MaldocTrace: Emulating Malicious Office Macros Without Running Them

MaldocTrace is an open-source analyzer that tells you what a malicious Office document would do, without opening it in Office. It extracts VBA and Excel 4.0 macros, runs them in an interpreter where every Windows API, COM object and shell call is simulated, and reports the commands, payloads and IOCs with the exact module and line that produced... Weiterlesen: MaldocTrace: Emulating Malicious Office Macros Without Running Them