MALICIOUS
62
Risk Score
Malware Insights
MITRE ATT&CK
T1204.002 Malicious File
The file is identified as malicious by ClamAV with the signature Ppt.Exploit.Apptom-10029459-0, indicating it is a PowerPoint exploit. OleVBA failed to extract macros, suggesting potential encryption or a malformed OLE structure, but format-agnostic scans confirmed maliciousness. The document body contains garbled text, which is common in exploited files.
Heuristics 2
-
ClamAV: Ppt.Exploit.Apptom-10029459-0 critical CLAMAV_DETECTIONClamAV detected this file as malware: Ppt.Exploit.Apptom-10029459-0
-
Unsupported Office format for VBA extraction info OFFICE_FORMAT_UNSUPPORTEDolevba could not extract VBA macros (error); format-agnostic byte-level scans still ran. Likely legacy, encrypted, or malformed OLE/OOXML — re-scanning the same bytes will yield the same outcome.
Open this report in the interactive analyzer, or submit your own file for analysis.