Extracting Files Embedded Inside Word Documents, (Tue, Dec 3rd)

This report demonstrates analysis of a malicious OOXML Word document that embeds an executable. It shows how to inspect the ZIP container, locate the OLE object, extract the embedded executable with oledump, and provides the embedded file's hash and VirusTotal link; the author notes the payload does not auto-execute and requires social engineering to run.