513813af...b4c8 | Yara
Try VMRay Analyzer
VTI SCORE: 93/100
Dynamic Analysis Report
Classification: -

513813af1590bc9edeb91845b454d42bbce6a5e2d43a9b0afa7692e4e500b4c8 (SHA256)

=UTF-8B2KfZhNmB2YfYp9ix2LMueGxzbQ===.xls

Excel Document

Created at 2019-01-09 08:38:00

YARA Information

Applied On Sample Files, PCAP File, Created Files, Modified Files, Process Dumps
Number of YARA matches 4
Ruleset Name Rule Name Rule Description File Type Filename Classification Severity Actions
Generic VBA_Create_File VBA macro contains file creation commands; possible dropper Sample File C:\Users\aETAdzjz\Desktop\=UTF-8B2KfZhNmB2YfYp9ix2LMueGxzbQ===.xls -
3/5
Generic VBA_Execution_Commands VBA macro may execute files or system commands Sample File C:\Users\aETAdzjz\Desktop\=UTF-8B2KfZhNmB2YfYp9ix2LMueGxzbQ===.xls -
3/5
Generic VBA_Create_File VBA macro contains file creation commands; possible dropper Sample File C:\Users\aETAdzjz\Desktop\=UTF-8B2KfZhNmB2YfYp9ix2LMueGxzbQ===.xls -
3/5
Generic VBA_Execution_Commands VBA macro may execute files or system commands Sample File C:\Users\aETAdzjz\Desktop\=UTF-8B2KfZhNmB2YfYp9ix2LMueGxzbQ===.xls -
3/5
Function Logfile
Exit-Icon

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".


    
Before

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".


    
After

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".


    
Screenshot
Expand-Icon
Exit-Icon
icon_left
icon_left
image