flash

Compensation-54975366-09272021.xls

Status: finished
Submission Time: 29.09.2021 08:50:27
Malicious
Exploiter
Hidden Macro 4.0

Comments

Tags

Details

  • Analysis ID:
    493017
  • API (Web) ID:
    860588
  • Analysis Started:
    29.09.2021 08:58:06
  • Analysis Finished:
    29.09.2021 09:16:43
  • MD5:
    ad92ec6582db6a96102e47dc7ba25e29
  • SHA1:
    496757d5b32f14856239db015acd8335a25bdb2d
  • SHA256:
    8103f50856a1a1e89ba885dd264bc5779cf74c8e837b556653bc6c410e019c0f
  • Technologies:
Full Report Management Report IOC Report Engine Info Verdict Score Reports

System: Windows 7 x64 SP1 with Office 2010 SP1 (IE 11, FF52, Chrome 57, Adobe Reader DC 15, Flash 25.0.0.127, Java 8 Update 121, .NET 4.6.2)

malicious
72/100

System: Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Run Condition: Potential for more IOCs and behavior

malicious
72/100

malicious
7/89

IPs

IP Country Detection
185.183.96.67
Netherlands
190.14.37.178
Panama
185.250.148.213
Russian Federation

URLs

Name Detection
http://185.183.96.67/
http://190.14.37.178/
http://servername/isapibackend.dll
Click to see the 1 hidden entries
http://185.250.148.213/

Dropped files

Name File Type Hashes Detection
C:\Users\user\AppData\Local\Temp\VBE\MSForms.exd
data
#
C:\Users\user\AppData\Local\Temp\VBE\RefEdit.exd
data
#