Managed XDR

c-users-user-desktop-trix.xls — отчёт о динамическом анализе вредоносного файла

Информация о файле

Имя файла
c-users-user-desktop-trix.xls
Тип файла
Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, Code page: 1252, Author: Windows User, Last Saved By: Windows User, Name of Creating Application: Microsoft Excel, Create Time/Date: Sat Jun 22 12:23:57 2019, Last Saved Time/Date: Wed Feb 12 12:35:28 2020, Security: 0
Размер файла
1.8 MB
Первое обнаружение
Последнее обнаружение

Окружение

win7/x86 en

Хеши

SHA1
2b1422787f81da6fba65ffa8577f201a6e9f21c6
SHA256
d6abbf753f15d8624ccd52257a6255277330a4e39a5b51ffb87d8b8134f7682b
MD5
495c6a8f37f2b6cf2e48589f03922cf1

Сигнатуры

Other

yara_rules: Static rules
suricata_alert: Malicious traffic detected
creates_exe: Creates executable files in the file system
dns_without_resolve: DNS query without a response
office_summary: The document contains suspicious metadata
break_limit_exceeded: Warning: function calls limit has been exceeded
get_policy_info: Retrieves information about a Policy object
creates_in_programdata: Creates files in the ProgramData directory
test_check_service: Starts services
antisandbox_check_graphics_card: Uses CreateDXGIFactory, potentially to detect graphics card