MALICIOUS
62
Risk Score
Malware Insights
MITRE ATT&CK
T1203 Exploitation for Client Execution
The file is identified as malicious by ClamAV with the signature Ppt.Exploit.Apptom-10029459-0, indicating it exploits a known vulnerability in Microsoft PowerPoint. Although VBA macros could not be extracted due to an unsupported format, the ClamAV detection strongly suggests an exploit is present. The document body contains garbled text, offering no further clues to the specific lure.
Heuristics 2
-
ClamAV: Ppt.Exploit.Apptom-10029459-0 critical CLAMAV_DETECTIONClamAV detected this file as malware: Ppt.Exploit.Apptom-10029459-0
-
Unsupported Office format for VBA extraction info OFFICE_FORMAT_UNSUPPORTEDolevba could not extract VBA macros (error); format-agnostic byte-level scans still ran. Likely legacy, encrypted, or malformed OLE/OOXML — re-scanning the same bytes will yield the same outcome.
Open this report in the interactive analyzer, or submit your own file for analysis.