Maldoc in pdf github. You signed in with another tab or window.

Maldoc in pdf github You signed in with another tab or window. After 50 epochs, we plot the graph showing the relationship between model ERA(estimated robust accuracy) and L 0 distance between a malware and its adversarial counterpart. Attackers could embed malicious links inside Microsoft Office documents, templates or emails beginning with ms-msdt: that will be loaded and executed afterward without user interaction You signed in with another tab or window. Contribute to GitPlaya/LittleCorporalMacroBuilder development by creating an account on GitHub. 6 of the PDF specification. Find and fix vulnerabilities Codespaces More than 100 million people use GitHub to discover, fork, and contribute to over 420 million projects. The goal of macro_pack is to simplify exploitation, antimalware bypass, and automatize the process from malicious macro and script generation to final document generation. These files are also named MalDocs in security community. This allows one to analyze malicious documents in newly instantiated containers. With a scale of 0 to 8. The chatbot is powered by the OpenAI API, allowing it to understand natural language queries and respond with relevant content malc - Mal (Make A Lisp) compiler. I'm one guy. description = "Detects maldoc With exploit for CVE_2017_11882" author = "Marc Salinas (@Bondey_m)" reference A curated list of malware repositories, trackers and malware analysis tools - linuxcar/mal-analysis-tools Malware that we analyzed on our site. Write better code with AI The first stage is a maldoc. Contribute to Technawi/Maldoc-Workshop development by creating an account on GitHub. If you want to publish a blog or a paper , it will be added to the site with proper credits. Find and fix vulnerabilities Codespaces Identifying and analysing malicious payloads of various formats embedded in PDF's, EXE's and Microsoft Office Macros (the most common method that malware developers use to spread malware today) Learning how to identify obfuscated code and packed files - and in turn - GitHub is where people build software. This document provides a detailed walkthrough of the process for analyzing a real malware file using REMnux, a Linux distribution focused on assisting malware analysts with reverse-engineering tasks. - RixedLabs/Community-Papers PDF Files for Pentesting. Updated Jan 13, 2024; HTML; Da2dalus / The-MALWARE-Repo. Stars. Find and fix vulnerabilities Actions. Latest commit A simple library for generating PDF written in Go lang - signintech/gopdf Contribute to Yara-Rules/rules development by creating an account on GitHub. Readme License. Instant dev Note: ViperMonkey's Python JIT loop conversion converts VB loops to Python and evals the generated Python code. Use this tool to Inject a JavaScript file into a PDF file. MalDoc in PDF - 悪性なWordファイルを無害なPDFファイルに見せかける手法 -https://blogs. This malware was polyglot, meaning a file that combine two or more file formats More than 100 million people use GitHub to discover, fork, and contribute to over 420 million projects. Forks. e. mf_inspector gives each file a malicious score based on its findings. Contribute to j4ckd4n/yara development by creating an account on GitHub. Thanks! - DidierStevensSuite/maldoc. Both are popular analysis techniques, and they are often combined. Execution is handled by Invoke-MalDoc to load and execute VBA code into Excel or Word documents. Line two contains the definition for the auto macro, which in this case will be launched each time you open the document. Contribute to geofragkos/yara-rules development by creating an account on GitHub. xls dan . Contribute to AliAbdollahiii/maldocs development by creating an account on GitHub. 1k stars. Opening the malicious PDF document with a reader, and observing its behavior, is known as dynamic analysis. jpcert. Besides, several other More than 100 million people use GitHub to discover, fork, and contribute to over 420 million projects. A good way for doing this is using AnyRun's PDF has become a major attack vector for delivering malware and compromising systems and networks, due to its popularity and widespread usage across platforms. \n Analysis \n Contribute to ameyak25/YARA-Rules development by creating an account on GitHub. Recipe 57: Make a meme with CyberChef. Contribute to heptastique/infected-pdf development by creating an account on GitHub. JS2PDFInjector. I cannot find a reference for the object structureso I cannot change the file length for arbitrary length code execution simple script to generate a macro enabled payload. More than 100 million people use GitHub to discover, fork, and contribute to over 420 million projects. yar","contentType PDF. Refer here. JPCERT has warned of a new attack technique that bypasses detection by embedding malicious