Forum Discussion
Malicious Document Analysis: Dropper Analysis
I need help with this lab. going through the Malicious document analysis section of the Incident response badge. it goes from "use olevba" to analyse documents to wanting you to edit python script to manually de-obfuscate files. there’s no guidance on doing this within the lab and the lab doesn’t refer you to anywhere else you can learn/ get information that will help with this lab. i don’t want the answers or my hand holding, but a pointer in the right direction within the lab would be nice.
is there any other labs people recommend that may help prepare me for this one?
1 Reply
- SamDickison
Community Manager
Hey Lumb3rH4ck If you want to build foundational skills for this, I recommend checking out the Python Scripting for Malware Analysis series or Malicious Document Analysis: Visual Basic for Applications (VBA) to get comfortable with handling obfuscated logic and streams.