Macro Malware

School Project A software that generates a malware file in word or excel form. The malware works this way, injection of malware into the macro of the word and excel file. The malware excel/word file should be able to send to the infected machine without alarming the antivirus solution and it should be able to extract info from the infected machine and send it back to the user's database. The software should have a few buttons to choose which file to inject the malware into. Information that are to be extracted: Username and workstation/machine name List of documents in the machine (e.g. pdf, doc*, ppt*, xls*, txt) List of softwares installed List of network drives on the machine Restrictions: Metasploit framework (msfvenom) cannot be used to generate the malware to be embedded into the files. You have to create from scratch. Methods and techniques to avoid or lower the detection rates of antivirus Obfuscation of source code (function calls) Encryption - e.g. XOR Parameter appending (refer to the Sophos link for some insight) Small codebase Other potential methods(?)