MALICIOUS
60
Risk Score
Malware Insights
MITRE ATT&CK
T1071.001 Web Protocols
T1566.001 Spearphishing Attachment
The sample is a malicious Microsoft Word document detected as Doc.Trojan.Venom-1 by ClamAV. The embedded VBA macro attempts to leverage Outlook to email the document to contacts, using the subject 'Important Message From [UserName]' and body 'Here is that document you asked for ... don't show anyone else Wink'. It also attempts to infect the Normal.dot template, likely to ensure persistence or further spread. The macro's obfuscation and self-modification suggest a downloader or worm-like behavior.
Heuristics 1
-
ClamAV: Doc.Trojan.Venom-1 critical CLAMAV_DETECTIONClamAV detected this file as malware: Doc.Trojan.Venom-1
Open this report in the interactive analyzer, or submit your own file for analysis.