MALICIOUS
80
Risk Score
Malware Insights
MITRE ATT&CK
T1059.005 Visual Basic
The file is a Microsoft Word document containing VBA macros, as indicated by the OLE_VBA_MACROS heuristic. The ClamAV detection 'Doc.Trojan.Passbox-4' strongly suggests malicious intent. The document body presents itself as official legislation concerning municipal salaries, likely a lure to trick the user into enabling macros. No specific IOCs like URLs or hashes were extracted, and the VBA macro content was not detailed enough to determine its exact function beyond being present.
Heuristics 2
-
ClamAV: Doc.Trojan.Passbox-4 critical CLAMAV_DETECTIONClamAV detected this file as malware: Doc.Trojan.Passbox-4
-
VBA macros detected medium OLE_VBA_MACROSDocument contains VBA macro code
Extracted artifacts 1
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
macros.bas436130a7e719989060e53da1f6f927b7fc178da19d98dc19aaa3981447da2e74 |
vba-macro | oletools.olevba.extract_macros (decoded VBA source) | 3527 bytes |
Open this report in the interactive analyzer, or submit your own file for analysis.