0d4e21ce...5b6c | VMRay Analyzer Report
Logo
Try VMRay Analyzer
VTI SCORE: 100/100
Dynamic Analysis Report
Classification: Dropper, Downloader

0d4e21cec341cd742aa47f3f3bd4b7a903ab558a646ddd2c55b153bbf7dc5b6c (SHA256)

orden de pedido 05.xlsx

Excel Document

Created at 2018-11-05 09:27:00

...

Notifications (2/2)

One or multiple processes crashed. As a result, the analysis results may be incomplete and may not fully represent the behavior of the sample.

The operating system was rebooted during the analysis.

Top Threat Indicators (View all 26 threat indicators)

Category Operation Classification
Hide Tracks Uses Alternate Data Stream (ADS) for interprocess communication -
Injection Writes into the memory of another running process -
Injection Writes into the memory of a process running from a created or modified executable -

Screenshots

Monitored Processes

Process Graph

Process Graph Legend

Analysis Information

Creation Time 2018-11-05 10:27 (UTC+1)
Analysis Duration 00:04:30
Number of Monitored Processes 12
Execution Successful True
Reputation Enabled True
WHOIS Enabled True
YARA Enabled True
Termination Reason Timeout
Tags

Sample Information

ID #263677
MD5 2db17f4f44b20ac1204a100d1ba2d10f Copy to Clipboard
SHA1 509ed3828b80661a418d2f7d4f9e366d46eb7ef5 Copy to Clipboard
SHA256 0d4e21cec341cd742aa47f3f3bd4b7a903ab558a646ddd2c55b153bbf7dc5b6c Copy to Clipboard
SSDeep 3072:pyEl9CvErmcEVq47NQSjIcNVPTnX+PualOg7OtY4LeNzxy9:f6ErBObNQTeVPTXSlOg7OtY4LeN0 Copy to Clipboard
Filename orden de pedido 05.xlsx
File Size 165.96 KB
File Type Excel Document
Has VBA Macros False

Analyzer Information

Dynamic Analyzer Build Date 2018-10-25 12:55 (UTC+2)
Dynamic Analyzer Version 2.3.2
Static Analyzer Version 1.0.1
VTI Ruleset Version 3.1
YARA Built-in Ruleset Version 1.1
Analysis Report Layout Version 3
Function Logfile
Download-Icon
Exit-Icon

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy". 


    

   

   

    Before
   

   

    

     

      
       This feature requires an online-connection to the VMRay backend.
      
      

      

      An offline version with limited functionality is also provided.
      

      The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".
     

     

    

   

   

    After
   

   

    

     

      
       This feature requires an online-connection to the VMRay backend.
      
      

      

      An offline version with limited functionality is also provided.
      

      The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".
     

     

    

   

   

    

     
      

       
       
       
       
      

     
     
     
    

   

  

  

   

    
    

     Screenshot
    

    

     Expand-Icon
    

    

     Exit-Icon
    

   

   

    

     icon_left
    

    

     icon_left
    

   

   

   

   

    image