Malicious doc with Embedded SettingContent-ms

VTI SCORE: 91/100

Dynamic Analysis Report

Classification: Trojan

3c6a74d216e10e4ff158716cfa72984230995041c4bbb7596b8c8aaa461d76c5 (SHA256)

ggzn.doc

Word Document

Created at 2018-08-06 13:03:00

Severity	Category	Operation	Classification
4/5	File System	Known malicious file	Trojan
File "C:\Users\Nd9E1FYi\Desktop\ggzn.doc" is a known malicious file. ... VTI Actions Go to file details
3/5	YARA	YARA match	-
Rule "Document_Office_SettingContentMS" from ruleset "Malicious-Documents" has matched for "C:\Users\Nd9E1FYi\Desktop\ggzn.doc" ... VTI Actions Go to YARA match
1/5	Static	Contains suspicious meta data	-
Office document contains below average content data. ... VTI Actions Go to file details
1/5	Static	Contains embedded files	-
Document contains unknown embedded files. ... VTI Actions Go to file details

Function Logfile

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".

Before

After