Win.Trojan.Laroux-45 — Office (OLE) malware analysis

Static analysis result for SHA-256 8b9ed3748909645c…

MALICIOUS

Office (OLE)

16.5 KB Created: 1998-09-10 12:19:40 Authoring application: Microsoft Excel First seen: 2012-06-14
MD5: 6f126a70efbeda8156dc8003404d03c8 SHA-1: af00ca54b13444810cf71c67a0e7ca1a2f849e48 SHA-256: 8b9ed3748909645cd05e1ccd8d0682482bda85d4fd5f2d6cd3642708fc677aa6
120 Risk Score

Malware Insights

Win.Trojan.Laroux-45 · confidence 95%

MITRE ATT&CK
T1059.005 Visual Basic

The file is identified as a malicious Excel 5 macro virus, specifically the Laroux family (Win.Trojan.Laroux-45). Heuristic analysis indicates the presence of auto_open and other macro markers commonly associated with this threat. The macro virus likely executes malicious code when the document is opened, aiming to compromise the user's system.

Heuristics 2

  • ClamAV: Win.Trojan.Laroux-45 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Win.Trojan.Laroux-45
  • Excel 5 Laroux/Larou-CV macro-virus marker cluster critical OLE_XLS5_LAROUX_MACRO_VIRUS
    Legacy Excel workbook contains a Laroux/Larou-CV macro-virus marker cluster including auto_open execution and workbook/module replication strings. This is a narrow indicator for an infected legacy Excel macro workbook.

Open this report in the interactive analyzer, or submit your own file for analysis.