MALICIOUS
120
Risk Score
Malware Insights
MITRE ATT&CK
T1059.005 Visual Basic
The file is a Microsoft Word document containing VBA macros, specifically a Document_Open macro. This macro is designed to execute automatically when the document is opened, indicating a malicious intent to run arbitrary code. The ClamAV detection 'Doc.Trojan.Myco-1' further confirms its malicious nature. No specific IOCs like URLs or file paths were extracted from the limited document body, but the presence and execution of the macro are sufficient indicators of compromise.
Heuristics 3
-
ClamAV: Doc.Trojan.Myco-1 critical CLAMAV_DETECTIONClamAV detected this file as malware: Doc.Trojan.Myco-1
-
Document_Open macro high OLE_VBA_DOCOPENDocument_Open macro
-
VBA macros detected medium OLE_VBA_MACROSDocument contains VBA macro code
Extracted artifacts 1
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
macros.bas7b9703567caef08859400d5c028546ac556a397c23a2f8007c7afc680ad6c341 |
vba-macro | oletools.olevba.extract_macros (decoded VBA source) | 2917 bytes |
Open this report in the interactive analyzer, or submit your own file for analysis.