July 2022

Unboxing a Quakbot Campaign with Malcat

Leave a Comment / Malware Analysis / PrFalken

I recently received a phishing email to analyze, let’s see how to unbox all the components and identify them using Malcat. We can notice how good is this phishing attempt :– the sender was known by the recipient– the mail was written in correct french (quite unusual)– the mail contains and old discussion from 2021 […]

Unboxing a Quakbot Campaign with Malcat Read More »

MS Office Documents Analysis

Leave a Comment / Miscellaneous / PrFalken

*.doc MS Word Document in binary proprietary file format (Compound File Binary Format) used in Office < 2007 *.xls MS Excel Workbook in binary proprietary file format (Compound File Binary Format) used in Office < 2007 *.docx MS Word Document in “Microsoft Office Open XML” file format used since Office 2007, no macro.Zip container with

MS Office Documents Analysis Read More »