Malicious doc with Embedded SettingContent-ms | VTI
Try VMRay Analyzer
VTI SCORE: 91/100
Dynamic Analysis Report
Classification: Trojan

3c6a74d216e10e4ff158716cfa72984230995041c4bbb7596b8c8aaa461d76c5 (SHA256)

ggzn.doc

Word Document

Created at 2018-08-06 13:03:00

Severity Category Operation Classification
4/5
File System Known malicious file Trojan
  • File "C:\Users\Nd9E1FYi\Desktop\ggzn.doc" is a known malicious file.
3/5
YARA YARA match -
  • Rule "Document_Office_SettingContentMS" from ruleset "Malicious-Documents" has matched for "C:\Users\Nd9E1FYi\Desktop\ggzn.doc"
1/5
Static Contains embedded files -
Function Logfile
Exit-Icon

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".


    
Before

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".


    
After

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".


    
Screenshot
Expand-Icon
Exit-Icon
icon_left
icon_left
image