MALICIOUS
80
Risk Score
Malware Insights
MITRE ATT&CK
T1564.003 Obfuscated Files or Information: Hidden Window
The document is password-encrypted and contains malformed OLE structures, specifically a CFB FAT corruption and a FAT chain loop. These characteristics suggest an attempt to obfuscate or protect malicious content within the file, making it difficult to analyze directly. The encryption and corruption are likely intended to evade static analysis and detection mechanisms.
Heuristics 2
-
Encrypted Office package with CFB FAT corruption critical OLE_ENCRYPTED_AND_MALFORMEDEncrypted-package shape co-occurs with FAT-chain corruption — the documented combined evasion form.
-
Office document is password-encrypted medium OFFICE_ENCRYPTED_PACKAGEOLE container holds MS-OFFCRYPTO encrypted package (Standard Encryption (Office 2007, AES)).
Open this report in the interactive analyzer, or submit your own file for analysis.