SUSPICIOUS
30
Risk Score
Malware Insights
MITRE ATT&CK
T1566.002 Spearphishing Attachment
T1204.001 User Execution: Malicious Link
The document presents itself as an invitation to a business ethics seminar offering CPE credits. However, the heuristic 'SE_CALLBACK_LURE' indicates that the document contains a phone number intended for billing, refund, subscription, fraud, or security contexts. This strongly suggests a callback phishing or tech-support scam, where the user is prompted to call a fraudulent number. No scripts were extracted from this sample.
Heuristics 3
-
Callback phishing phone lure medium SE_CALLBACK_LUREDocument asks the user to call a phone number in billing, refund, subscription, fraud, or security context — consistent with callback phishing or tech-support scam patterns. Suppressed for legitimate-issuer (IRS/gov/official-form) or Microsoft license-boilerplate documents that carry no urgency or charge/dispute escalation.
-
External hyperlinks (6) low OOXML_EXTERNAL_HYPERLINKSDocument contains 6 external hyperlinks — clickable URLs are stored as external relationships. First target: about:blank
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL https://www.nasbaregistry.org/registry-forms--policies/fields-of-study Document hyperlink
- http://schemas.microsoft.com/office/word/2010/wordprocessingCanvasDocument hyperlink
- http://schemas.microsoft.com/office/mac/office/2008/mainDocument hyperlink
- http://schemas.openxmlformats.org/markup-compatibility/2006Document hyperlink
- http://schemas.openxmlformats.org/officeDocument/2006/relationshipsDocument hyperlink
- http://schemas.openxmlformats.org/officeDocument/2006/mathDocument hyperlink
- http://schemas.microsoft.com/office/word/2010/wordprocessingDrawingDocument hyperlink
- http://schemas.openxmlformats.org/drawingml/2006/wordprocessingDrawingDocument hyperlink
- http://schemas.openxmlformats.org/wordprocessingml/2006/mainDocument hyperlink
- http://schemas.microsoft.com/office/word/2010/wordmlDocument hyperlink
- http://schemas.microsoft.com/office/word/2010/wordprocessingGroupDocument hyperlink
- http://schemas.microsoft.com/office/word/2010/wordprocessingInkDocument hyperlink
- http://schemas.microsoft.com/office/word/2006/wordmlDocument hyperlink
- http://schemas.microsoft.com/office/word/2010/wordprocessingShapeDocument hyperlink
Open this report in the interactive analyzer, or submit your own file for analysis.