Office (OLE) / .XLS malware analysis — malicious · aa915194f8890550

MALICIOUS

Office (OLE) / .XLS

100.0 KB Created: 1999-12-06 04:30:55 Authoring application: Microsoft Excel

MD5: d01e750cbcaae83cc9351c6797630626 SHA-1: 1b13bd919098fccbf77ff251b159c4a1dc8ce17c SHA-256: aa915194f8890550d1859dec0cf03a27fd704772d181c1e60519e0b9af0296d9

120 Risk Score

Malware Insights

MITRE ATT&CK

T1059.005 Visual Basic

The file is an OLE Excel spreadsheet that contains VBA macros, specifically an Auto_Open macro, which is a common technique for executing malicious code upon opening the document. ClamAV detection further confirms its malicious nature. The document body contains technical specifications for a multimeter, which appears to be a lure to disguise the malicious macro content.

Heuristics 3

ClamAV: Doc.Macro.Laroux-5893719-0 critical CLAMAV_DETECTION

ClamAV detected this file as malware: Doc.Macro.Laroux-5893719-0
Auto_Open macro high OLE_VBA_AUTO

Auto_Open macro
VBA macros detected medium OLE_VBA_MACROS

Document contains VBA macro code

Extracted artifacts 1

Files carved from inside the sample during analysis.

Filename	Kind	Source	Size
`macros.bas` `37f2f173fa7749767f71b86dd3222465095970e258112ac07702497c43b29124`	vba-macro	oletools.olevba.extract_macros (decoded VBA source)	3424 bytes

Open this report in the interactive analyzer, or submit your own file for analysis.