Unpacking CVE-2021-40444: A Deep Technical Analysis of an Of

In the middle of August 2021, a special Word document was uploaded to VirusTotal by a user from Argentina. Although it was only detected by a single antivirus engine at the time, this sample turned out to be exploiting a zero day vulnerability in Microsoft Office to gain remote code

Related Keywords

China , Argentina , Attemptshellexecuteforhlinknavigate Pseudocode , Deobfuscated Javascript , Joxean Koret , Google , Network Requests After Executing Modified Document , Microsoft Office , Network Requests Of Barebone Word Document , Network Requests After , Panel Item , Microsoft , Internet Explorer , Microsoft Word , Object Linking , Pluggable Protocol Handler , Requests After Executing , Reverse Engineering Microsoft , Success Case , Stack Trace , Asynchronous Queue Ing Function , Barebone Word , Reader Constructor , Write Breakpoint , Pre Constructor , Highlighting Hardcoded , Cobalt Strike , Command Line , Control Panel , Javascript String Obfuscation Technique , Create Nested Activex , Create Activex Control , Activex Control , Control Panel Item , Windows Defender , Patch Tuesday , Dirandfile Pseudocode ,