749_The Peoples Pension (01-Oct-19 to 31-May-20) (Set 3).xls

Classification: Malicious

749_The Peoples Pension (01-Oct-19 to 31-May-20) (Set 3).xls is a malicious file sample. Linked to Ta505 activity. Detected by 24 antivirus engines.

Detection summary

  • 24 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Intrusion sets: TA505 (G0092)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
TA505 Abuse.ch 2020-06-23 12:29:48 2020-06-23 12:29:48 G0092 TA505

Sample information

Filenames
749_The Peoples Pension (01-Oct-19 to 31-May-20) (Set 3).xls
File type
application/vnd.ms-excel
MD5
fdfa678581b990c3e05e72c85d11f612
SHA-1
010d2161451e9979b4b67c439f5789d73e78dc79
SHA-256
4df6b7cd5398387adb2bf5f1b63c9f7f8f0f5e1ed1c4a748a5159bcec0ecadde
First indexed
2020-06-23 13:15:05
Last updated
2026-03-27 05:19:48

Antivirus detections

EngineDetection
MicroWorld-eScanVB:Trojan.Valyria.3290
McAfeeW97M/Dropper.fq
ArcabitVB:Trojan.Valyria.DCDA
ESET-NOD32a variant of VBA/TrojanDropper.Agent.BHF
ClamAVWin.Dropper.Hideproc-6663113-0
BitDefenderVB:Trojan.Valyria.3290
Ad-AwareVB:Trojan.Valyria.3290
SophosTroj/DocDrp-WU
F-SecureHeuristic.HEUR/Macro.Downloader.MRUZ.Gen
McAfee-GW-EditionBehavesLike.Dropper.dg
FireEyeVB:Trojan.Valyria.3290
EmsisoftVB:Trojan.Valyria.3290 (B)
AviraHEUR/Macro.Downloader.MRUZ.Gen
Antiy-AVLTrojan[Exploit]/OLE.CVE-2014-6352
Endgamemalicious (high confidence)
GDataVB:Trojan.Valyria.3290
CynetMalicious (score: 85)
ALYacVB:Trojan.Valyria.3290
MAXmalware (ai score=82)
ZonerProbably Heur.W97Obfuscated
RisingDropper.StealthLoader/VBA!1.C75E (CLASSIC)
SentinelOneDFI - Malicious OLE
FortinetVBA/Dloader.MRUZ!tr
Qihoo-360virus.office.qexvmc.1065