W97M/Wrench.E

description-logoAnalysis

  • Virus consists of one macro module named "Skyline"
  • Virus hooks Word event handlers which prevents the opening of documents
  • Virus contains these comment lines-

    'Name - W97M/Skyline.B
    'Author - [Bench]

Telemetry logoTelemetry

Detection Availability

FortiClient
Extreme
FortiMail
Extreme
FortiSandbox
Extreme
FortiWeb
Extreme
Web Application Firewall
Extreme
FortiIsolator
Extreme
FortiDeceptor
Extreme
FortiEDR