Verdict |
Malicious |
SHA-256 | db66b26d04c77e03bbf22957af34ba2b5817c397036ab8d4b7c222ec1b1ff40e |
MD5 | f264b8c58febaa3f3eea9a8c83c78cbf |
File size | 350720 bytes |
MIME | application/vnd.ms-excel |
File info | Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, Code page: 1252, Author: Dell, Last Saved By: Dell, Name of Creating Application: Microsoft Excel, Create Time/Date: Tue Apr 13 14:37:17 2021, Last Saved Time/Date: Wed Apr 14 09:50:18 2021, Security: 0 |
Matching maldoc templates |
|
Suspicious findings in the VBA |
exec
Base64 Strings
CreateObject
Hex Strings
Chr
AutoExec
|
Malicious methods |
LOLBAS
|
URLs |
http://178.17.171.144/sch/Scafu.ex |
First reported |
18/04/2021 12:16:11 |
Scanning time |
3.78 sec |
Consult others |
Triage VirusTotal Hybrid Analysis |