Static Malware Analysis with OLE Tools and CyberChef
ID: 0b4b4828-f89a-5624-b082-4b0597be14e4
STIX ID: report--0b4b4828-f89a-5624-b082-4b0597be14e4
Feed Name: On the Hunt
Threat Score
This is an instructional guide demonstrating static analysis of malicious Office documents with embedded VBA macros. It shows how to extract macros with oletools, decode Base64 and remove punctuation-based obfuscation with CyberChef, clean and rename variables to reveal logic, and identifies the macro as a dropper that attempts to download and execute a payload (noting similarity to Emotet-style distribution).
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
