Macro_Madness_1_The_Breach

Author: @awesome10billion & @Jstith

Malware was downloaded and ran on one of our executive's workstations. We need your help figuring out where the malware came from, and what it did. IT was able to compile every email attachment containing macros that was received the day of the breach. Find the macro that bypassed antivirus, and figure out what it did. According to threat intelligence, we suspect the hackers used a large volume of benign macros so a more advanced, malicious one would blend in.