54303e5a...fd2e | Yara
Try VMRay Analyzer
VTI SCORE: 95/100
Dynamic Analysis Report
Classification: -

54303e5aa05db2becbef0978baa60775858899b17a5d372365ba3c5b1220fd2e (SHA256)

DOC2410201810718458.xls

Excel Document

Created at 2018-10-24 06:15:00

Notifications (1/1)

Due to a WHOIS service error, no query could be made to get WHOIS data of any contacted domain.

YARA Information

Applied On Sample Files, PCAP File, Created Files, Modified Files, Process Dumps
Number of YARA matches 4
Ruleset Name Rule Name Rule Description File Type Filename Classification Severity Actions
Malicious-Documents Document_Contains_Execution_Commands Execution commands inside a document; possible dropper Sample File C:\Users\aETAdzjz\Desktop\DOC2410201810718458.xls -
3/5
Malicious-Documents Document_Contains_Execution_Commands Execution commands inside a document; possible dropper Sample File C:\Users\aETAdzjz\Desktop\DOC2410201810718458.xls -
3/5
Malicious-Documents Document_Contains_Execution_Commands Execution commands inside a document; possible dropper Sample File C:\Users\aETAdzjz\Desktop\DOC2410201810718458.xls -
3/5
Malicious-Documents Document_Contains_Execution_Commands Execution commands inside a document; possible dropper Sample File C:\Users\aETAdzjz\Desktop\DOC2410201810718458.xls -
3/5
Function Logfile
Exit-Icon

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".


    
Before

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".


    
After

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".


    
Screenshot
Expand-Icon
Exit-Icon
icon_left
icon_left
image