Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 b35da9615cf92d20…

MALICIOUS

Office (OLE)

22.5 KB Created: 1998-02-12 17:58:36 Authoring application: Microsoft Excel First seen: 2012-06-14
MD5: d15265e4863b720486b715af206b7f98 SHA-1: 35b5cfc2c31491718e2170ce6c3b4834114a327c SHA-256: b35da9615cf92d206e71466ef961b7284d21f6408484c7825429bf882d25a7b7
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The file is identified as a malicious Excel spreadsheet by ClamAV with the signature Xls.Trojan.Trasher-1. While no specific VBA or script content was extracted, the file's nature as an Office document and its malicious verdict strongly suggest it was intended to be delivered as a spearphishing attachment to trick users into opening it and triggering malicious behavior.

Heuristics 1

  • ClamAV: Xls.Trojan.Trasher-1 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Xls.Trojan.Trasher-1