Blind DOCtorAnalysis results
| Feature | Result |
|---|---|
| Verdict | Malicious |
| SHA-256 | cb10354a6aff051fe7ae1c2cfb38b40e5ed1c8fd1a4c4b1a35724efed4885995 |
| MD5 | 270f03e3d9fef36f88e51dd5dfec47c1 |
| File size | 247296 bytes |
| MIME | application/msword |
| File info | Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, Code page: 1252, Title: Voluptatem., Author: Clara Aubert, Template: Normal.dotm, Last Saved By: Sarah Guillaume, Revision Number: 1, Name of Creating Application: Microsoft Office Word, Create Time/Date: Wed Oct 28 10:47:00 2020, Last Saved Time/Date: Wed Oct 28 10:47:00 2020, Number of Pages: 1, Number of Words: 13153, Number of Characters: 74978, Security: 8 |
| Matching maldoc templates | Emotet |
| Suspicious findings in the VBA | Create showwindow Base64 Strings CreateObject ChrW Hex Strings AutoExec |
| Malicious methods | LOLBAS |
| URLs | |
| First reported | 16/04/2021 13:19:02 |
| Scanning time | 3.4 sec |
| Consult others | Triage VirusTotal Hybrid Analysis |