RTF_7e61861207216ec4b3a64ee54e646265_doc_2019-07-02_14_30.json

[*] MalFamily: "Sload"

[*] MalScore: 10.0

[*] File Name: "RTF_7e61861207216ec4b3a64ee54e646265.doc"
[*] File Size: 663775
[*] File Type: "Rich Text Format data, version 1, unknown character set"
[*] SHA256: "dd2a370a0d7bfbf3518560aee7ffd85c6656ee07254412d6012ce7ab211d6d36"
[*] MD5: "7e61861207216ec4b3a64ee54e646265"
[*] SHA1: "7544a34792494ee4d461d4ec5d01d4cac8618953"
[*] SHA512: "2998bb4181261139bfab09ab0ffbd980f1c80b4e64e296e8c9b9e18517485800c52ed7c2fac7521b4d057c81f4c6e8613c0f0a7134ebe19169adf977bc3cce31"
[*] CRC32: "324A8CF8"
[*] SSDEEP: "3072:q7ycEtjfdvVLi4cev7MdIVLixc1m9wd+VLidI:4IfFVLihkMmVLiamwwVLidI"

[*] Process Execution: []

[*] Signatures Detected: [
    {
        "Description": "File has been identified by 13 Antiviruses on VirusTotal as malicious",
        "Details": [
            {
                "Cyren": "X97M/Downldr.DF.gen!Eldorado"
            },
            {
                "Symantec": "Trojan.Mdropper"
            },
            {
                "ESET-NOD32": "VBA/TrojanDownloader.Agent.MTO"
            },
            {
                "Kaspersky": "HEUR:Trojan-Downloader.MSOffice.SLoad.gen"
            },
            {
                "Tencent": "Win32.Trojan-downloader.Agent.Akfh"
            },
            {
                "Sophos": "Troj/DocDl-ULK"
            },
            {
                "Ikarus": "Trojan.VBA.Agent"
            },
            {
                "AegisLab": "Trojan.MSOffice.SLoad.4!c"
            },
            {
                "ZoneAlarm": "HEUR:Trojan-Downloader.MSOffice.SLoad.gen"
            },
            {
                "AhnLab-V3": "VBA/Downloader.S29"
            },
            {
                "TACHYON": "Suspicious/RTF.Obfus.Gen.4"
            },
            {
                "Fortinet": "VBA/Agent.UJR!tr.dldr"
            },
            {
                "Qihoo-360": "virus.office.obfuscated.1"
            }
        ]
    }
]

[*] Started Service: []

[*] Executed Commands: []

[*] Mutexes: []

[*] Modified Files: []

[*] Deleted Files: []

[*] Modified Registry Keys: []

[*] Deleted Registry Keys: []

[*] DNS Communications: []

[*] Domains: []

[*] Network Communication - ICMP: []

[*] Network Communication - HTTP: []

[*] Network Communication - SMTP: []

[*] Network Communication - Hosts: []

[*] Network Communication - IRC: []

[*] Static Analysis: {}

[*] Resolved APIs: []

[*] Static Analysis: {}