| Verdict |
Malicious |
| SHA-256 | db66b26d04c77e03bbf22957af34ba2b5817c397036ab8d4b7c222ec1b1ff40e |
| MD5 | f264b8c58febaa3f3eea9a8c83c78cbf |
| File size | 350720 bytes |
| MIME | application/vnd.ms-excel |
| File info | Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, Code page: 1252, Author: Dell, Last Saved By: Dell, Name of Creating Application: Microsoft Excel, Create Time/Date: Tue Apr 13 14:37:17 2021, Last Saved Time/Date: Wed Apr 14 09:50:18 2021, Security: 0 |
| Matching maldoc templates |
|
| Suspicious findings in the VBA |
exec
Base64 Strings
CreateObject
Hex Strings
Chr
AutoExec
|
| Malicious methods |
LOLBAS
|
| URLs |
http://178.17.171.144/sch/Scafu.ex |
| First reported |
18/04/2021 12:16:11 |
| Scanning time |
3.78 sec |
| Consult others |
Triage VirusTotal Hybrid Analysis |
Blind DOCtor