Silent Rotor - Decoy DOCX File Spawn (T1036)

Ibrahim Saud@tektrix

•updated Jun 21, 2026•0•0•1

Correlates the malicious executable launching the embedded decoy .docx document to divert user attention during infection.