Analysis results
Feature | Result |
---|---|
Verdict | Malicious |
SHA-256 | b0f75e1ff6108ecf126ecb7aca8cb5d2d6c1d5008179cb00c0f2780f445bfb0e |
MD5 | 2c14d231e3d9b554441f7fa5358d9886 |
File size | 339968 bytes |
MIME | application/vnd.ms-excel |
File info | Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, Code page: 1251, Name of Creating Application: Microsoft Excel, Create Time/Date: Sat Sep 16 01:00:00 2006, Last Saved Time/Date: Mon Nov 16 16:36:12 2020, Security: 0 |
Matching maldoc templates | Qbot ZLoader smokebot |
Suspicious findings in the VBA | CALL AutoExec RUN |
Malicious methods | DDE XLM macros |
URLs | |
First reported | 16/04/2021 13:18:05 |
Scanning time | 3.68 sec |
Consult others | Triage VirusTotal Hybrid Analysis |