CVE-2017–11882 RTF
Two weeks ago a malicious MS Word document was blocked from a sandbox (SHA 256 - 1aca3bcf3f303624b8d7bcf7ba7ce284cf06b0ca304782180b6b9b973f4ffdd7). The sample looked interesting because by that time, VirusTotal had a limited detection rate. Both VirusTotal and Any.Run identified the sample as…