Benign Download

Credits.rtf

RTF field target is a remote URLEncoded payload detected: xor
SHA-2560841099de5c1ffde01ef5c0697173812238f077494e9dae4d3ccee6479e18957
MaleculeMd₂(Pd)

Evidence

Encoded payload detected: xor lines 33–35
33\f4\b\fs26 \cf0 Website
34\f2\b0 :\cf5 {\field{\*\fldinst{HYPERLINK "http://www.bean-osx.com"}}{\fldrslt \cf6 www.bean-osx.com}}\
35\pard\pardeftab720\fi360\sl288\slmult1\sa300\partightenfactor0

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.