New Example of XSL Script Processing aka “Mitre T1220”, (Tue, Feb 2nd)

Last week, Brad posted a diary about TA551[1]. A few days later, one of our readers submitted another sample belonging to the same campaign. Brad had a look at the traffic so I decided to have a look at the macro, not because the code is heavily obfuscated but data are spread at different locations in the Word document.

Print Share Comment Cite Upload Translate

APA

() » New Example of XSL Script Processing aka “Mitre T1220”, (Tue, Feb 2nd). Retrieved from https://www.truth.cx/2021/02/02/new-example-of-xsl-script-processing-aka-mitre-t1220-tue-feb-2nd/.

MLA

" » New Example of XSL Script Processing aka “Mitre T1220”, (Tue, Feb 2nd)." - , https://www.truth.cx/2021/02/02/new-example-of-xsl-script-processing-aka-mitre-t1220-tue-feb-2nd/

HARVARD

» New Example of XSL Script Processing aka “Mitre T1220”, (Tue, Feb 2nd)., viewed ,

VANCOUVER

- » New Example of XSL Script Processing aka “Mitre T1220”, (Tue, Feb 2nd). [Internet]. [Accessed ]. Available from: https://www.truth.cx/2021/02/02/new-example-of-xsl-script-processing-aka-mitre-t1220-tue-feb-2nd/

CHICAGO

" » New Example of XSL Script Processing aka “Mitre T1220”, (Tue, Feb 2nd)." - Accessed . https://www.truth.cx/2021/02/02/new-example-of-xsl-script-processing-aka-mitre-t1220-tue-feb-2nd/

IEEE

" » New Example of XSL Script Processing aka “Mitre T1220”, (Tue, Feb 2nd)." [Online]. Available: https://www.truth.cx/2021/02/02/new-example-of-xsl-script-processing-aka-mitre-t1220-tue-feb-2nd/. [Accessed: ]

Select a language: Afrikaans Albanian Arabic Armenian Basque Bengali Bulgarian Catalan Cambodian Chinese (Mandarin) Croatian Czech Danish Dutch English Estonian Fiji Finnish French Georgian German Greek Gujarati Hebrew Hindi Hungarian Icelandic Indonesian Irish Italian Japanese Javanese Korean Latin Latvian Lithuanian Macedonian Malay Malayalam Maltese Maori Marathi Mongolian Nepali Norwegian Persian Polish Portuguese Punjabi Quechua Romanian Russian Samoan Serbian Slovak Slovenian Spanish Swahili Swedish Tamil Tatar Telugu Thai Tibetan Tonga Turkish Ukrainian Urdu Uzbek Vietnamese Welsh Xhosa Last week, Brad posted a diary about TA551[1]. A few days later, one of our readers submitted another sample belonging to the same campaign. Brad had a look at the traffic so I decided to have a look at the macro, not because the code is heavily obfuscated but data are spread at different locations in the Word document. First name:

Last name: