MALICIOUS
100
Risk Score
Malware Insights
MITRE ATT&CK
T1059.005 Visual Basic
T1204.002 Malicious File
The sample is a malicious DOC file containing VBA macros. High-severity heuristics indicate the presence of CreateObject and GetObject calls, commonly used by malicious macros to download and execute payloads. No document body text or scripts were extracted, but the heuristic firings strongly suggest a macro-based downloader attack pattern. The absence of specific IOCs means the exact payload and delivery mechanism cannot be determined from this analysis alone.
Heuristics 3
-
CreateObject call high OLE_VBA_CREATEOBJCreateObject call
-
GetObject call high OLE_VBA_GETOBJGetObject call
-
VBA macros detected medium OLE_VBA_MACROSDocument contains VBA macro code
Extracted artifacts 1
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
macros.bas4d9e355743b88daa1e79430d91685ad5a1647cf5dbafb1b0a80053db48a695b4 |
vba-macro | oletools.olevba.extract_macros (decoded VBA source) | 3718 bytes |
Open this report in the interactive analyzer, or submit your own file for analysis.