Analysis results

Feature Result
Verdict Malicious
SHA-256827866089f958b9df535168bc3efed843ee0d769cbe015758d90f9199f7b0d25
MD5bdba9e0cbaa81843d8a651ed0098a9fd
File size376832 bytes
MIMEapplication/msword
File infoComposite Document File V2 Document, Little Endian, Os: Windows, Version 6.1, Code page: 1252, Author: BigAdministrator, Template: Normal.dotm, Last Saved By: win7home, Revision Number: 2, Name of Creating Application: Microsoft Office Word, Create Time/Date: Wed Nov 25 11:42:00 2020, Last Saved Time/Date: Wed Nov 25 11:42:00 2020, Number of Pages: 1, Number of Words: 3, Number of Characters: 19, Security: 0
Matching maldoc templates Hancitor
Suspicious findings in the VBA Shell ShellExecute CreateObject Shell32 Hex Strings Call AutoExec
Malicious methods Embedded EXE LOLBAS
URLs
First reported 18/04/2021 10:56:09
Scanning time 4.76 sec
Consult others Triage VirusTotal Hybrid Analysis