Excel: a46aff762755cfa81c2095d1e6c24176.doc.bin
PCAP: a46aff762755cfa81c2095d1e6c24176.pcap
Dropped EXE (Banload): a46aff762755cfa81c2095d1e6c24176.bin

• See the README for information about the archive password.

Analysis source: Cuckoo 2.0.7
Maldoc/Exe - Any.Run
Date: 03/26/2020

Excel document that drops Banload.

Process activity from the Word document, which drops Banload via a Zip file.

HTTP request to download the trojan with post-infection traffic

Check-in includes the use of HTTP 1.0 and a non-standard user-agent

IDA alerts from Any.Run