Blind DOCtorAnalysis results
| Feature | Result |
|---|---|
| Verdict | Malicious |
| SHA-256 | 3db618a9eedec39d5b0db674aded50720d9be0e95e25494bef56df14fbfdafd1 |
| MD5 | c88efb0069f04f3794edae83e8579354 |
| File size | 339968 bytes |
| MIME | application/vnd.ms-excel |
| File info | Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, Code page: 1251, Name of Creating Application: Microsoft Excel, Create Time/Date: Sat Sep 16 01:00:00 2006, Last Saved Time/Date: Mon Nov 16 16:36:12 2020, Security: 0 |
| Matching maldoc templates | Qbot ZLoader smokebot |
| Suspicious findings in the VBA | CALL AutoExec RUN |
| Malicious methods | DDE XLM macros |
| URLs | |
| First reported | 16/04/2021 13:18:12 |
| Scanning time | 3.55 sec |
| Consult others | Triage VirusTotal Hybrid Analysis |