| Verdict |
Malicious |
| SHA-256 | fa0e9c96ef83963d0ab05d58302b13ac57356aed411562c71ef1812066e8ac97 |
| MD5 | 4c9d3db50cd58ec12305d904d2354f00 |
| File size | 171520 bytes |
| MIME | application/vnd.ms-excel |
| File info | Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, Code page: 1252, Author: Dell, Last Saved By: Dell, Name of Creating Application: Microsoft Excel, Create Time/Date: Tue Apr 13 14:37:17 2021, Last Saved Time/Date: Wed Apr 14 10:09:58 2021, Security: 0 |
| Matching maldoc templates |
|
| Suspicious findings in the VBA |
exec
Base64 Strings
CreateObject
Hex Strings
Chr
AutoExec
|
| Malicious methods |
LOLBAS
|
| URLs |
http://178.17.171.144/sch/Kqslz.ex |
| First reported |
18/04/2021 12:14:47 |
| Scanning time |
3.27 sec |
| Consult others |
Triage VirusTotal Hybrid Analysis |
Blind DOCtor