0LmRrQ29udGVudC1MZW5ndGg6IDBDb25uZWN0aW9uOiBLZWVwLUFsaXZlQ29va2llOiBfX2NmZHVpZD1kNjk0MjFkMDQzNDcxNjE2ZmVkNDU5YzhkODNlZDVhN2YxNTU3ODM5OTIz","type":"Ansi","source":"PCAP Processing","process":null,"filename":"PCAP","compromised":null,"detection_total":null,"total":null},{"value":"aHR0cDovL3BsZXQuZGsvY3NzL2Nzcy5jc3M=","type":"Ansi","source":"Hybrid Analysis","process":null,"filename":"3c0c58d4b9eefea56e2f7be3f07cdb73e659b4db688bfbf9eacd96ba5ab2dfe5.docx.bin","compromised":true,"detection_total":14,"total":137},{"value":"SUNvbW1hbmRCdXR0b24=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SU1kY0NvbWJv","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SU9wdGlvbkZyYW1l","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SVNjcm9sbGJhcg==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWRjQ29tYm9FdmVudHM=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWljcm9zb2Z0LVdlYkRBVi1NaW5pUmVkaXIvNi4xLjc2MDE=","type":"Ansi","source":"PCAP Processing","process":null,"filename":"PCAP","compromised":null,"detection_total":null,"total":null},{"value":"TW96aWxsYS80LjAgKGNvbXBhdGlibGU7IE1TSUUgNy4wOyBXaW5kb3dzIE5UIDYuMTsgV2luNjQ7IHg2NDsgVHJpZGVudC83LjA7IC5ORVQgQ0xSIDIuMC41MDcyNzsgU0xDQzI7IC5ORVQgQ0xSIDMuNS4zMDcyOTsgLk5FVCBDTFIgMy4wLjMwNzI5OyBNZWRpYSBDZW50ZXIgUEMgNi4wOyAuTkVUNC4wQzsgLk5FVDQuMEU7IG1zLW9mZmljZTsgTVNPZmZpY2UgMTQp","type":"Ansi","source":"PCAP Processing","process":null,"filename":"PCAP","compromised":null,"detection_total":null,"total":null},{"value":"TXNvQ29tbWFuZEJhclBvcHVw","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bXNwaW1fd25kMzI=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"T3B0aW9uRnJhbWVFdmVudHM=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"T1BUSU9OUyAvY3NzIEhUVFAvMS4xQ29ubmVjdGlvbjogS2VlcC1BbGl2ZUNvb2tpZTogX19jZmR1aWQ9ZDY5NDIxZDA0MzQ3MTYxNmZlZDQ1OWM4ZDgzZWQ1YTdmMTU1NzgzOTkyM1VzZXItQWdlbnQ6IE1pY3Jvc29mdC1XZWJEQVYtTWluaVJlZGlyLzYuMS43NjAxdHJhbnNsYXRlOiBmSG9zdDogcGxldC5kaw==","type":"Ansi","source":"PCAP Processing","process":null,"filename":"PCAP","compromised":null,"detection_total":null,"total":null},{"value":"T1BUSU9OUyAvY3NzLyBIVFRQLzEuMVVzZXItQWdlbnQ6IE1pY3Jvc29mdCBPZmZpY2UgUHJvdG9jb2wgRGlzY292ZXJ5SG9zdDogcGxldC5ka0NvbnRlbnQtTGVuZ3RoOiAwQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ==","type":"Ansi","source":"PCAP Processing","process":null,"filename":"PCAP","compromised":null,"detection_total":null,"total":null},{"value":"UGxlYXNlIGxvZyBpbiB0byBjbG91ZGZsYXJlLmNvbSB0byByZXZpZXcgeW91ciBmbGFnZ2VkIHdlYnNpdGUuIElmIHlvdSBoYXZlIHF1ZXN0aW9ucyBhYm91dCB3aHkgdGhpcyB3YXMgZmxhZ2dlZCBhcyBwaGlzaGluZyBwbGVhc2UgY29udGFjdCB0aGUgVHJ1c3QgJmFtcDsgU2FmZXR5IHRlYW0gZm9yIG1vcmUgaW5mb3JtYXRpb24uPC9wPg==","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"cGxldC5kaw==","type":"Ansi","source":"PCAP Processing","process":null,"filename":"PCAP","compromised":null,"detection_total":null,"total":null},{"value":"U2Nyb2xsYmFyRXZlbnRz","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2hlbGxfVHJheVduZA==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VGhlIHdlYnNpdGUgb3duZXIgaGFzIGJlZW4gbm90aWZpZWQgYW5kIGlzIGluIHRoZSBwcm9jZXNzIG9mIHJlc29sdmluZyB0aGUgaXNzdWUuIEZvciBub3csIGl0IGlzIHJlY29tbWVuZGVkIHRoYXQgeW91IGRvIG5vdCBjb250aW51ZSB0byB0aGUgbGluayB0aGF0IGhhcyBiZWVuIGZsYWdnZWQuPC9wPg==","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"VGhpcyBEb2N1bWVudCBoYXMgYmVlbiBtYWRlIGluIGFuIG9sZCB2ZXJzaW9uIG9mIE1pY3Jvc29mdCBXb3JkLg==","type":"Ansi","source":"Dropped File","process":null,"filename":"~WRS_31186E5D-DB6A-4D36-A4C7-B062610D7218_.tmp","compromised":null,"detection_total":null,"total":null},{"value":"ezBENDUyRUUxLUUwOEYtMTAxQS04NTJFLTAyNjA4QzREMEJCNH0=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ezE1RjMzQzk3LTJDNjAtNDlCMS1BNjM4LUMwQTQ0RjlCNDE4NX0=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null}],"targets":[{"name":"WINWORD.EXE:3752","strings":[{"value":"JVRFTVAlXFdvcmQ4LjA=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JVRFTVAlXFdvcmQ4LjBcTVNGb3Jtcy5leGQ=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"W0YwMDAwMDAwMF1bVDAxRDUwQTU3OTQ2NUE2RTBdW08wMDAwMDAwMF0qQzpc","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"W0YwMDAwMDAwMF1bVDAxRDUwQTU3OTQ2ODE3RTBdW08wMDAwMDAwMF0qQzpcZTQ1ZjRiNjQxYmI0OGFhMTEwZmY2NGFkNTljYmViNTguZG9jeA==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"X1VzZXJGb3Jt","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YFw/P1xWb2x1bWV7ZTQ3ZjRmNDMtZDg2My0xMWU3LTlkOGYtODA2ZTZmNmU2OTYzfQ==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YFw/P1xWb2x1bWV7ZTQ3ZjRmNDQtZDg2My0xMWU3LTlkOGYtODA2ZTZmNmU2OTYzfQ==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YFw/P1xWb2x1bWV7ZTQ3ZjRmNDctZDg2My0xMWU3LTlkOGYtODA2ZTZmNmU2OTYzfQ==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QWdlbnRBbmlt","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QXV0b0NvbmZpZ1VSTA==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QXV