OneNote Malware Trends - OneNote Leads to AgentTesla

In this video, we'll continue to track Onenote malware trends by looking into a document that leads to AgentTesla. Analysis will be very similar to the previous videos - we'll use Onedump to grab the script and investigate a couple of straight-forward stages of Powershell.

SHA256: 9cf84c2868f691d955048d761e223fbac99021676c31effb3bee711f24569323

00:00 Introduction
00:28 Too Long; Didn't Watch (TLDW)
01:21 Sample Info and Getting Started
02:46 Analyzing the Next Stage Script (Embedded EXE)
03:32 Tips for Analyzing Large Base64 Blogs
04:49 Moving to CyberChef …

agenttesla analysis continue document embedded forward grab info introduction malware onenote powershell script sha256 stage tips trends video videos watch