Analysis results
Feature | Result |
---|---|
Verdict | Malicious |
SHA-256 | 63ba733a424e0e8faca60800df859696e15df38315049068bc30c559f9230b5b |
MD5 | 98c8436a64207c603fe83b9cf018db0a |
File size | 167936 bytes |
MIME | application/msword |
File info | Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, Code page: 1252, Title: Quam., Author: Camille Gonzalez, Template: Normal.dotm, Last Saved By: Matto Arnaud, Revision Number: 1, Name of Creating Application: Microsoft Office Word, Create Time/Date: Tue Oct 27 13:32:00 2020, Last Saved Time/Date: Tue Oct 27 13:32:00 2020, Number of Pages: 1, Number of Words: 4172, Number of Characters: 23783, Security: 8 |
Matching maldoc templates | Emotet |
Suspicious findings in the VBA | Create showwindow Base64 Strings CreateObject ChrW Hex Strings AutoExec |
Malicious methods | LOLBAS |
URLs | |
First reported | 16/04/2021 13:18:43 |
Scanning time | 3.15 sec |
Consult others | Triage VirusTotal Hybrid Analysis |