MALICIOUS
62
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
The file was detected by ClamAV as 'Onenote.Downloader.Agent-9986032-1', indicating a known downloader. The document body contains text that appears to be a fake business communication, requesting confirmation of an order and a quotation, which is a common social engineering lure. No VBA macros were extractable due to an unsupported format, but the ClamAV detection and document content strongly suggest a malicious downloader.
Heuristics 2
-
ClamAV: Onenote.Downloader.Agent-9986032-1 critical CLAMAV_DETECTIONClamAV detected this file as malware: Onenote.Downloader.Agent-9986032-1
-
Unsupported Office format for VBA extraction info OFFICE_FORMAT_UNSUPPORTEDolevba could not extract VBA macros (FileOpenError); format-agnostic byte-level scans still ran. Likely legacy, encrypted, or malformed OLE/OOXML — re-scanning the same bytes will yield the same outcome.
Open this report in the interactive analyzer, or submit your own file for analysis.