avvpghizzoni doc 13.06.22.doc

Classification: Malicious

avvpghizzoni doc 13.06.22.doc is a malicious file sample. Linked to Svcready malware. Reported by 1 threat source, last seen 2022-06-13.

Detection summary

  • 52 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: SVCREADY (S1064)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
SVCReady MalwareBazaar Abuse.ch 2022-06-13 07:39:44 2022-06-13 07:39:44 malicious-activity S1064 SVCReady

Sample information

Filenames
avvpghizzoni doc 13.06.22.doc
File type
application/zip
MD5
cac252a8141e2fbded7a94f539b43365
SHA-1
98580de22fc6aa2625df89e57c334449d394da5a
SHA-256
20e3a4063cb48aaa2ca9b95b5deefd95ca9f4bfd1477f40e20fe3159701ec32c
First indexed
2022-06-13 09:15:13
Last updated
2025-10-02 18:45:17

Antivirus detections

EngineDetection
Elasticmalicious (high confidence)
FireEyeVBA:Amphitryon.3574
AlibabaTrojan:Office/SAgent.8a826904
ArcabitVBA:Amphitryon.DDF6
ESET-NOD32VBA/Agent.AEY
AvastScript:SNH-gen [Trj]
ClamAVDoc.Downloader.SVCReady-81fe832081fe7c7c-9951593-0
KasperskyUDS:DangerousObject.Multi.Generic
BitDefenderVBA:Amphitryon.3574
EmsisoftVBA:Amphitryon.3574 (B)
F-SecureMalware.VBA/Agent.urvko
DrWebTrojan.Siggen18.6702
McAfee-GW-EditionBehavesLike.Bad-VBA.tc
SentinelOneStatic AI - Malicious OPENXML
AviraVBA/Agent.urvko
MicrosoftTrojan:O97M/Sadoca.C!ml
ZoneAlarmHEUR:Trojan.MSOffice.SAgent.gen
GDataVBA:Amphitryon.3574
CynetMalicious (score: 99)
Acronissuspicious
MAXmalware (ai score=80)
RisingMalware.Obfus/[email protected] (VBA)
FortinetVBA/Amphitryon.3574!tr
AVGScript:SNH-gen [Trj]
ALYacTrojan.Downloader.DOC.Gen
AVGVBA:Obfuscated-AH [Cryp]
Antiy-AVLTrojan/Macro.Agent
ArcabitHEUR.VBA.CG.1
AvastVBA:Obfuscated-AH [Cryp]
AviraHEUR/Macro.Downloader
BitDefenderTrojan.GenericKD.39837476
CTXdocx.trojan.generic
EmsisoftTrojan.GenericKD.39837476 (B)
F-SecureHeuristic.HEUR/Macro.Downloader
FortinetVBA/Agent.PF!tr
GDataTrojan.GenericKD.39837476
GoogleHighly Suspicious
IkarusTrojan-Downloader.PS.Agent
KingsoftMacro.Word.Generic.jm
LionicTrojan.Multi.Generic.4!c
MicroWorld-eScanTrojan.GenericKD.39837476
RisingMalware.Obfus/[email protected] (VBA)
SkyhighRDN/Generic.dx
SymantecTrojan.Gen.NPE
TACHYONSuspicious/WOX.Obfus.Gen
TencentTrojan.MsOffice.MacroS.11021975
TrellixENSRDN/Generic.dx
TrendMicroTrojan.O97M.SVCREADY.SMAS
TrendMicro-HouseCallTrojan.O97M.SVCREADY.SMAS
VIPRETrojan.GenericKD.39837476
VaristPP97/Dloader.L
huorongHEUR:OMacro/Obfuscated.x