MALICIOUS
60
Risk Score
Malware Insights
MITRE ATT&CK
T1566.002 Phishing: Spearphishing Attachment
T1204.002 Malicious File Execution: Malicious File
The file is identified by ClamAV as Xls.Dropper.QbotDocu12020-9818439-0, strongly indicating it is a Qbot variant used for dropping secondary payloads. The file's nature as an Excel document suggests it was likely delivered via spearphishing. The primary function is to execute malicious code, likely leading to further infection.
Heuristics 1
-
ClamAV: Xls.Dropper.QbotDocu12020-9818439-0 critical CLAMAV_DETECTIONClamAV detected this file as malware: Xls.Dropper.QbotDocu12020-9818439-0
Open this report in the interactive analyzer, or submit your own file for analysis.