Sample: 402a722d58368018ffb78eda78280a3f1e6346dd8996b4e4cd442f30e429a5cf
Tools: strings.py, base64dump.py, re-search.py, byte-stats.py
ISC Diary Entry: Decoding Obfuscated BASE64 Statistically
Month: June 2022
RTF & ms-msdt & Preview Pane
Tools: rtfdump.py, oledump.py, olemake.py (private tool, not available for download)
Maldoc .DOCX MSDT Inside Sandbox
This was a quick recording without microphone.
Didier Stevens Videos 