0b0RldGVjdA==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2FjaGVQcmVmaXg=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29iYWx0TWFqb3JWZXJzaW9u","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29iYWx0TWlub3JWZXJzaW9u","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tbWFuZEJ1dHRvbkV2ZW50cw==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29udHJvbEV2ZW50cw==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlQkhP","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RXhwaXJhdGlvbg==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Rm9ybUV2ZW50cw==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SUNvbW1hbmRCdXR0b24=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SURhdGFBdXRvV3JhcHBlcg==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SUxhYmVsQ29udHJvbA==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW1hZ2VFdmVudHM=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SU1kY0NoZWNrQm94","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SU1kY0NvbWJv","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SU1kY0xpc3Q=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SU1kY09wdGlvbkJ1dHRvbg==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SU1kY1RleHQ=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SU1kY1RvZ2dsZUJ1dHRvbg==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SU11bHRpUGFnZQ==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW50cmFuZXROYW1l","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SU9wdGlvbkZyYW1l","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SVJldHVybkJvb2xlYW4=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SVJldHVybkVmZmVjdA==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SVJldHVybkludGVnZXI=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SVJldHVyblNpbmdsZQ==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SVJldHVyblN0cmluZw==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SVNjcm9sbGJhcg==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SVNwaW5idXR0b24=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SVRhYlN0cmlw","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SVdIVE1MQ2hlY2tib3g=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SVdIVE1MSGlkZGVu","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SVdIVE1MSW1hZ2U=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SVdIVE1MT3B0aW9u","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SVdIVE1MUGFzc3dvcmQ=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SVdIVE1MUmVzZXQ=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SVdIVE1MU2VsZWN0","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SVdIVE1MU3VibWl0QnV0dG9u","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SVdIVE1MVGV4dA==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SVdIVE1MVGV4dEFyZWE=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TGFiZWxDb250cm9sRXZlbnRz","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4IERpc3BsYXk=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWRjQ2hlY2tCb3hFdmVudHM=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWRjQ29tYm9FdmVudHM=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWRjTGlzdEV2ZW50cw==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWRjT3B0aW9uQnV0dG9uRXZlbnRz","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWRjVGV4dEV2ZW50cw==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWRjVG9nZ2xlQnV0dG9uRXZlbnRz","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWljcm9zb2Z0IEZvcm1zIDIuMCBPYmplY3QgTGlicmFyeQ==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TXNEYXZFeHQ=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TVNPQkFMTE9PTg==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TXNvQ29tbWFuZEJhclBvcHVw","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TXNvSGVscDEw","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bXNwaW1fd25kMzI=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TXVsdGlQYWdlRXZlbnRz","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TmV0VUlDdHJsTm90aWZ5U2luaw==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TmV0d29yayAgMw==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TmV4dFVwZGF0ZQ==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"T2ZmaWNlVG9vbHRpcA==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"T3B0aW9uRnJhbWVFdmVudHM=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJvZHVjdEZpbGVz","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJveHlCeXBhc3M=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJveHlFbmFibGU=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJveHlPdmVycmlkZQ==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJveHlTZXJ2ZXI=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UkVMaXN0Ym94MjBX","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmV2aWV3VG9rZW4=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2F2ZWRMZWdhY3lTZXR0aW5ncw==