Sample

Metadata

SHA256: 9887f1e95b4e11825941bd207400d1cc1580a7d438969f6c8d8c656551d339e2
Difficulty: easy
Platform: Windows
Tags: loader macro office
Likes: 0
Views: 3
Submitter: struppigel

Analysis

Goal

Figure out the download URL of this malware with static analysis

Description

This malware is an office document with Macros. It uses AutoOpen to download the next stage. Analyze the VBA with oletools.

Recommended Tools

oletools

Solutions

Office Dropper by 0xdeluks

1
Analyzing MS Office Macro Malware with Oletools Reference by struppigel

2

Image

Sample image

Comments

Please login to view and post comments.