Talk to sales
Managed
XDR
Reports
/
clean3file.none.0xfffffa80040b3260.important_ecorp_lawsuit_washington_leak.rtf.dat
clean3file.none.0xffff...ashington_leak.rtf.dat (Meterpreter) — malware analysis report
File info
Filename
clean3file.none.0xfffffa80040b3260.important_ecorp_lawsuit_washington_leak.rtf.dat
File type
Rich Text Format data, version 1, unknown character set
File size
103.3 KB
First seen
2025-07-28 20:49
Last seen
2025-07-28 20:49
Environment
winxp/x86 en
Hashes
SHA1
326c8c86086858208b93213e5f95453ebc5bf710
SHA256
412cc6db90d8d4249f0c0801a923082cfb50ea0d75be48da42f50e218440d170
MD5
f2fcc8953165b2058dbefd4f25b86c3b
Malwares
Meterpreter
Signatures
Other
yara_rules: Static rules
creates_in_programdata: Creates files in the ProgramData directory
Related reports
baaa72a6.tmp — Cobalt Strike, Meterpreter
iskovoe-zaiavlenie.docx — Cobalt Strike, Meterpreter
fedex_billing.eml — Meterpreter
msf.doc — Meterpreter
software_update.eml — Meterpreter
← Previous report
Next report →