Emprisa Maldoc Lab

Reconstruct fragmented shellcode from a malicious RTF document and emulate its execution using `rtfdump.py` and `scdbg` to identify CVE-2017-11882 payload delivery.

Category:
Malware Analysis
Tactics:
Initial AccessExecutionStealthCommand and Control
Tools:
Microsoft office IDErtfdump.pyScdbg or SpeakeasyDebugger
medium
Walkthrough Available
Sign in to Download Lab Files