MALICIOUS
60
Risk Score
Malware Insights
MITRE ATT&CK
T1218.005 Client Execution: Signed Binary Proxy Execution
T1566.001 Spearphishing Attachment
The file is an Office document that triggered a critical ClamAV heuristic for Xml.Exploit.DDE_Abuse. This indicates the document is likely attempting to exploit Dynamic Data Exchange (DDE) to execute commands, a common technique for initial execution of malicious payloads. No specific family could be identified from the available evidence.
Heuristics 1
-
ClamAV: Xml.Exploit.DDE_Abuse-9987933-1 critical CLAMAV_DETECTIONClamAV detected this file as malware: Xml.Exploit.DDE_Abuse-9987933-1
Open this report in the interactive analyzer, or submit your own file for analysis.