Benign Download

Credits.rtf

RTF field target is a remote URLEncoded payload detected: xor
SHA-25635daf4ce647796f6ff8d7489834e7f38ccefef4e6c7856cbd9d988ebf0e42ca3
MaleculeMd₂(Pd)

Evidence

Encoded payload detected: xor lines 34–36
34\f4\b \cf0 P\'e0gina web
35\f2\b0 :\cf5 {\field{\*\fldinst{HYPERLINK "http://www.bean-osx.com/"}}{\fldrslt \cf6 www.bean-osx.com}}\
36\pard\pardeftab720\fi360\sl288\slmult1\sa300\partightenfactor0

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.