W97M/Class.D

description-logoAnalysis

  • Virus consists of one macro module within the class storage
  • Virus hooks Word event handlers which prevents the opening or closing of documents
  • Polymorphic by inserting comment lines between instruction code in the virus body

Telemetry logoTelemetry

Detection Availability

FortiClient
Extreme
FortiMail
Extreme
FortiSandbox
Extreme
FortiWeb
Extreme
Web Application Firewall
Extreme
FortiIsolator
Extreme
FortiDeceptor
Extreme
FortiEDR