Malicious Office (OLE) / .DOC — malware analysis report

Static analysis result for SHA-256 fcbe98a93851b777…

MALICIOUS

Office (OLE) / .DOC

12.5 KB Created: 1998-11-04 18:02:00 Authoring application: Microsoft Word for Windows 95
MD5: 4071f1d6f0d43de228402816fc87032c SHA-1: 4223d27b5d14167089afb35fe60198aec73c17ed SHA-256: fcbe98a93851b777aecc85c01894169dd60bdae70f1cae45ba66a7e67e38c990
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The file is detected as Win.Trojan.MDMA-4 by ClamAV. The document body presents a seemingly legitimate business communication regarding a trademark dispute and a debit note, likely intended to trick the recipient into opening a malicious attachment or enabling macros. No scripts were extracted from this sample.

Heuristics 1

  • ClamAV: Win.Trojan.MDMA-4 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Win.Trojan.MDMA-4