Execution of Visual Basic code, commonly VBA macros embedded in Office documents, by an Office or other supported host. VBA can automate host actions and may invoke other Windows components, subject to the host's macro policy, file-origin and trust settings. Spearphishing delivery, a downloaded payload, and command-and-control are contextual or follow-on behaviors, not guaranteed results of this technique.
Variant:
Execute Shell Command via VBA
powershell
RESTRICTED_ACCESS_BLUR_MARKER
RESTRICTED_ACCESS_BLUR_MARKER
RESTRICTED_ACCESS_BLUR_MARKER
RESTRICTED_ACCESS_BLUR_MARKER