Tools: oledump.py

Twitter: @JohnLaTwC

Sample: 1bf30ae0d9fb2b9fcf16575e40f26110

Tools: rtfdump.py

ISC Diary entry: Dealing with obfuscated RTF files

Sample: a3d89108e4a13900c299d7c5f6d687e0

 

Tools: pdfid.py, pdf-parser.py

Sample: 58ddf75566260679506fdaf4da2adda5

Tools: oledump.py, base64dump.py

Sample: 9c4c3234f20b6102569216675b48c70a

ISC Diary Entry: It’s Not An Invoice …

Tools: oledump.py, zipdump.py, base64dump.py, ViperMonkey

Sample: a6434a6054470ec73d1d21475f6a3a59