Yohimbe — Office (OLE) malware analysis

Static analysis result for SHA-256 45428dd764eeafb1…

MALICIOUS

Office (OLE)

24.5 KB Authoring application: Microsoft Excel First seen: 2012-06-14
MD5: 655067552b348c2ba7b7de07b0ebcc45 SHA-1: 0161479470c2b2a339bf2716f3fa7aa7ae49c9f6 SHA-256: 45428dd764eeafb17b25f48c95bc3f9244d6f20061bc56ee6b118b4e7d45bad3
60 Risk Score

Malware Insights

Yohimbe · confidence 90%

MITRE ATT&CK
T1204.002 Malicious File

The file is identified as malicious by ClamAV, specifically as Win.Trojan.Yohimbe-1. The presence of this detection strongly suggests the file is part of the Yohimbe malware family, which is known for its malicious capabilities. The document body is garbled, providing no further context on the lure.

Heuristics 1

  • ClamAV: Win.Trojan.Yohimbe-1 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Win.Trojan.Yohimbe-1