Analysis results

Feature Result
Verdict Malicious
SHA-2563b137cbbd7a33bbed25b28a49a7d05ede977ad0e8cf586873bbafcfe375ec699
MD5a17e5c6d0278bc25eb69a5b39a902372
File size1899008 bytes
MIMEapplication/vnd.ms-excel
File infoComposite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, Code page: 1252, Author: Windows-Benutzer, Last Saved By: Windows User, Name of Creating Application: Microsoft Excel, Create Time/Date: Tue Oct 22 08:10:34 2019, Last Saved Time/Date: Tue Jun 23 07:57:38 2020, Security: 0
Matching maldoc templates
Suspicious findings in the VBA New-Object Command EXEC Net.WebClient powershell AutoExec
Malicious methods XLM macros
URLs http://office-services-sec.com/crimea.ps1
First reported 16/04/2021 13:19:29
Scanning time 5.11 sec
Consult others Triage VirusTotal Hybrid Analysis