MALICIOUS
60
Risk Score
Malware Insights
MITRE ATT&CK
T1059.005 Visual Basic
The file is a Microsoft Word document containing VBA macros, specifically triggering an AutoOpen macro. This indicates an attempt to automatically execute code when the document is opened. While the macro content is truncated, the presence of an AutoOpen macro strongly suggests a malicious intent, likely to download and execute a secondary payload. No specific family could be identified from the available evidence.
Heuristics 2
-
AutoOpen macro high OLE_VBA_AUTOOPENAutoOpen macro
-
VBA macros detected medium OLE_VBA_MACROSDocument contains VBA macro code
Extracted artifacts 1
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
macros.bas15e536d83f91cdc6d61766ab9e2bdebf5b8b07c3655d99b11e297b061cdd2815 |
vba-macro | oletools.olevba.extract_macros (decoded VBA source) | 1860 bytes |
Open this report in the interactive analyzer, or submit your own file for analysis.