XLM Macros Lab

Scenario: Recently, we have seen a resurgence of Excel-based malicous office documents. Howerver, instead of using VBA-style macros, they are using older style Excel 4 macros. This changes our approach to analyzing these documents, requiring a slightly different set of tools. In this challenge, you, as a security blue team analyst will get hands-on with two documents that use Excel 4.0 macros to perform anti-analysis and download the next stage of the attack.Archive Verification:Zip size: 179,410 bytes (approximately 175.2 KiB)Zip SHA-256: 94084707db20d7f677c2978afc780567ccdf57371ee855ce8bb67753dbd8e623Samples:Sample 1 MD5: fb5ed444ddc37d748639f624397cff2aSample 2 MD5: b5d469a07709b5ca6fee934b1e5e8e38Helpful Tools:REMnux VMXLMMacroDeobfuscatoroledump.py with plugin_biffOffice IDESuggested Resources:Excel 4 macro analysis - Hack-in-the-Box 2020...