MALICIOUS
60
Risk Score
Malware Insights
MITRE ATT&CK
T1059.001 PowerShell
The sample is a Microsoft Word document containing technical text about optical storage technology. A critical heuristic firing indicates XOR-encoded strings, suggesting obfuscated malicious content. While no scripts were extracted, the presence of encoded strings and the document's nature point towards a downloader or dropper attempting to conceal its payload.
Heuristics 1
-
XOR-encoded strings (key 0xFC) critical SC_XOR_ENCODEDFound 8 Windows library/API name(s) XOR-encoded with single-byte key 0xFC: 'iphlpapi.dll', 'iphlpapi.dll', 'LoadLibraryW', 'LoadLibraryW', 'GetProcAddress', 'GetProcAddress', 'InternetOpenW', 'HttpOpenRequestW'
Open this report in the interactive analyzer, or submit your own file for analysis.