Trusted Design

MS Office exploit analysis – CVE-2015-1641

概要

During an incident response on a malicious MS Office document, SEKOIA CERT got access to the payload itself and also the dropper which was presented interesting features. The document was designed to exploit the vulnerability CVE-2015-1641 in order to drop and execute a ransomware called Troldesh.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• CVE-2015-0097 Exploited in the Wild (score: 0.72)
• Ongoing analysis of unknown exploit targeting Office 2007-2013 (score: 0.66)
• Microsoft Office Zero-Day CVE-2015-2424 Leveraged By Tsar Team (score: 0.65)
• Phishing Email Serving W97M/Dropper.cu via Office Doc with Macro (score: 0.65)
• Phishing - Ransomware - VBA Macro (score: 0.64)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る