MALICIOUS
62
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
The file is a PowerPoint presentation that ClamAV detected as Doc.Trojan.Thus-8. OleVBA reported an unsupported format for VBA extraction, indicating potential obfuscation or encryption. The document body contains seemingly legitimate educational content, likely serving as a lure. The primary indicator of maliciousness is the ClamAV detection.
Heuristics 2
-
ClamAV: Doc.Trojan.Thus-8 critical CLAMAV_DETECTIONClamAV detected this file as malware: Doc.Trojan.Thus-8
-
Unsupported Office format for VBA extraction info OFFICE_FORMAT_UNSUPPORTEDolevba could not extract VBA macros (FileOpenError); format-agnostic byte-level scans still ran. Likely legacy, encrypted, or malformed OLE/OOXML — re-scanning the same bytes will yield the same outcome.
Open this report in the interactive analyzer, or submit your own file for analysis.