Matthew received an email with an attachment named "YouWon$10Grand.zip." The zip file contains a file named "HowToClaimYourPrize.docx.exe." Out of excitement and curiosity, Matthew opened the said fil

A keylogger is specifically designed to record and exfiltrate keystrokes; the described malware's primary behaviors are deception, persistence, and C2 beaconing - none of which indicate keystroke capture.

A Trojan horse is malware that masquerades as a legitimate or appealing file to trick users into running it - here the executable is disguised with a .docx double extension inside a tempting zip file. Once executed, it copies itself to a persistence location (APPDATA\IocaI) and beacons to a command-and-control server to download further payloads, which are hallmark behaviors of a Trojan dropper or downloader subtype.

A worm self-replicates and propagates autonomously across networks without requiring user interaction or disguising itself as another file type.

A macro virus embeds malicious VBA code inside document files (such as Word or Excel) and executes within the host Office application, whereas this malware is a standalone executable disguised as a document.