7ea94da41974adefe99eeb883523b757cea10becf09185af05b9f464faa70712 (SHA256)
2019 Order File TTYYUGH.doc
Word Document
Created at 2019-02-11 09:17:00
Notifications (2/4)
Due to a WHOIS service error, no query could be made to get WHOIS data of any contacted domain.
The maximum number of reputation file hash requests (20 per analysis) was exceeded. As a result, the reputation status could not be queried for all file hashes. In order to get the reputation status for all file hashes, please increase the 'Max File Hash Requests' setting in the system configurations.
The operating system was rebooted during the analysis.
YARA Information
| Applied On | Sample Files, PCAP File, Created Files, Modified Files, Process Dumps |
| Number of YARA matches | 6 |
| Ruleset Name | Rule Name | Rule Description | File Type | Filename | Classification | Severity | Actions |
|---|---|---|---|---|---|---|---|
| Generic | VBA_Download_Commands | VBA macro may attempt to download external content; possible dropper | Sample File | C:\Users\aETAdzjz\Desktop\2019 Order File TTYYUGH.doc | - |
3/5
|
|
| Generic | VBA_Execution_Commands | VBA macro may execute files or system commands | Sample File | C:\Users\aETAdzjz\Desktop\2019 Order File TTYYUGH.doc | - |
3/5
|
|
| Generic | VBA_Download_Commands | VBA macro may attempt to download external content; possible dropper | Sample File | C:\Users\aETAdzjz\Desktop\2019 Order File TTYYUGH.doc | - |
3/5
|
|
| Generic | VBA_Execution_Commands | VBA macro may execute files or system commands | Sample File | C:\Users\aETAdzjz\Desktop\2019 Order File TTYYUGH.doc | - |
3/5
|
|
| Generic | VBA_Obfuscation_ObjectName | VBA initializes COM object from long variable name; possible obfuscation | Sample File | C:\Users\aETAdzjz\Desktop\2019 Order File TTYYUGH.doc | - |
2/5
|
|
| Generic | VBA_Obfuscation_ObjectName | VBA initializes COM object from long variable name; possible obfuscation | Sample File | C:\Users\aETAdzjz\Desktop\2019 Order File TTYYUGH.doc | - |
2/5
|
|
