Blind DOCtorAnalysis results
| Feature | Result |
|---|---|
| Verdict | Malicious |
| SHA-256 | b0f75e1ff6108ecf126ecb7aca8cb5d2d6c1d5008179cb00c0f2780f445bfb0e |
| MD5 | 2c14d231e3d9b554441f7fa5358d9886 |
| File size | 339968 bytes |
| MIME | application/vnd.ms-excel |
| File info | Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, Code page: 1251, Name of Creating Application: Microsoft Excel, Create Time/Date: Sat Sep 16 01:00:00 2006, Last Saved Time/Date: Mon Nov 16 16:36:12 2020, Security: 0 |
| Matching maldoc templates | Qbot ZLoader smokebot |
| Suspicious findings in the VBA | CALL AutoExec RUN |
| Malicious methods | DDE XLM macros |
| URLs | |
| First reported | 16/04/2021 13:18:05 |
| Scanning time | 3.68 sec |
| Consult others | Triage VirusTotal Hybrid Analysis |