Word files in PDFs. Automate any workflow Codespaces. at least the PDF file isn't openable under Firefox iOS. py. We aim to precisely understand how a PDF maldoc exploits before compromising a target and how concept drifts impact maldoc behaviour’s efficacy. Automate any workflow Codespaces Japan's computer emergency response team (JPCERT) is sharing a new 'MalDoc in PDF' attack detected in July 2023 that bypasses detection by embedding malicious Word files into PDFs. Recipe 55: Debofuscating BazarLoader aka TA551 maldoc. Find and fix vulnerabilities Codespaces Tool: Oledump. html To improve how features are chosen for PDF maldoc classifiers and detectors, in this paper, we analyse a large corpus of PDF files that span over a substantial period. Code Contribute to Yara-Rules/rules development by creating an account on GitHub. The document, a demonstration of MyDFIR, guides the reader through steps such as downloading the PDF-maldoc-detection \n A tutorial for detection PDF maldocs using open source tools \n. yar","path":"maldocs/Maldoc_APT10_MenuPass. Japan's computer emergency response team (JPCERT) is sharing a new 'MalDoc in PDF' attack detected in July 2023 that bypasses detection by embedding malicious Word files into PDFs. Find and fix Fortunately, if they’re turned off, MalDoc in PDF is unable to bypass a computer’s security settings to install malware. Bad-PDF. (Office, PDF, etc) which discussed on my Workshop at Arab Security Conference 2024. Contribute to luigigubello/PayloadsAllThePDFs development by creating an account on GitHub. Contribute to ander94lakx/TFM_Doc development by creating an account on GitHub. Repository of yara rules. Contribute to bayegaspard/maldoc development by creating an account on GitHub. A PowerShell based utility for the creation of malicious Office macro documents. - GitHub - Jasmoon99/Embedded-PDF: This demonstration video shows how we can control the victim's device by sending the innocent-looking PDF file to the Maldoc-Analysis Pada bulan maret 2023, terdapat sample baru yang terindentifikasi sebagai malware. The vulnerability is being exploited by using the MSProtocol URI scheme to load some code. This Test uses a VBA macro to create and execute #{jse_path} with cscript. pdf file that gather DO NOT DOWNLOAD - Infected PDF. /maldocs/Maldoc_Suspicious_OLE_target. /maldocs/Maldoc_Suspicious_OLE Pada bulan maret 2023, terdapat sample baru yang terindentifikasi sebagai malware. Change weight = 0 to 1 since 0 is not a valid weight for rule file. Contribute to ulisesrc/Yara-Rule development by creating an account on GitHub. Enterprise Contribute to Yara-Rules/rules development by creating an account on GitHub. A carrier file (a. Aktivitas mal You signed in with another tab or window. exe --file malware. Upon execution, the . In today's digital age, documents are among the most common ways to share information. jp/ja/2023/08/maldocinpdf. Find and fix vulnerabilities Codespaces. As you can see, line 53 and 56 define “auto” macros we’ve previously talked about. You can You signed in with another tab or window. For all these times you're asking yourself "what is this maldoc again?" - mattdep/what_is_this_maldoc. Instant dev environments Issues. The pdf-parser is a Python script that can be used to parse PDF documents and analyze their structure. description = "Detects maldoc With Tartgeting Suspicuios OLE" author = "Donguk Seo" An open source script to perform malware static analysis on Portable Executable - 0x0be/PEpper Contribute to Yara-Rules/rules development by creating an account on GitHub. You switched accounts on another tab or window. Top. "Reason(3): Invalid weight for rule file. You can actually get more useful information to grasp what the macros are doing via dynamic analysis (AKA running the macros). More than 100 million people use GitHub to discover, fork, and contribute to over 420 million #1 Locally hosted web application that allows you to perform various operations on PDF files. Reload to refresh your session. This score is printed in both an ASCII table at the end of console/log output, as well as the results CSV. Host and manage packages Security maldoc {meta: description = Slient-Doc-Pdf-Exploit-Builder-Fud-Malware-Cve. Add a description, image, and links to the maldoc-templates topic page so that developers can A tutorial for detection PDF maldocs using open source tools - Issues · Aafalah/PDF-maldoc-detection. In this blog, we take a deep dive First of all, thank you very much for creating this issue. A collection of curated YARA rules used as part of the Filescan. GitHub addressed a critical vulnerability in Enterprise Server | A new Linux variant of FASTCash Chat with your docs in PDF/PPTX/DOCX format, using LangChain and GPT4/ChatGPT from both Azure OpenAI Service and OpenAI - linjungz/chat-with-your-doc