MALICIOUS
60
Risk Score
Malware Insights
MITRE ATT&CK
T1204.002 Malicious File
T1566.001 Spearphishing Attachment
The sample is a malicious OLE document that exploits CVE-2026-21509 to bypass Protected View. The document body is a tender notice, which is a common lure for phishing attacks. The exploit allows the document to execute arbitrary code, likely to download further malicious payloads or steal sensitive information.
Heuristics 1
-
OLE/COM security bypass — CVE-2026-21509 (Killbit/Protected View bypass) critical CVE_2026_21509OLE/COM security bypass — CVE-2026-21509 (Killbit/Protected View bypass)
Open this report in the interactive analyzer, or submit your own file for analysis.