DOCGuard - Detect Maldocs in Seconds! on Twitter: "Strange PPT maldoc with low detection rates since 2022-02-02. MD5: c0060c0741833af67121390922c44f91 PPT file>wscript.exe>powershell.exe>rundll32.exe [+]Exec wscript when user moves mouse [+]Wscript exec powershell [+]PS download the XORed DLL. [+]Exec it using rundll32.exe https://t.co/aIxMEeVqLR" / Twitter
https://twitter.com/doc_guard/status/1570190610774257665