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2Nyb2xsYmFyRXZlbnRz","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2hlbGxfVHJheVduZA==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3BlbGxpbmdBbmRHcmFtbWFyRmlsZXNfMTAzMw==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3BlbGxpbmdBbmRHcmFtbWFyRmlsZXNfMTAzNg==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3BlbGxpbmdBbmRHcmFtbWFyRmlsZXNfMzA4Mg==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3BpbmJ1dHRvbkV2ZW50cw==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VGFiU3RyaXBFdmVudHM=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VU5DQXNJbnRyYW5ldA==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VkJBRmlsZXM=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2ViY2xpZW50","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V0hUTUxDb250cm9sRXZlbnRz","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V0hUTUxDb250cm9sRXZlbnRzMQ==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V0hUTUxDb250cm9sRXZlbnRzMTA=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V0hUTUxDb250cm9sRXZlbnRzMg==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V0hUTUxDb250cm9sRXZlbnRzMw==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V0hUTUxDb250cm9sRXZlbnRzNA==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V0hUTUxDb250cm9sRXZlbnRzNQ==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V0hUTUxDb250cm9sRXZlbnRzNg==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V0hUTUxDb250cm9sRXZlbnRzNw==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V0hUTUxDb250cm9sRXZlbnRzOQ==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V09SREZpbGVz","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V3BhZERlY2lzaW9u","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V3BhZERlY2lzaW9uUmVhc29u","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V3BhZERlY2lzaW9uVGltZQ==","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V3BhZERldGVjdGVkVXJs","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V3BhZE5ldHdvcmtOYW1l","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ezBENDUyRUUxLUUwOEYtMTAxQS04NTJFLTAyNjA4QzREMEJCNH0=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ezE1RjMzQzk3LTJDNjAtNDlCMS1BNjM4LUMwQTQ0RjlCNDE4NX0=","type":"Unicode","source":"Runtime Data","process":"WINWORD.EXE","filename":null,"compromised":null,"detection_total":null,"total":null}]},{"name":"screen_5.png","strings":[{"value":"LCwuX187Liws","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_5.png","compromised":null,"detection_total":null,"total":null},{"value":"MF9fMF9fXyxfXw==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_5.png","compromised":null,"detection_total":null,"total":null},{"value":"P19fX19fX2lfX19xMF9fX19fXw==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_5.png","compromised":null,"detection_total":null,"total":null},{"value":"XycwX19fX19fcV9f","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_5.png","compromised":null,"detection_total":null,"total":null},{"value":"XzBpX19fX19fXzAwXw==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_5.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX19fX18wXw==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_5.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX19fX19fXz8=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_5.png","compromised":null,"detection_total":null,"total":null},{"value":"TWljcm81b2Zf","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_5.png","compromised":null,"detection_total":null,"total":null},{"value":"cmw5aHRzcmVzZV9lZF8=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_5.png","compromised":null,"detection_total":null,"total":null},{"value":"d3BjX19yMF9jb2Vsc29zbHJudl85X2NyY3NjX2NjcnBjcmF0bGNuXw==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_5.png","compromised":null,"detection_total":null,"total":null}]},{"name":"~WRS_31186E5D-DB6A-4D36-A4C7-B062610D7218_.tmp","strings":[{"value":"Ly8oJGEkZ2RQM2dkUDNnZEYmIDxgfH5qaFAzVW1Ibkh1aFAzaFAzQipDSiRhSiRwaGhQMzVCKkNKJFxhSiRwaGhQM0IqQ0okYUokcGhoUDNCKkNKIGFKIHBoaFAzQipDSjhhSjhwaGhQM0IqQ0pIYUpIcGhoRmhG","type":"Ansi","source":"Dropped File","process":null,"filename":"~WRS_31186E5D-DB6A-4D36-A4C7-B062610D7218_.tmp","compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlIEVkaXRpbmcgIGFuZCB0aGVuIGNsaWNrICBFbmFibGUgQ29udGVudA==","type":"Ansi","source":"Dropped File","process":null,"filename":"~WRS_31186E5D-DB6A-4D36-A4C7-B062610D7218_.tmp","compromised":null,"detection_total":null,"total":null},{"value":"SW4gb3JkZXIgdG8gZGlzcGxheSB0aGlzIGRvY3VtZW50IHlvdSB3aWxsIGhhdmUgdG8gY2xpY2s=","type":"Ansi","source":"Dropped File","process":null,"filename":"~WRS_31186E5D-DB6A-4D36-A4C7-B062610D7218_.tmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhpcyBEb2N1bWVudCBoYXMgYmVlbiBtYWRlIGluIGFuIG9sZCB2ZXJzaW9uIG9mIE1pY3Jvc29mdCBXb3JkLg==","type":"Ansi","source":"Dropped