MALICIOUS
60
Risk Score
Malware Insights
MITRE ATT&CK
T1200 Hardware Add-Or Replace Or Update
The file is detected as Win.Exploit.CVE_2001_0500-1, indicating it exploits a known vulnerability. The document body contains output from network scanning tools like nmap and telnet, along with references to an exploit script, suggesting the file's purpose is to facilitate network reconnaissance and potentially exploit vulnerabilities on the target IP address 172.16.16.5. The embedded URLs point to this same IP address.
Heuristics 2
-
ClamAV: Win.Exploit.CVE_2001_0500-1 critical CLAMAV_DETECTIONClamAV detected this file as malware: Win.Exploit.CVE_2001_0500-1
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://172.16.16.5/postinfo.html
- http://172.16.16.5/postinfo.htmlContent-Type
Open this report in the interactive analyzer, or submit your own file for analysis.