Benign Download

Credits.rtf

RTF field target is a remote URLEncoded payload detected: xor
SHA-256c62e6c4150e2491ded8c745570c0dc28d7e719b366c4159ec58d3dacc27ee832
MaleculeMd₂(Pd)

Evidence

Encoded payload detected: xor lines 33–35
33\f4\b\fs26 \cf0 Sitio Web
34\f2\b0 :\cf5 {\field{\*\fldinst{HYPERLINK "http://www.bean-osx.com"}}{\fldrslt \cf6 www.bean-osx.com}}\
35\pard\pardeftab720\fi360\sl288\slmult1\sa300\partightenfactor0

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.