Trojan downloader word macro

SHA256 – 4221a9922d97fa329b3dbb27e37522448958cbfa186a6ef722e48d63f9753808 Download link – VirusTotal I downloaded this word document and checked whether macro present and it auto executes on opening document. Yes, it does and it has obfuscated strings too. I opened document and navigated to > Views > Macros > View Macros > Selected “autoopen” > Edit I renamed autoopen() to… Read More Trojan downloader word macro

May 14, 2019July 9, 2020 AnuragLeave a comment

Word macro drops Emotet malware

SHA256 : 1043dd7647105b035acbc027e0fa448f329ea5620956a1ba82dc254fc7bd6e29 I have downloaded word document for analysis from VirusTotal I checked file with Oletools to verify macro exist and is it auto executable. In below screenshot, it can be seen, the macro is present and auto executable. I opened word document and Enabled Editing. Views > Macros > View Macros > Select… Read More Word macro drops Emotet malware

May 4, 2019July 9, 2020 Anurag3 Comments

Malware Analysis

by Anurag

Month: May 2019

Trojan downloader word macro

Word macro drops Emotet malware