Verdict |
Malicious |
SHA-256 | fa0e9c96ef83963d0ab05d58302b13ac57356aed411562c71ef1812066e8ac97 |
MD5 | 4c9d3db50cd58ec12305d904d2354f00 |
File size | 171520 bytes |
MIME | application/vnd.ms-excel |
File info | Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, Code page: 1252, Author: Dell, Last Saved By: Dell, Name of Creating Application: Microsoft Excel, Create Time/Date: Tue Apr 13 14:37:17 2021, Last Saved Time/Date: Wed Apr 14 10:09:58 2021, Security: 0 |
Matching maldoc templates |
|
Suspicious findings in the VBA |
exec
Base64 Strings
CreateObject
Hex Strings
Chr
AutoExec
|
Malicious methods |
LOLBAS
|
URLs |
http://178.17.171.144/sch/Kqslz.ex |
First reported |
18/04/2021 12:14:47 |
Scanning time |
3.27 sec |
Consult others |
Triage VirusTotal Hybrid Analysis |