Virus Bulletin :: Run your malicious VBA macros anywhere!
Reverse engineering obfuscated code – 0xf0x.com – Malware, Threat Hunting & Incident Response
Evolution of Excel 4.0 Macro Weaponization – Part 2
Overwrite permissions
excel - Use "ADODB.Stream" to convert ANSI to UTF-8, miss 1-2 character in the first row - Stack Overflow
Report Ties North Korean Attacks to New Malware, Linked by Word Macros
SELECT XMRig FROM SQLServer – The DFIR Report
How to disassemble a Word document with embedded macros – Paul Cimino
Double-click me not: Malicious proxy settings in OLE Embedded Script - Microsoft Security Blog
Rogue Shortcuts: LNK'ing to Badness
Nemucod Adds Ransomware Routine
Find And Extract Sharepoint Files With TSQL – Mikes Data Work
Thug in 5 minutes – The Honeynet Project
Threat actors leverage EternalBlue exploit to deliver non-WannaCry payloads | Mandiant
Macro-based Office Malware using Cloud Services - Netskope
Rewterz Threat Alert – IcedID Banking Trojan – Active IOCs – Russian-Ukrainian Cyber Warfare | Rewterz
Download file using WinHttp & ADODB method - Simple Excel VBA
Lord EK: A New Exploit Kit with an Ambitious Name | Trustwave
Trojanized Adobe installer used to install DragonOK's new custom backdoor | Forcepoint
njRAT v0.7d vbs to exe Obfuscation Simple Method | Infected Zone Forums
computing and/or coding: Writing Pure UTF-8 file in vba using ADODB.Stream
7.png
ADODB.Stream SaveToFileメソッド - ray88's diary
iis - VBScript error ADODB.Stream : Write to the file failed - Stack Overflow
BazarLoader: Using LoLBins through Office Documents to Deliver Payloads - Netskope
Malware Analysis Report: Nemucod Ransomware
