oletools icon indicating copy to clipboard operation
oletools copied to clipboard

Published 20 hours ago • verified publisher icon decalage2

rtfobj: Not a well-formed OLE object

Open decalage2 opened this issue 2 years ago • 0 comments

This AgentTesla sample is not parsed properly by rtfobj: https://twitter.com/ForensicITGuy/status/1490528788308021262 https://forensicitguy.github.io/agenttesla-rtf-dotnet-tradecraft/ Sample: https://bazaar.abuse.ch/sample/213d36f7d37abac0df9187e6ce3ed8e26bc61bd3e02a725b079be90d7cfd5117/

decalage2 avatar Feb 07 '22 08:02 decalage2