MALICIOUS
60
Risk Score
Malware Insights
MITRE ATT&CK
T1059.003 Windows Command Shell
The sample is an RTF file containing a batch script. The script's primary function appears to be renaming existing executables in the directory to 'V<original_name>' and hiding them with the '+h' attribute. It then copies itself into the directory and renames it to an executable extension, potentially to masquerade as a legitimate program or to facilitate further execution. The ClamAV heuristic also flags it as a legacy trojan.
Heuristics 1
-
ClamAV: Legacy.Trojan.Trojan-92 critical CLAMAV_DETECTIONClamAV detected this file as malware: Legacy.Trojan.Trojan-92
Open this report in the interactive analyzer, or submit your own file for analysis.