Analysis results

Feature Result
Verdict Malicious
SHA-256772c897ffdfb824b31d70ea360224714ab9bb83659bd431897cc74dd2defc2f3
MD5e688ebdab6916fc89610c89ccb94ce16
File size648704 bytes
MIMEapplication/msword
File infoComposite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, Code page: 1252, Author: BigAdministrator, Template: Normal.dotm, Last Saved By: MyPc, Revision Number: 2, Name of Creating Application: Microsoft Office Word, Create Time/Date: Wed Jan 13 15:03:00 2021, Last Saved Time/Date: Wed Jan 13 15:03:00 2021, Number of Pages: 1, Number of Words: 3, Number of Characters: 19, Security: 0
Matching maldoc templates Hancitor
Suspicious findings in the VBA Shell Base64 Strings ShellExecute CreateObject Shell32 Hex Strings Call AutoExec
Malicious methods Embedded EXE LOLBAS
URLs
First reported 18/04/2021 10:55:36
Scanning time 6.27 sec
Consult others Triage VirusTotal Hybrid Analysis