MALICIOUS
60
Risk Score
Malware Insights
MITRE ATT&CK
T1566.002 Phishing: Spearphishing Attachment
T1204.002 Malicious File: User Execution: Malicious File
The file is identified by ClamAV as 'Xls.Dropper.QbotDocu12020-9818439-0', indicating it functions as a dropper for a secondary payload. The document's structure and the heuristic firing strongly suggest it's intended to be delivered as a malicious attachment, likely relying on user interaction to execute the dropped malware. No document body or scripts were extracted, limiting further analysis of the specific lure or execution method.
Heuristics 1
-
ClamAV: Xls.Dropper.QbotDocu12020-9818439-0 critical CLAMAV_DETECTIONClamAV detected this file as malware: Xls.Dropper.QbotDocu12020-9818439-0
Open this report in the interactive analyzer, or submit your own file for analysis.