MartyMcFly Malware: new Cyber-Espionage Campaign targeting Italian Naval Industry
Security Affairs
OCTOBER 17, 2018
At a first sight, the office document had an encrypted content available on OleObj.1 Those objects are real Encrypted Ole Objects where the Encrypted payload sits on “EncryptedPackage” section and information on how to decrypt it are available on “EncryptionInfo” xml descriptor. Stage1: Encrypted Content.
Let's personalize your content