False trigger on Libre Office

[tangocharliepdx]

I'm Using Libre Office for a brand new file, created by me and not even saved yet. After inserting an image, I attempted to modify it, right-clicked and selected Properties, and BOOM — MBAM nuked the process. No macros were included, it was a very simple doc.

 

Malwarebytes
www.malwarebytes.com

-Log Details-
Protection Event Date: 11/12/24
Protection Event Time: 11:31 AM
Log File: bb6f3a7c-a12c-11ef-9486-405bd8692fca.json

-Software Information-
Version: 4.6.17.334
Components Version: 1.0.2390
Update Package Version: 1.0.91656
License: Premium

-System Information-
OS: Windows 10 (Build 19044.3086)
CPU: x64
File System: NTFS
User: System

-Exploit Details-
File: 0
(No malicious items detected)

Exploit: 1
Exploit.OfficeSpawningBatchCommands, C:\WINDOWS\system32\cmd.exe C:\WINDOWS\system32\cmd.exe \c ver, Blocked, 725, 392684, 0.0.0, , 

-Exploit Data-
Affected Application: LibreOffice
Protection Layer: Application Behavior Protection
Protection Technique: Exploit Office spawning batch command blocked
File Name: C:\WINDOWS\system32\cmd.exe C:\WINDOWS\system32\cmd.exe \c ver
URL: 



(end)

 

[AdvancedSetup]

Thank you for your post @tangocharliepdx

I'm checking with support and will get back to you as soon as I hear back from them

Cheers

 

[Arthi]

Hi @tangocharliepdx

Thanks for posting. Please turn off "Office spawning batch command protection" setting and restart the Libreoffice app

[Porthos]

Any reason you are not using MB5?

 

Edited November 13 by Porthos