File","process":null,"filename":"~WRS_31186E5D-DB6A-4D36-A4C7-B062610D7218_.tmp","compromised":null,"detection_total":null,"total":null}]},{"name":"PCAP","strings":[{"value":"L2Nzcy9jc3MuY3Nz","type":"Ansi","source":"PCAP Processing","process":null,"filename":"PCAP","compromised":null,"detection_total":null,"total":null},{"value":"R0VUIC9jc3MvY3NzLmNzcyBIVFRQLzEuMUFjY2VwdDogKi8qVXNlci1BZ2VudDogTW96aWxsYS80LjAgKGNvbXBhdGlibGU7IE1TSUUgNy4wOyBXaW5kb3dzIE5UIDYuMTsgV2luNjQ7IHg2NDsgVHJpZGVudC83LjA7IC5ORVQgQ0xSIDIuMC41MDcyNzsgU0xDQzI7IC5ORVQgQ0xSIDMuNS4zMDcyOTsgLk5FVCBDTFIgMy4wLjMwNzI5OyBNZWRpYSBDZW50ZXIgUEMgNi4wOyAuTkVUNC4wQzsgLk5FVDQuMEU7IG1zLW9mZmljZTsgTVNPZmZpY2UgMTQpVUEtQ1BVOiBBTUQ2NEFjY2VwdC1FbmNvZGluZzogZ3ppcCwgZGVmbGF0ZUhvc3Q6IHBsZXQuZGtDb25uZWN0aW9uOiBLZWVwLUFsaXZlQ29va2llOiBfX2NmZHVpZD1kNjk0MjFkMDQzNDcxNjE2ZmVkNDU5YzhkODNlZDVhN2YxNTU3ODM5OTIz","type":"Ansi","source":"PCAP Processing","process":null,"filename":"PCAP","compromised":null,"detection_total":null,"total":null},{"value":"SEVBRCAvY3NzL2Nzcy5jc3MgSFRUUC8xLjFDb25uZWN0aW9uOiBLZWVwLUFsaXZlQ29va2llOiBfX2NmZHVpZD1kNjk0MjFkMDQzNDcxNjE2ZmVkNDU5YzhkODNlZDVhN2YxNTU3ODM5OTIzVXNlci1BZ2VudDogTWljcm9zb2Z0IE9mZmljZSBFeGlzdGVuY2UgRGlzY292ZXJ5SG9zdDogcGxldC5kaw==","type":"Ansi","source":"PCAP Processing","process":null,"filename":"PCAP","compromised":null,"detection_total":null,"total":null},{"value":"SEVBRCAvY3NzL2Nzcy5jc3MgSFRUUC8xLjFVc2VyLUFnZW50OiBNaWNyb3NvZnQgT2ZmaWNlIEV4aXN0ZW5jZSBEaXNjb3ZlcnlIb3N0OiBwbGV0LmRrQ29udGVudC1MZW5ndGg6IDBDb25uZWN0aW9uOiBLZWVwLUFsaXZlQ29va2llOiBfX2NmZHVpZD1kNjk0MjFkMDQzNDcxNjE2ZmVkNDU5YzhkODNlZDVhN2YxNTU3ODM5OTIz","type":"Ansi","source":"PCAP Processing","process":null,"filename":"PCAP","compromised":null,"detection_total":null,"total":null},{"value":"TWljcm9zb2Z0IE9mZmljZSBFeGlzdGVuY2UgRGlzY292ZXJ5","type":"Ansi","source":"PCAP Processing","process":null,"filename":"PCAP","compromised":null,"detection_total":null,"total":null},{"value":"TWljcm9zb2Z0IE9mZmljZSBQcm90b2NvbCBEaXNjb3Zlcnk=","type":"Ansi","source":"PCAP Processing","process":null,"filename":"PCAP","compromised":null,"detection_total":null,"total":null},{"value":"TWljcm9zb2Z0LVdlYkRBVi1NaW5pUmVkaXIvNi4xLjc2MDE=","type":"Ansi","source":"PCAP Processing","process":null,"filename":"PCAP","compromised":null,"detection_total":null,"total":null},{"value":"TW96aWxsYS80LjAgKGNvbXBhdGlibGU7IE1TSUUgNy4wOyBXaW5kb3dzIE5UIDYuMTsgV2luNjQ7IHg2NDsgVHJpZGVudC83LjA7IC5ORVQgQ0xSIDIuMC41MDcyNzsgU0xDQzI7IC5ORVQgQ0xSIDMuNS4zMDcyOTsgLk5FVCBDTFIgMy4wLjMwNzI5OyBNZWRpYSBDZW50ZXIgUEMgNi4wOyAuTkVUNC4wQzsgLk5FVDQuMEU7IG1zLW9mZmljZTsgTVNPZmZpY2UgMTQp","type":"Ansi","source":"PCAP Processing","process":null,"filename":"PCAP","compromised":null,"detection_total":null,"total":null},{"value":"T1BUSU9OUyAvY3NzIEhUVFAvMS4xQ29ubmVjdGlvbjogS2VlcC1BbGl2ZUNvb2tpZTogX19jZmR1aWQ9ZDY5NDIxZDA0MzQ3MTYxNmZlZDQ1OWM4ZDgzZWQ1YTdmMTU1NzgzOTkyM1VzZXItQWdlbnQ6IE1pY3Jvc29mdC1XZWJEQVYtTWluaVJlZGlyLzYuMS43NjAxdHJhbnNsYXRlOiBmSG9zdDogcGxldC5kaw==","type":"Ansi","source":"PCAP Processing","process":null,"filename":"PCAP","compromised":null,"detection_total":null,"total":null},{"value":"T1BUSU9OUyAvY3NzLyBIVFRQLzEuMVVzZXItQWdlbnQ6IE1pY3Jvc29mdCBPZmZpY2UgUHJvdG9jb2wgRGlzY292ZXJ5SG9zdDogcGxldC5ka0NvbnRlbnQtTGVuZ3RoOiAwQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ==","type":"Ansi","source":"PCAP Processing","process":null,"filename":"PCAP","compromised":null,"detection_total":null,"total":null},{"value":"cGxldC5kaw==","type":"Ansi","source":"PCAP Processing","process":null,"filename":"PCAP","compromised":null,"detection_total":null,"total":null}]},{"name":"WINWORD.EXE","strings":[{"value":"L24gIkM6XGU0NWY0YjY0MWJiNDhhYTExMGZmNjRhZDU5Y2JlYjU4LmRvY3gi","type":"Ansi","source":"Process Commandline","process":null,"filename":"WINWORD.EXE","compromised":null,"detection_total":null,"total":null}]},{"name":"MB518E2V.txt","strings":[{"value":"MTA1NTkzNzI4","type":"Ansi","source":"Dropped File","process":null,"filename":"MB518E2V.txt","compromised":null,"detection_total":null,"total":null},{"value":"MjM3ODYwMzU3NA==","type":"Ansi","source":"Dropped File","process":null,"filename":"MB518E2V.txt","compromised":null,"detection_total":null,"total":null},{"value":"MzA4MTI0NTc=","type":"Ansi","source":"Dropped File","process":null,"filename":"MB518E2V.txt","compromised":null,"detection_total":null,"total":null},{"value":"X19jZmR1aWRkNjk0MjFkMDQzNDcxNjE2ZmVkNDU5YzhkODNlZDVhN2YxNTU3ODM5OTIzcGxldC5kay85MjE2MTA1NTkzNzI4MzA4MTI0NTcyMzc4NjAzNTc0MzA3MzkwMzEq","type":"Ansi","source":"Dropped File","process":null,"filename":"MB518E2V.txt","compromised":null,"detection_total":null,"total":null},{"value":"ZDY5NDIxZDA0MzQ3MTYxNmZlZDQ1OWM4ZDgzZWQ1YTdmMTU1NzgzOTkyMw==","type":"Ansi","source":"Dropped File","process":null,"filename":"MB518E2V.txt","compromised":null,"detection_total":null,"total":null},{"value":"cGxldC5kay8=","type":"Ansi","source":"Dropped File","process":null,"filename":"MB518E2V.txt","compromised":null,"detection_total":null,"total":null}]},{"name":"screen_9.png","strings":[{"value":"Nl9fX18wX19fX18=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_9.png","compromised":null,"detection_total":null,"total":null},{"value":"X18wX19fX19f","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_9.