Secondary Categories: 02-Initial Access, 02-Persistence

VBAWarnings

You can edit the registry keys to ignore VBA warnings by editing the following registry value to 1

  • HKCU\Software\Microsoft\Office\16.0\Excel\Security\VBAWarnings

AltStartup

You can also configure Excel to auto-open an Excel document(s) any time that Excel starts by modifying the following registry key:

  • HKCU\Software\Microsoft\Office\16.0\Excel\Options\AltStartup

This can also be done in Excel via the GUI by going to:

  • Options Advanced General At Startup Open

This can be used to open and execute a malicious document.

Also Check Out:

  • PLACEHOLDER