Win.Trojan.W-283 — Office (OLE) malware analysis

Static analysis result for SHA-256 b1c09104ecd0e4d4…

MALICIOUS

Office (OLE)

51.5 KB Created: 1997-01-21 02:04:00 Authoring application: Microsoft Word for Windows 95
MD5: 96d6dd0250b5f8b8bb9a2f7603cceaa2 SHA-1: cbe997dc2d96086cf1c031746a519a30a3465c13 SHA-256: b1c09104ecd0e4d43edf59737d8d7d68034d101dda840a0a8cb6388c096bff8a
60 Risk Score

Malware Insights

Win.Trojan.W-283 · confidence 85%

MITRE ATT&CK
T1059.001 PowerShell

The file is identified as a Windows Trojan (Win.Trojan.W-283) by ClamAV. The document body presents academic content to mask its malicious nature. No scripts or further IOCs were extracted, but the critical heuristic firing strongly suggests malicious intent.

Heuristics 1

  • ClamAV: Win.Trojan.W-283 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Win.Trojan.W-283