SUSPICIOUS
30
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
The document contains external hyperlinks and a callback phishing lure, suggesting it is designed to trick the user into contacting a malicious entity. While no scripts were extracted, the presence of external links and the callback lure strongly indicate a phishing or scam attempt, likely delivered as a spearphishing attachment. The document body discusses business ethics but is likely a pretext for the scam.
Heuristics 3
-
Callback phishing phone lure medium SE_CALLBACK_LUREDocument asks the user to call a phone number in billing, refund, subscription, fraud, or security context — consistent with callback phishing or tech-support scam patterns. Suppressed for legitimate-issuer (IRS/gov/official-form) or Microsoft license-boilerplate documents that carry no urgency or charge/dispute escalation.
-
External hyperlinks (6) low OOXML_EXTERNAL_HYPERLINKSDocument contains 6 external hyperlinks — clickable URLs are stored as external relationships. First target: about:blank
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL https://www.nasbaregistry.org/registry-forms--policies/fields-of-study Document hyperlink
- http://schemas.microsoft.com/office/word/2010/wordprocessingCanvasDocument hyperlink
- http://schemas.microsoft.com/office/mac/office/2008/mainDocument hyperlink
- http://schemas.openxmlformats.org/markup-compatibility/2006Document hyperlink
- http://schemas.openxmlformats.org/officeDocument/2006/relationshipsDocument hyperlink
- http://schemas.openxmlformats.org/officeDocument/2006/mathDocument hyperlink
- http://schemas.microsoft.com/office/word/2010/wordprocessingDrawingDocument hyperlink
- http://schemas.openxmlformats.org/drawingml/2006/wordprocessingDrawingDocument hyperlink
- http://schemas.openxmlformats.org/wordprocessingml/2006/mainDocument hyperlink
- http://schemas.microsoft.com/office/word/2010/wordmlDocument hyperlink
- http://schemas.microsoft.com/office/word/2010/wordprocessingGroupDocument hyperlink
- http://schemas.microsoft.com/office/word/2010/wordprocessingInkDocument hyperlink
- http://schemas.microsoft.com/office/word/2006/wordmlDocument hyperlink
- http://schemas.microsoft.com/office/word/2010/wordprocessingShapeDocument hyperlink
Open this report in the interactive analyzer, or submit your own file for analysis.