New MSWORD Vulnerability! (CVE-2021-40444)

We take a look at the new MSWORD Vulnerability!

Black Lantern Security
www.blacklanternsecurity.com/

Analyzing Microsoft Zero-Day Exploit (CVE-2021-40444)
   • Analyzing Microsoft Zero-Day Exploit (CVE-...  

Twitter
twitter.com/stryker2k2

Samples:
court.docx: bazaar.abuse.ch/sample/938545f7bbe40738908a95da8cd…
side.html: bazaar.abuse.ch/sample/d0fd7acc38b3105facd69953442…
ministry.cab: bazaar.abuse.ch/sample/1fb13a158aff3d258b8f62fe211…

Deobfuscation Python Script
deobfuscate.py: github.com/lasq88/MalwareAnalysis/blob/main/CVE-20…

CVE Advisory:
CVE-2021-40444 advisory: msrc.microsoft.com/update-guide/vulnerability/CVE-…