Win.Trojan.Laroux-54 — Office (OLE) malware analysis

Static analysis result for SHA-256 b982c3954e00c6dc…

MALICIOUS

Office (OLE)

19.0 KB Authoring application: Microsoft Excel First seen: 2012-06-14
MD5: ff74a15b04d6f6a49fa4879896dc71a4 SHA-1: 78a459de16bae089d3f4850927a81dd8223e0a6e SHA-256: b982c3954e00c6dc6c5d75ed0f446dbc899be314af7506fd8cb8ea7e74676fba
120 Risk Score

Malware Insights

Win.Trojan.Laroux-54 · confidence 95%

MITRE ATT&CK
T1059.005 Visual Basic

The file contains markers indicative of the Excel 5 Laroux macro virus, specifically triggering on sheet activation and workbook events. This family is known to execute malicious VBA code upon opening, often for downloading additional payloads.

Heuristics 2

  • ClamAV: Win.Trojan.Laroux-54 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Win.Trojan.Laroux-54
  • Excel 5 Laroux/Larou-CV macro-virus marker cluster critical OLE_XLS5_LAROUX_MACRO_VIRUS
    Legacy Excel workbook contains a Laroux/Larou-CV macro-virus marker cluster including auto_open execution and workbook/module replication strings. This is a narrow indicator for an infected legacy Excel macro workbook.

Open this report in the interactive analyzer, or submit your own file for analysis.