Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 0f56b4c7b1537989…

MALICIOUS

Office (OLE)

11.0 KB Created: 1998-06-06 19:18:00 Authoring application: Microsoft Word for Windows 95 First seen: 2012-06-14
MD5: f6b011d918fe191d38357097319c1fe1 SHA-1: 959f73759270df14793b5beb37dddb0282dab80e SHA-256: 0f56b4c7b15379898547797e8d1d0e78e8ffedd9d82b2eb47baf85632baafe0a
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The file is detected as Win.Trojan.Checkf-1 by ClamAV, indicating malicious intent. The document body contains text that appears to be a lure, referencing a file path 'C:\cf.doc' and using the name 'ChekFuk', suggesting a social engineering attempt to trick the user into interacting with malicious content. No scripts were extracted from this sample.

Heuristics 1

  • ClamAV: Win.Trojan.Checkf-1 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Win.Trojan.Checkf-1