https://nevaluoto.fi/posts/letsdefend-soc146/
LetsDefend - SOC146 - Phishing Mail Detected - Excel 4.0 Macros - Write-Up - Eero Nevaluoto