MALICIOUS
60
Risk Score
Malware Insights
MITRE ATT&CK
T1204.002 Malicious File
T1566.001 Spearphishing Attachment
The sample is an XLS file that fired a critical heuristic for CVE-2026-21509, indicating an attempt to bypass Office Protected View. This suggests the file is designed to exploit this vulnerability upon opening. No document body or scripts were extracted, but the heuristic strongly points to a malicious exploit document.
Heuristics 1
-
OLE/COM security bypass — CVE-2026-21509 (Killbit/Protected View bypass) critical CVE_2026_21509OLE/COM security bypass — CVE-2026-21509 (Killbit/Protected View bypass)
Open this report in the interactive analyzer, or submit your own file for analysis.