OneNote Malware - Tips and Tricks for Investigating OneNote Malware Used to Deliver AsyncRAT

Threat actors and red teams alike are always looking for, and finding, creative ways to gain initial access. Such is the case with the recent surge in the use of Microsoft OneNote files. Similar in purpose to macro-enabled office documents, OneNote files allow the embedding of scripting technology to run arbitrary commands and gives the ability to drop or download malicious programs. In this video, we'll take a look at a recent OneNote file to investigate it's structure. We'll use …

access asyncrat case documents download files initial access macro malicious malware microsoft microsoft onenote office onenote red teams run scripting teams technology threat threat actors tips video