MALICIOUS
60
Risk Score
Malware Insights
MITRE ATT&CK
T1204.002 Malicious File
T1559.001 Component Object Model Hijacking
The file is a malicious OLE document that exploits CVE-2026-21509 to bypass Protected View. The document body masquerades as procurement instructions for a surveillance system, aiming to trick the user into opening it. The exploitation of a known vulnerability suggests an attempt to deliver a secondary payload, though no specific details were extracted.
Heuristics 1
-
OLE/COM security bypass — CVE-2026-21509 (Killbit/Protected View bypass) critical CVE_2026_21509OLE/COM security bypass — CVE-2026-21509 (Killbit/Protected View bypass)
Open this report in the interactive analyzer, or submit your own file for analysis.