oleobj: check remote template detection with XML obfuscation

decalage2 / oletools

oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.

http://www.decalage.info/python/oletools

Other

2.89k stars 565 forks source link

oleobj: check remote template detection with XML obfuscation #708

Open decalage2 opened 3 years ago

decalage2 commented 3 years ago

See samples from https://twitter.com/DissectMalware/status/1421723540978470913