Josh StroscheinApr 12, 20201 min readExcel 4 Macros – Get.Workspace ReferenceWith the recent resurgence of the use of Excel 4 macros in malicious excel documents, I’ve found myself scouring the internet looking for...
Josh StroscheinMar 25, 20203 min readMaldoc drops DLL and executes via ExecuteExcel4MacroBehavioral information is a key indicator used to determine if an office document is malicious or not. I’ve recently seen a series of...