Vba2Graph

Vba2Graph 악성 Office 매크로 분석에 시간을 낭비하는 보안 연구자들을 위한 도구입니다. VBA 호출 그래프를 생성하며, 잠재적인 악성 키워드를 강조 표시합니다. 악성 매크로의 빠른 분석과 실행 흐름 이해를 쉽게 해줍니다. @MalwareCantFly 기능 키워드 강조 VBA 속성 지원 외부 함수 선언 지원 "Change" 실행 트리거를 사용하는 까다로운 매크로 멋진 색상 구성! 장점 ✓ 꽤 빠름 ✓ 야생에서 관찰된 대부분의 악성 매크로에서 잘 작동함 단점 ✗ 정적 동적으로 해석된 호출은 인식되지 않음 예제 예제 1...

The vulnerability of the Macro Analysis module in the ClamAV antivirus software package allows a hacker to trigger a service failure.

The vulnerability of the Excel XLM module in the ClamAV antivirus software package exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

ClamAV 输入验证错误漏洞

Clam AntiVirus ClamAV is an anti-virus package for use on UNIX-like systems. Mainly used in mail servers, using multi-threaded background operation, you can automatically upgrade the virus database. An infinite loop vulnerability exists in the Excel XLM macro analysis module in Clam AntiVirus...

Deep Learning to Find Malicious Email Attachments

Google presented its system of using deep-learning techniques to identify malicious email attachments: At the RSA security conference in San Francisco on Tuesday, Google's security and anti-abuse research lead Elie Bursztein will present findings on how the new deep-learning scanner for documents...

Malicious MS Office Macro Creator

Evil Clippy is a tool for creating malicious Microsoft Office macros: At BlackHat Asia we released Evil Clippy, a tool which assists red teamers and security testers in creating malicious MS Office documents. Amongst others, Evil Clippy can hide VBA macros, stomp VBA code via p-code and confuse...

SANNY Malware Delivery Method Updated in Recently Observed Attacks

Introduction In the third week of March 2018, through FireEye’s Dynamic Threat Intelligence, FireEye discovered malicious macro-based Microsoft Word documents distributing SANNY malware to multiple governments worldwide. Each malicious document lure was crafted in regard to relevant regional...