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX19fXzBf","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_9.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX19fX19fX18=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_9.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX19fX19fcmU=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_9.png","compromised":null,"detection_total":null,"total":null},{"value":"TWljcm9fMGZ0","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_9.png","compromised":null,"detection_total":null,"total":null}]},{"name":"css_1_.htm","strings":[{"value":"PCFET0NUWVBFIGh0bWw+","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"$31","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":0,"total":197},{"value":"PC9kaXY+ICAvI2NmLWVycm9yLWRldGFpbHMgLS0+","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PC9kaXY+ICAvI2NmLXdyYXBwZXIgLS0+","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PC9kaXY+ICAvLmVycm9yLWZvb3RlciAtLT4=","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PC9kaXY+ICAvLmhlYWRlciAtLT4=","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PC9kaXY+ICAvLnNlY3Rpb24gLS0+","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PC9zY3JpcHQ+","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PGJ1dHRvbiB0eXBlPSJzdWJtaXQiIGNsYXNzPSJjZi1idG4gY2YtYnRuLWRhbmdlciIgZGF0YS10cmFuc2xhdGU9ImRpc21pc3NfYW5kX2VudGVyIj5EaXNtaXNzIHRoaXMgd2FybmluZyBhbmQgZW50ZXIgc2l0ZTwvYnV0dG9uPg==","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PGRpdiBjbGFzcz0iY2YtYWxlcnQgY2YtYWxlcnQtZXJyb3IgY2YtY29va2llLWVycm9yIiBpZD0iY29va2llLWFsZXJ0IiBkYXRhLXRyYW5zbGF0ZT0iZW5hYmxlX2Nvb2tpZXMiPlBsZWFzZSBlbmFibGUgY29va2llcy48L2Rpdj4=","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PGRpdiBjbGFzcz0iY2YtY29sdW1uIj4=","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PGRpdiBjbGFzcz0iY2YtY29sdW1ucyB0d28iPg==","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PGRpdiBjbGFzcz0iY2YtZXJyb3ItZm9vdGVyIGNmLXdyYXBwZXIiPg==","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PGRpdiBjbGFzcz0iY2Ytc2VjdGlvbiBjZi13cmFwcGVyIj4=","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PGRpdiBjbGFzcz0iY2Ytd3JhcHBlciBjZi1oZWFkZXIgY2YtZXJyb3Itb3ZlcnZpZXciPg==","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PGRpdiBpZD0iY2YtZXJyb3ItZGV0YWlscyIgY2xhc3M9ImNmLWVycm9yLWRldGFpbHMtd3JhcHBlciI+","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PGRpdiBpZD0iY2Ytd3JhcHBlciI+","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PGZvcm0gYWN0aW9uPSIvY2RuLWNnaS9waGlzaC1ieXBhc3MiIG1ldGhvZD0iR0VUIj4=","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PGgxIGNsYXNzPSJjZi10ZXh0LWVycm9yIj48aSBjbGFzcz0iY2YtaWNvbi1leGNsYW1hdGlvbi1zaWduIj48L2k+IFdhcm5pbmc6IFN1c3BlY3RlZCBQaGlzaGluZyBTaXRlIEFoZWFkITwvaDE+","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PGgyIGNsYXNzPSJjZi1zdWJoZWFkbGluZSI+VGhpcyBsaW5rIGhhcyBiZWVuIGZsYWdnZWQgYXMgcGhpc2hpbmcuIFdlIHN1Z2dlc3QgeW91IGF2b2lkIGl0LjwvaDI+","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PGgyPldoYXQgY2FuIEkgZG8/PC9oMj4=","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PGgyPldoYXQgaXMgcGhpc2hpbmc/PC9oMj4=","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PGlucHV0IHR5cGU9ImhpZGRlbiIgbmFtZT0iYXRvayIgdmFsdWU9IjIzNTdiNWE5MmY5ODU1NDNkZTJiYjY1YzEyZTQwZDQ4Ij4=","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PGlucHV0IHR5cGU9ImhpZGRlbiIgbmFtZT0idSIgdmFsdWU9Ii9jc3MvY3NzLmNzcyI+","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PGxpbmsgcmVsPSJzdHlsZXNoZWV0IiBpZD0iY2Zfc3R5bGVzLWNzcyIgaHJlZj0iL2Nkbi1jZ2kvc3R5bGVzL2NmLmVycm9ycy5jc3MiIHR5cGU9InRleHQvY3NzIiBtZWRpYT0ic2NyZWVuLHByb2plY3Rpb24iIC8+","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PG1ldGEgY2hhcnNldD0iVVRGLTgiIC8+","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PG1ldGEgaHR0cC1lcXVpdj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9VVRGLTgiIC8+","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PG1ldGEgaHR0cC1lcXVpdj0iWC1VQS1Db21wYXRpYmxlIiBjb250ZW50PSJJRT1FZGdlLGNocm9tZT0xIiAvPg==","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PG1ldGEgbmFtZT0icm9ib3RzIiBjb250ZW50PSJub2luZGV4LCBub2ZvbGxvdyIgLz4=","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PG1ldGEgbmFtZT0idmlld3BvcnQiIGNvbnRlbnQ9IndpZHRoPWRldmljZS13aWR0aCxpbml0aWFsLXNjYWxlPTEsbWF4aW11bS1zY2FsZT0xIiAvPg==","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PHA+PHN0cm9uZz5JZiB5b3UncmUgYSB2aXNpdG9yIG9mIHRoaXMgd2Vic2l0ZTwvc3Ryb25nPjxiciAvPg==","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PHA+PHN0cm9uZz5JZiB5b3UncmUgdGhlIG93bmVyIG9mIHRoaXMgd2Vic2l0ZTwvc3Ryb25nPjxiciAvPg==","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PHA+VGhpcyBsaW5rIGhhcyBiZWVuIGZsYWdnZWQgYXMgcGhpc2hpbmcuIFBoaXNoaW5nIGlzIGFuIGF0dGVtcHQgdG8gYWNxdWlyZSBwZXJzb25hbCBpbmZvcm1hdGlvbiBzdWNoIGFzIHBhc3N3b3JkcyBhbmQgY3JlZGl0IGNhcmQgZGV0YWlscyBieSBwcmV0ZW5kaW5nIHRvIGJlIGEgdHJ1c3R3b3J0aHkgc291cmNlLjwvcD4=","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PHNjcmlwdCB0eXBlPSJ0ZXh0L2phdmFzY3JpcHQiPg==","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PHNlY3Rpb24+PC9zZWN0aW9uPiAgc3BhY2VyIC0tPg==","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PHNwYW4gY2xhc3M9ImNmLWZvb3Rlci1pdGVtIj48c3Bhbj5QZXJmb3JtYW5jZSAmYW1wOyBzZWN1cml0eSBieTwvc3Bhbj4gPGEgaHJlZj0iaHR0cHM6Ly93d3cuY2xvdWRmbGFyZS5jb20vNXh4LWVycm9yLWxhbmRpbmc/dXRtX3NvdXJjZT1lcnJvcl9mb290ZXIiIGlkPSJicmFuZF9saW5rIiB0YXJnZXQ9Il9ibGFuayI+Q2xvdWRmbGFyZTwvYT48L3NwYW4+","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PHNwYW4gY2xhc3M9ImNmLWZvb3Rlci1pdGVtIj48c3Bhbj5Zb3VyIElQPC9zcGFuPjogNjQuMTI0LjEyLjE2Mjwvc3Bhbj4=","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PHNwYW4gY2xhc3M9ImNmLWZvb3Rlci1pdGVtIj5DbG91ZGZsYXJlIFJheSBJRDogPHN0cm9uZz40ZDZkMjkwYmQ5MTg2YzUwPC9zdHJvbmc+PC9zcGFuPg==","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PHNwYW4gY2xhc3M9ImNmLWZvb3Rlci1zZXBhcmF0b3IiPiZidWxsOzwvc3Bhbj4=","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PHN0eWxlIHR5cGU9InRleHQvY3NzIj5ib2R5e21hcmdpbjowO3BhZGRpbmc6MH08L3N0eWxlPg==","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"PHRpdGxlPlN1c3BlY3RlZCBwaGlzaGluZyBzaXRlIHwgQ2xvdWRmbGFyZTwvdGl0bGU+","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"W2lmIGd0IElFIDhdPiA+IDxodG1sIGNsYXNzPSJuby1qcyIgbGFuZz0iZW4tVVMiPiAgPCFbZW5kaWZdLS0+","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"W2lmIGd0ZSBJRSAxMF0+ID48c2NyaXB0IHR5cGU9InRleHQvamF2YXNjcmlwdCIgc3JjPSIvY2RuLWNnaS9zY3JpcHRzL2NmLmNvbW1vbi5qcyI+PC9zY3JpcHQ+IDwhW2VuZGlmXS0tPg==","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"W2lmIGd0ZSBJRSAxMF0+ID48c2NyaXB0IHR5cGU9InRleHQvamF2YXNjcmlwdCIgc3JjPSIvY2RuLWNnaS9zY3JpcHRzL3plcHRvLm1pbi5qcyI+PC9zY3JpcHQ+IDwhW2VuZGlmXS0tPg==","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"W2lmIElFIDddPiAgICA8aHRtbCBjbGFzcz0ibm8tanMgaWU3IG9sZGllIiBsYW5nPSJlbi1VUyI+IDwhW2VuZGlmXS0tPg==","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"W2lmIElFIDhdPiAgICA8aHRtbCBjbGFzcz0ibm8tanMgaWU4IG9sZGllIiBsYW5nPSJlbi1VUyI+IDwhW2VuZGlmXS0tPg==","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"W2lmIGx0IElFIDddPiA8aHRtbCBjbGFzcz0ibm8tanMgaWU2IG9sZGllIiBsYW5nPSJlbi1VUyI+IDwhW2VuZGlmXS0tPg==","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"W2lmIGx0IElFIDldPjxsaW5rIHJlbD0ic3R5bGVzaGVldCIgaWQ9J2NmX3N0eWxlcy1pZS1jc3MnIGhyZWY9Ii9jZG4tY2dpL3N0eWxlcy9jZi5lcnJvcnMuaWUuY3NzIiB0eXBlPSJ0ZXh0L2NzcyIgbWVkaWE9InNjcmVlbixwcm9qZWN0aW9uIiAvPjwhW2VuZGlmXS0tPg==","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"UGxlYXNlIGxvZyBpbiB0byBjbG91ZGZsYXJlLmNvbSB0byByZXZpZXcgeW91ciBmbGFnZ2VkIHdlYnNpdGUuIElmIHlvdSBoYXZlIHF1ZXN0aW9ucyBhYm91dCB3aHkgdGhpcyB3YXMgZmxhZ2dlZCBhcyBwaGlzaGluZyBwbGVhc2UgY29udGFjdCB0aGUgVHJ1c3QgJmFtcDsgU2FmZXR5IHRlYW0gZm9yIG1vcmUgaW5mb3JtYXRpb24uPC9wPg==","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIHdlYnNpdGUgb3duZXIgaGFzIGJlZW4gbm90aWZpZWQgYW5kIGlzIGluIHRoZSBwcm9jZXNzIG9mIHJlc29sdmluZyB0aGUgaXNzdWUuIEZvciBub3csIGl0IGlzIHJlY29tbWVuZGVkIHRoYXQgeW91IGRvIG5vdCBjb250aW51ZSB0byB0aGUgbGluayB0aGF0IGhhcyBiZWVuIGZsYWdnZWQuPC9wPg==","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null},{"value":"d2luZG93Ll9jZl90cmFuc2xhdGlvbiA9IHt9Ow==","type":"Ansi","source":"Dropped File","process":null,"filename":"css_1_.htm","compromised":null,"detection_total":null,"total":null}]},{"name":"screen_0.png","strings":[{"value":"Xz9fX19fX18wXz9fX2xfX19fX19xX18/P19f","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_0.png","compromised":null,"detection_total":null,"total":null},{"value":"X2hsX0xZX0lf","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_0.png","compromised":null,"detection_total":null,"total":null}]},{"name":"3c0c58d4b9eefea56e2f7be3f07cdb73e659b4db688bfbf9eacd96ba5ab2dfe5.docx.bin","strings":[{"value":"aHR0cDovL3BsZXQuZGsvY3NzL2Nzcy5jc3M=","type":"Ansi","source":"Hybrid Analysis","process":null,"filename":"3c0c58d4b9eefea56e2f7be3f07cdb73e659b4db688bfbf9eacd96ba5ab2dfe5.docx.bin","compromised":true,"detection_total":14,"total":137}]}],"image":[]},"http_requests":[{"host":"plet.dk","host_ip":"104.27.183.55:80","url":"/css/","method":"OPTIONS","response_code":null,"response_file_type_tags":[],"response_file_size":null,"response_file_exists":false,"response_file_download_link":null,"response_file_submit_link":null,"response_phrase":null,"response_header":null,"header":"OPTIONS /css/ HTTP/1.1\nUser-Agent: Microsoft Office Protocol Discovery\nHost: plet.dk\nContent-Length: 0\nConnection: Keep-Alive","hex":" 0 : 00 00 5E 00 01 01 3C 00 27 A5 AE 37 08 00 45 00 [..