OS-WINDOWS Shellcode injection into Microsoft Office Equation Editor process attempt

Description

Detects an attempt to exploit CVE-2017-11882, a code execution flaw that can run code on the target in Shell.

CVEs

Related malware families

Related blogs

New DOGE Big Balls Ransomware Tools in the Wild

May 7, 2025·9 min read

New Evasive Campaign Delivers LegionLoader via Fake CAPTCHA & CloudFlare Turnstile

April 4, 2025·8 min read

From Delivery To Execution: An Evasive Azorult Campaign Smuggled Through Google Sites

March 15, 2024·9 min read

Emotet: New Delivery Mechanism to Bypass VBA Protection

May 6, 2022·5 min read

New Formbook Campaign Delivered Through Phishing Emails

March 11, 2022·9 min read

Malicious Office Documents: Multiple Ways to Deliver Payloads

November 19, 2021·4 min read

TelegramRAT evades traditional defenses via the cloud

December 18, 2017·7 min read

Targeted Attack BadWolf Exploits Office Vulnerabilities to Exfiltrate Data

December 14, 2017·5 min read

References

• portal.msrc.microsoft.com →