Blind DOCtorAnalysis results
| Feature | Result |
|---|---|
| Verdict | Malicious |
| SHA-256 | 44cd7851442ad410184869f0dce865c2018792cc900379dd0dfea945bdb1abe7 |
| MD5 | 2596f3b570169aee2c6034afb6097a26 |
| File size | 339968 bytes |
| MIME | application/vnd.ms-excel |
| File info | Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, Code page: 1251, Name of Creating Application: Microsoft Excel, Create Time/Date: Sat Sep 16 01:00:00 2006, Last Saved Time/Date: Mon Nov 16 16:33:19 2020, Security: 0 |
| Matching maldoc templates | Qbot ZLoader smokebot |
| Suspicious findings in the VBA | CALL AutoExec RUN |
| Malicious methods | DDE XLM macros |
| URLs | |
| First reported | 16/04/2021 13:19:43 |
| Scanning time | 3.63 sec |
| Consult others | Triage VirusTotal Hybrid Analysis |