I published the following diary on isc.sans.org: “Analysis of a Maldoc with Multiple Layers of Obfuscation“.
Thanks to our readers, we get often interesting samples to analyze. This time, Frederick sent us a malicious Microsoft Word document called “Invoice_6083.doc” (which was delivered in a zip archive). I had a quick look at it and it was interesting enough for a quick diary… [Read more]
[The post [SANS ISC] Analysis of a Maldoc with Multiple Layers of Obfuscation has been first published on /dev/random]
Article Link: https://blog.rootshell.be/2017/04/21/sans-isc-analysis-maldoc-multiple-layers-obfuscation/