MALICIOUS
100
Risk Score
Malware Insights
MITRE ATT&CK
T1059.003 Windows Command Shell
T1204.002 Malicious File
The sample contains an embedded PE executable, identified by the OLE_EMBEDDED_EXE heuristic. Additionally, the SE_CLIPBOARD_COMMAND_LURE heuristic indicates that the document explicitly instructs the user to copy and paste content into a command-line interface. This strongly suggests a social engineering tactic to trick the user into running the embedded executable, which is likely a downloader or initial access payload. No scripts were extracted, limiting further analysis of the embedded executable's behavior.
Heuristics 2
-
Embedded PE executable critical OLE_EMBEDDED_EXEMZ/PE header found inside document — possible embedded executable
-
Clipboard command execution lure high SE_CLIPBOARD_COMMAND_LUREDocument tells the user to copy or paste clipboard content into Run, PowerShell, cmd, or another shell-like execution context
Extracted artifacts 1
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
embedded_office_00006000.exec3b3652162f70b05e02ba7f5544144e6b8e4ff2ff9b842968ec88c61d3eb7d89 |
embedded-pe | Office MZ+PE at offset 0x6000 | 94208 bytes |
Open this report in the interactive analyzer, or submit your own file for analysis.