Macro execution from email attachment

Alert details

Alert IDda637912300005

Created2026-08-15 20:07 UTC

Detection source-

Threat family-

SourceDemo

Entities

Device corp-wks-0421 Medium riskMedium exposure

Userm.taylor@propera.local

Related incidentINC-01004

MITRE ATT&CK

T1566.001 T1204.002

Evidence

File

Macro-enabled document

C:\Users\m.taylor\Downloads\invoice_q3.docm

SHA1 5ba93c9db0cff93f52b521d7420e43f6eda2784f · SHA256

Process

WScript execution

wscript.exe C:\Users\m.taylor\AppData\Local\Temp\update.vbs

C:\Windows\System32\wscript.exe