Analysis results
Feature | Result |
---|---|
Verdict | Malicious |
SHA-256 | 44cd7851442ad410184869f0dce865c2018792cc900379dd0dfea945bdb1abe7 |
MD5 | 2596f3b570169aee2c6034afb6097a26 |
File size | 339968 bytes |
MIME | application/vnd.ms-excel |
File info | Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, Code page: 1251, Name of Creating Application: Microsoft Excel, Create Time/Date: Sat Sep 16 01:00:00 2006, Last Saved Time/Date: Mon Nov 16 16:33:19 2020, Security: 0 |
Matching maldoc templates | Qbot ZLoader smokebot |
Suspicious findings in the VBA | CALL AutoExec RUN |
Malicious methods | DDE XLM macros |
URLs | |
First reported | 16/04/2021 13:19:43 |
Scanning time | 3.63 sec |
Consult others | Triage VirusTotal Hybrid Analysis |