IQY File uses PowerShell to Download a Malicious .exe | VMRay Analyzer Report
Try VMRay Analyzer
VTI SCORE: 100/100
Dynamic Analysis Report
Classification: Backdoor, Trojan, Dropper, Downloader

76917b219ad5a1ff8229a75eb23c34a9ad1ce98264257d3cca538ac59c49a15f (SHA256)

29082018_64943.iqy

Excel Document

Created at 2018-08-30 14:38:00

Notifications (1/1)

The operating system was rebooted during the analysis.

Top Threat Indicators (View all 40 threat indicators)

Screenshots

Monitored Processes

Analysis Information

Creation Time 2018-08-30 16:38 (UTC+2)
Analysis Duration 00:04:23
Number of Monitored Processes 9
Execution Successful True
Reputation Enabled True
WHOIS Enabled True
YARA Enabled True
Termination Reason Timeout
Tags
#malware #iqy

Sample Information

ID #206024
MD5 8292efeed21c16d4833e2933a41fab82 Copy to Clipboard
SHA1 4ae82c4536463c25b31736503308b32f5a42ff59 Copy to Clipboard
SHA256 76917b219ad5a1ff8229a75eb23c34a9ad1ce98264257d3cca538ac59c49a15f Copy to Clipboard
SSDeep 3:LyUyDzKT7gQmUHyUQ:LSDmYQnHo Copy to Clipboard
Filename 29082018_64943.iqy
File Size 0.05 KB
File Type Excel Document
Has VBA Macros False

Analyzer Information

Dynamic Analyzer Build Date 2018-07-24 20:08 (UTC+2)
Dynamic Analyzer Version 2.4.0
Static Analyzer Version 1.0.0
VTI Ruleset Version 3.0
YARA Built-in Ruleset Version 1.0
Analysis Report Layout Version 3
Function Logfile
Exit-Icon

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".


    
Before

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".


    
After

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".


    
Screenshot
Expand-Icon
Exit-Icon
icon_left
icon_left
image