^...<.'..7..E.]\n 10 : 00 AD 03 C6 40 00 80 06 26 4F C0 A8 F0 3A 68 1B [....@...&O...:h.]\n 20 : B7 37 C0 30 00 50 F2 9B 06 11 2A FD 0A CB 50 18 [.7.0.P....*...P.]\n 30 : 40 29 DC D2 00 00 4F 50 54 49 4F 4E 53 20 2F 63 [@)....OPTIONS /c]\n 40 : 73 73 2F 20 48 54 54 50 2F 31 2E 31 0D 0A 55 73 [ss/ HTTP/1.1..Us]\n 50 : 65 72 2D 41 67 65 6E 74 3A 20 4D 69 63 72 6F 73 [er-Agent: Micros]\n 60 : 6F 66 74 20 4F 66 66 69 63 65 20 50 72 6F 74 6F [oft Office Proto]\n 70 : 63 6F 6C 20 44 69 73 63 6F 76 65 72 79 0D 0A 48 [col Discovery..H]\n 80 : 6F 73 74 3A 20 70 6C 65 74 2E 64 6B 0D 0A 43 6F [ost: plet.dk..Co]\n 90 : 6E 74 65 6E 74 2D 4C 65 6E 67 74 68 3A 20 30 0D [ntent-Length: 0.]\n A0 : 0A 43 6F 6E 6E 65 63 74 69 6F 6E 3A 20 4B 65 65 [.Connection: Kee]\n B0 : 70 2D 41 6C 69 76 65 0D 0A 0D 0A [p-Alive....]\n"},{"host":"plet.dk","host_ip":"104.27.183.55:80","url":"/css/css.css","method":"HEAD","response_code":null,"response_file_type_tags":[],"response_file_size":null,"response_file_exists":false,"response_file_download_link":null,"response_file_submit_link":null,"response_phrase":null,"response_header":null,"header":"HEAD /css/css.css HTTP/1.1\nConnection: Keep-Alive\nCookie: __cfduid=d69421d043471616fed459c8d83ed5a7f1557839923\nUser-Agent: Microsoft Office Existence Discovery\nHost: plet.dk","hex":"$32"},{"host":"plet.dk","host_ip":"104.27.183.55:80","url":"/css","method":"OPTIONS","response_code":null,"response_file_type_tags":[],"response_file_size":null,"response_file_exists":false,"response_file_download_link":null,"response_file_submit_link":null,"response_phrase":null,"response_header":null,"header":"OPTIONS /css HTTP/1.1\nConnection: Keep-Alive\nCookie: __cfduid=d69421d043471616fed459c8d83ed5a7f1557839923\nUser-Agent: Microsoft-WebDAV-MiniRedir/6.1.7601\ntranslate: f\nHost: plet.dk","hex":"$33"},{"host":"plet.dk","host_ip":"104.27.183.55:80","url":"/css/css.css","method":"GET","response_code":null,"response_file_type_tags":[],"response_file_size":null,"response_file_exists":false,"response_file_download_link":null,"response_file_submit_link":null,"response_phrase":null,"response_header":null,"header":"GET /css/css.css HTTP/1.1\nAccept: */*\nUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; ms-office; MSOffice 14)\nUA-CPU: AMD64\nAccept-Encoding: gzip, deflate\nHost: plet.dk\nConnection: Keep-Alive\nCookie: __cfduid=d69421d043471616fed459c8d83ed5a7f1557839923","hex":"$34"},{"host":"plet.dk","host_ip":"104.27.183.55:80","url":"/css/css.css","method":"HEAD","response_code":null,"response_file_type_tags":[],"response_file_size":null,"response_file_exists":false,"response_file_download_link":null,"response_file_submit_link":null,"response_phrase":null,"response_header":null,"header":"HEAD /css/css.css HTTP/1.1\nUser-Agent: Microsoft Office Existence Discovery\nHost: plet.dk\nContent-Length: 0\nConnection: Keep-Alive\nCookie: __cfduid=d69421d043471616fed459c8d83ed5a7f1557839923","hex":"$35"},{"host":"plet.dk","host_ip":"104.27.183.55:80","url":"/css/css.css","method":"HEAD","response_code":null,"response_file_type_tags":[],"response_file_size":null,"response_file_exists":false,"response_file_download_link":null,"response_file_submit_link":null,"response_phrase":null,"response_header":null,"header":"HEAD /css/css.css HTTP/1.1\nUser-Agent: Microsoft Office Existence Discovery\nHost: plet.dk\nContent-Length: 0\nConnection: Keep-Alive\nCookie: __cfduid=d69421d043471616fed459c8d83ed5a7f1557839923","hex":"$36"}],"ftp_requests":[],"irc_requests":[],"strings_resources":["104.27.183.55","64.124.12.162","http://cf.errors.ie","http://cloudflare.com","http://plet.dk","http://plet.dk/css/css.css","https://www.cloudflare.com/5xx-error-landing"],"tags_details":[],"sample_flags":["Network Traffic","Extracted Files"],"suricata_alerts":[],"version_info":[],"apk_info":null,"apps_info":[{"name":"Access","product":null,"version":null},{"name":"Acrobat Reader","product":"Adobe Acrobat Reader DC","version":"18.9.20050.254034"},{"name":"Chrome","product":null,"version":null},{"name":"Excel","product":"Microsoft Office 2010","version":"14.0.4756.1000"},{"name":"Firefox","product":"Firefox","version":"57.0.1"},{"name":"Flash","product":"Shockwave Flash","version":"27,0,0,187"},{"name":"Hancom Office Hancell","product":null,"version":null},{"name":"Internet Explorer","product":"Internet Explorer","version":"11.00.9600.16428"},{"name":"Java","product":"Java(TM) Platform SE 8","version":"8.0.1510.12"},{"name":"OneNote","product":"Microsoft OneNote","version":"14.0.4763.1000"},{"name":"PowerPoint","product":"Microsoft Office 2010","version":"14.0.4754.1000"},{"name":"Word","product":"Microsoft Office 