31.0.0 Red Diamond
IR
Corrupt sample or wrongly selected analyzer.
334232
CloudBasic
09:04:15
27/12/2020
Medica negra morre covid-19 apos racismo.docm
defaultwindowsofficecookbook.jbs
Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
WINDOWS
549943fa268b65fee546e7adda0f06ba
0ffc18af6916d88bf456f32a2e85b85e56b6c109
c221dc10d175c2f3fb8366ad3aada1cf06c74ad8483a4a67bf62a0702b41c6f5
Word Microsoft Office Open XML Format document with Macro (52004/1) 33.99%
true
false
false
false
68
0
100
5
0
5
false
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\8CE411D0-944A-475F-831C-DB1313AF15FE
false
2B6BDFA22720901B1294CC30233EB43D
DA5F4AEDCC7CC82F08BE93C4BFE80866FF1D050C
A4A8EBAE629AE88DF47455C05B5F67F76969ED5FB844E9F82F225CE8D26C94C5
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{207CA17B-38C7-4372-969B-EE496C79ABCB}.tmp
false
8BBEA28E2D34003C75E1C68C9FC04ACF
A69DA78644FF060DB1369EA13C1B3DC86F01036A
C69974291323AE9BD6FE47A9A3E7B792325C15B1D9CF3A8447CCE85297B94EBC
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{2F45822A-FABF-400A-A337-13A874CB1859}.tmp
false
5D4D94EE7E06BBB0AF9584119797B23A
DBB111419C704F116EFA8E72471DD83E86E49677
4826C0D860AF884D3343CA6460B0006A7A2CE7DBCCC4D743208585D997CC5FD1
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{A1E40901-705B-4D6D-A1BC-B8A7F39EF540}.tmp
false
69CEA85DF140789165FE4F0C571582D9
1D0635CA95E20E9B293BB7D4E4CFD6C0BF2FD26A
2933EF0D88431B8EDD4B44DBAF552CD21A2968B53F59BDB357BAF1769F0BE8B2
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Medica negra morre covid-19 apos racismo.docm.LNK
true
FD7AA0F26501A4C61D9D978AE8CAA267
A04F05CE5DF6323A626821437CDE3827F5A471A4
DF62D7E39517841C1E83F590901D38CB347676944E342FC812F2A6B9C6A4847B
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat
false
D17AB8486BA359FD7B7708FD8BC3F7FA
4AC6A13D5F58E3B58D04FC5CA7F6513AA99D8780
BA021FB8E3BAD1681FF21C74F9762EC78DFA041F1CF798DB628BE634631B017F
C:\Users\user\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
false
59E3B68FC4E3C8E1C266A211D9A0C63D
D872A6609D9284A29DC4BA216791046E80A6F5AF
7CA77933470BD96DCE341F7066440D8AC7EB273302448BDA2457863514E7551E
C:\Users\user\Desktop\~$dica negra morre covid-19 apos racismo.docm
false
59E3B68FC4E3C8E1C266A211D9A0C63D
D872A6609D9284A29DC4BA216791046E80A6F5AF
7CA77933470BD96DCE341F7066440D8AC7EB273302448BDA2457863514E7551E
Document contains an embedded VBA macro which may execute processes
Document contains an embedded VBA macro with suspicious strings
Document contains an embedded VBA with base64 encoded strings
Document contains an embedded VBA with functions possibly related to ADO stream file operations
Document contains an embedded VBA with functions possibly related to WSH operations (process, registry, environment, or keystrokes)
Document contains an embedded VBA with many string operations indicating source code obfuscation
Machine Learning detection for sample