Scan 108.xls

Classification: Malicious

Scan 108.xls is a downloader (application/vnd.ms-excel). Detected by 25 antivirus engines. Linked to Dridex malware. 5 sightings, last seen 2021-01-14.

Detection summary

  • 25 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: DRIDEX (S0384)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Dridex Abuse.ch 2021-01-14 07:10:38 2021-01-14 07:10:38 malicious-activity S0384 Dridex

Sample information

Filenames
Scan 108.xls
File type
application/vnd.ms-excel
MD5
1591b2551c119472366dbb437c9a12f2
SHA-1
5e0e2ae88a7c7f70b288392583e0b955ebf0c715
SHA-256
9e2e53a384fe464132f9a1c4918db48a933558c946fae7ef2aeed6b7ff59caae
First indexed
2021-01-14 09:15:11
Last updated
2026-10-09 05:29:54

Antivirus detections

EngineDetection
Elasticmalicious (high confidence)
MicroWorld-eScanVB.Heur.EmoDldr.32.4F32703B.Gen
FireEyeVB.Heur.EmoDldr.32.4F32703B.Gen
CAT-QuickHealO97M.Downloader.40352
ALYacVB.Heur.EmoDldr.32.4F32703B.Gen
SymantecISB.Downloader!gen419
BitDefenderVB.Heur.EmoDldr.32.4F32703B.Gen
NANO-AntivirusTrojan.Script.Heuristic-js.iacgm
TencentHeur.Macro.Generic.h.9439314
Ad-AwareVB.Heur.EmoDldr.32.4F32703B.Gen
TACHYONSuspicious/X97M.Obfus.Gen.1
F-SecureHeuristic.HEUR/Macro.Downloader.MRAAV.Gen
McAfee-GW-EditionBehavesLike.OLE2.Downloader.bx
EmsisoftVB.Heur.EmoDldr.32.4F32703B.Gen (B)
SentinelOneStatic AI - Malicious OLE
GDataVB.Heur.EmoDldr.32.4F32703B.Gen
AviraHEUR/Macro.Downloader.MRAAV.Gen
ArcabitVB.Heur.EmoDldr.32.4F32703B.Gen
ZoneAlarmUDS:DangerousObject.Multi.Generic
CynetMalicious (score: 85)
MAXmalware (ai score=88)
ZonerProbably Heur.W97Obfuscated
Rising[email protected] (VBA)
FortinetVBA/Agent.VAZ!tr.dldr
Qihoo-360virus.office.qexvmc.1080