Analysis results

Feature Result
Verdict Malicious
SHA-2563d698d68e564b049fecafafbe510b2954fe95b4725ecad134992e3acd2671b49
MD548914d38a1c1695f05af14fce3d6243a
File size1469952 bytes
MIMEapplication/msword
File infoComposite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, Code page: 1251, Template: Normal.dotm, Revision Number: 1, Name of Creating Application: Microsoft Office Word, Create Time/Date: Thu Nov 12 16:12:00 2020, Last Saved Time/Date: Fri Nov 13 16:09:00 2020, Number of Pages: 1, Number of Words: 15, Number of Characters: 86, Security: 0
Matching maldoc templates TrickBot
Suspicious findings in the VBA Create output Base64 Strings ShellExecute SaveToFile CreateObject MkDir AutoExec GetObject system Adodb.Stream Open Hex Strings Chr Call Write Print # Windows
Malicious methods LOLBAS
URLs
First reported 16/04/2021 13:19:23
Scanning time 18.32 sec
Consult others Triage VirusTotal Hybrid Analysis