2010","version":"14.0.4762.1000"}],"architecture":null,"document":{"author":null,"creator":null,"producer":null,"title":null,"subject":null,"pages":0},"packer":null,"file_imports":[],"osint_tags":[],"osint_references":[],"memory_forensics":[],"language":null,"authentihash":null,"entrypoint_bytes":null,"pdb_timestamp":null,"pdb_pathway":null,"pdb_guid":null,"file_sections":[],"file_exports":[],"error":null,"yara_hits":[],"intelligence_mitre_mappings":[],"entrypoint_preview_count":0,"entrypoint_preview_instructions":[],"file_resources":[],"file_permissions":[],"file_activities":[],"file_receivers":[],"file_data_directories":[],"elf_headers":[],"elf_static_symbols":null,"vba_macros":[],"verdict_source":null,"user_comments":[],"email_headers":null,"classification_tags":[],"tags":[],"submissions":[{"submission_id":"5cfead9f0388388197ac6297","filename":"3c0c58d4b9eefea56e2f7be3f07cdb73e659b4db688bfbf9eacd96ba5ab2dfe5.docx","url":null,"created_at":"2019-06-10T19:21:03+00:00"},{"submission_id":"5cdabffa028838cc0ea26b09","filename":"e45f4b641bb48aa110ff64ad59cbeb58.docx","url":null,"created_at":"2019-05-14T13:17:46+00:00"}],"crowdstrike_ai":{"executable_process_memory_analysis":[],"analysis_related_urls":[]},"warnings":["Not all sources for indicator ID \"api-55\" are available in the report","Not all sources for indicator ID \"binary-0\" are available in the report","Not all sources for indicator ID \"mutant-0\" are available in the report"],"report_related_files":{"report_json":{"file_name":"report.json","download_url":"/bff/report/5cdabffa028838cc0ea26b0a/download/files/report_json","file_size":221372},"memory_strings":{"file_name":"mstrings.zip","download_url":"/bff/report/5cdabffa028838cc0ea26b0a/download/files/memory_strings","file_size":1975},"certificate":null,"network_pcap":{"file_name":"network.pcap","download_url":"/bff/report/5cdabffa028838cc0ea26b0a/download/files/network_pcap","file_size":7216},"memory_dumps":null},"system_resource_monitor":null,"external_reports":null,"available_buttons":{"report_false_positive":true},"hashes_to_context_check":["3c0c58d4b9eefea56e2f7be3f07cdb73e659b4db688bfbf9eacd96ba5ab2dfe5","3882a3e04d6cf66707b31c8cb14a7c9fe512d10dd355f97a37e8666270f6e17d","c2e52dc9a43bd776b242591616ad6034aa0b76cfa46271ffb29393e1e4638976","7fcda3e9b4fd3471e3b30bbd6ef879c984b7b4f9b4c13ed682f15e6fd8683a88","0178478058cfb23a85aa2b95768f1e6af77fd6df095fb95df93b1b60df36d1da","5fd47376da7d51a3433933b14d0cf5b3e3945fb74a573fe07c745fd980ec8079","cebc9a4cf61739a5958fe94b67caf110bdea4e383aead7c0232f59bf90dc6895","83f4ea26254d69825486bffd1d400217aac7245c5c48fe5acc3ccdea173c4851","3d7c80b6638aa4c1e159d3a4d779d5579d817134fcfb872305c29d83eadf8213","235324dd73643dfdd7478fdf329a8ec16f4d12486f129b04c8e052398b07c64c","519a39ac7fcbcc1b6bb2850831bffe8c2b4c149f1af2da31c2cf7bb277081ded","c3bb494f01217a5bd582f7d78bde0fd8e133b8d3f6942382e573943508c240d9","bf8946d96b27224dd8210484bcdf4699d47d43bdf8ad553218c06391ad5168d8","e5b761dba8e72c29c5d59cdf18acd420ecceaab2940a561c43a90a5a299bf6d6","6aaa213855f64d6b0e3f5552e021c0c4baf3a4b266c3361c1d6ef385b5f493f1","e8593474dc6e81e165c91c5c9721a97571ae211610239e7fa950ab3480161e2d","fbbca82414b3d719fbcd2c3f5f28d57d87a762654bccacb8e8ff435cbd69a940","c0a081e6d5e0279be4503f26f0b01bcedeebf1dfb95fcbe4fb935f881d111da0"]}}]]}] 20:null 24:[["$","title","0",{"children":"Malicious CVE-2017-0199 — Falcon Sandbox Report — Score 100/100 — Sample 3c0c58d4b9ee… | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Malicious verdict for sandbox report 5cdabffa0288…. Malware family: CVE-2017-0199. Threat score 100/100. 6 malicious and 5 suspicious behavioral indicators across 28 signatures. Detonated in Windows 7 64 bit. View behavioral indicators, network activity, dropped files, and MITRE ATT&CK mappings."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/3c0c58d4b9eefea56e2f7be3f07cdb73e659b4db688bfbf9eacd96ba5ab2dfe5/5cdabffa028838cc0ea26b0a"}],["$","meta","4",{"property":"og:title","content":"Malicious CVE-2017-0199 — Falcon Sandbox Report — Score 100/100 — Sample 3c0c58d4b9ee… | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Malicious verdict for sandbox report 5cdabffa0288…. Malware family: CVE-2017-0199. Threat score 100/100. 6 malicious and 5 suspicious behavioral indicators across 28 signatures. Detonated in Windows 7 64 bit. View behavioral indicators, network activity, dropped files, and MITRE ATT&CK mappings."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/3c0c58d4b9eefea56e2f7be3f07cdb73e659b4db688bfbf9eacd96ba5ab2dfe5/5cdabffa028838cc0ea26b0a"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Malicious CVE-2017-0199 — Falcon Sandbox Report — Score 100/100 — Sample 3c0c58d4b9ee… | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Malicious verdict for sandbox report 5cdabffa0288…. Malware family: CVE-2017-0199. Threat score 100/100. 6 malicious and 5 suspicious behavioral indicators across 28 signatures. Detonated in Windows 7 64 bit. View behavioral indicators, network activity, dropped files, and MITRE ATT&CK mappings."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L37","11",{}]]