Malware Analysis - MSHTML

Today we tackle the last (as of October 10th, 2021) of the Malware Analysis exercises on the Lets Defend platform! This covers the 0-day CVE-2021-40444 around MSHTML!
NOTES:
msrc.microsoft...
inquest.net/bl...
isc.sans.edu/f...
isc.sans.edu/f...
• Simple Analysis Of A C...
isc.sans.edu/f...
• CVE-2021-40444 Maldocs...

[@nelsonnelson31]

Jesus this lab is extremely intense ahaha not able to complete it

[@GladiatorPower]

thx for this video. this helped alot because ive never used oledump before. this provided me with greater understanding.

[@bulba888]

its easy to do with virus total, but reverse engineering with Python its a lot. I only have Sec+ and Google CC, Letsdefend SOC is my 1st course. Malware analysis as hard as i thought, log analysis is easier.

[@mahirkhan4124]

Instead of doing all this , you can use first oleid on that document where u will see it has external object in the file. Then use oleobj to extract the domain from all the file 😁

[@SivakarthikeyanK-r9z]

Have you completed malware analysis skill path brother?

[@mahirkhan4124]

@@SivakarthikeyanK-r9z no