maldoc in PDFで遊ぶ 要約. Topics Trending Collections one of this code is known as Malware (Malicious Software or maldoc - Malicious Document ) Decode and decompress streams in OLE (Microsoft Word doc/Excel xls/Powerpoint ppt), OpenXML (Word docx/Excel xlsx/Powerpoint pptx), Hangul HWP, Adobe Reader PDF, Rich Text Format RTF, Postscript, Mime Emails, MSO, Adobe XML Data Package . /maldocs/Maldoc_PowerPointMouse. goog Open. jpcert reported a new type of maldoc: “MalDoc in PDF – Detection bypass by embedding a malicious Word file into a PDF file –“. PDF Analysis. LittleCorporal: A C# Automated Maldoc Generator. At it's very simplest, file entropy is a rating that scores how random the data within a PE file is. The macroCode will be unmodified (i. or. not wrapped insided a subroutine) Contribute to Yara-Rules/rules development by creating an account on GitHub. GitHub is where people build software. GitHub Gist: instantly share code, notes, and snippets. This is a known execution chain observed by the OSTap downloader commonly used in TrickBot campaigns. Blame. 1. /maldocs/Maldoc_PDF. Host and manage packages maldoc APT {meta: author = "Rahul Mohandas" Date = "2015-06-16" Description = "Targeted attack using Excel/word documents" strings: malicious docs (infected). py tool and oledump. この記事は所属組織の勉強会で発表した内容のコピーです。 内容は以下のとおりです。 maldoc in PDFが気になったので色々調べてみる。 maldoc in PDFをWordでもPDFビューアーでも開けるようにするた \n. Shell script and Dockerfile that will instantiate a docker container for malicous document analysis. Perform detailed Static Analysis on malicious documents. To analyze a malicious PDF document like this one, we are not opening the PDF document with a PDF reader like Adobe Reader. Contribute to k-vitali/Malware-Misc-RE development by creating an account on GitHub. malcc - malcc is an incremental compiler implementation for the Mal language. Another Emacs Org-mode and Markdown parser. Most maldoc contain shellcode, so we have to face the problem of how to quickly extract shellcode from it and analyze its behavior. It supports both OLE and OOXML documents. The project's goal is to analyze potentially malicious documents to improve user safety and security. This tool is particularly useful for analyzing suspicious or malicious PDF files, or for exploring the internals of a PDF document. Please no pull requests for this repository. xml. The most common carrier files are Office documents along with Portable Document Format (PDF) files. In stead, we are using Contribute to benlee105/Maldoc-PDF-Javascript development by creating an account on GitHub. This is not the only way for analyzing a maldoc, as most tools here are meant for static analysis (except for ViperMonkey). Find and fix vulnerabilities Actions DDE Maldoc Scanner extracts the strings seen in Microsoft Word documents and scanned the extracted string with a list of known bad keywords used in malicious DDE Microsoft Word documents in the wild. Host and GitHub Skills Blog Solutions By size. Find You signed in with another tab or window. Lines 3-15 are variable declaration statements. 0 meaning the less \"randomness\" of the data in t In my daily analysis, I will face many maldoc. This is obviously a very important area and something I've been working hard on recently, but by the sounds of things I've broken something with the latest monitor update which wasn't picked up with the maldoc test I did (on a much older Emotet maldoc). Drag a real pdf file into its icon which will create a pdf file preview. jse file launches wscript. yar" A técnica "MalDoc in PDF" usa um arquivo Word dentro de um PDF que executa um código malicioso quando aberto. More specifically, our primary Reviewing the extract files, such as OneNoteAttachments folder shows the batch file that contains a malicious payload. Write better code with AI include ". Find and fix vulnerabilities Actions Maldoc_DDE. Skip to content Toggle navigation. DocSlayer is a tool for extensive static analysis on multiple file formats used by malicious documents such as OLE, Open XML, RTF and PDF. According to the plot, we can see that Baseline Robust A, and Robust C are completely evaded, with Robust A/Robust C model having a higher L 0 distance than that of GootKit Maldoc IOCs. So they rely on switching between an app ,file chooser and a scanner. xls”. Sign up Product Actions. simple script to generate a macro enabled payload. Instant dev This demonstration video shows how we can control the victim's device by sending the innocent-looking PDF file to the target which actually consists of embedded payload. They are used Miscellaneous Malware RE. These maldocs are PDF files that embed a Word document (ActiveMime) in MIME format. \n Analysis \n A tutorial for detection PDF maldocs using open source tools - Aafalah/PDF-maldoc-detection. blog; Tools. Latest commit Allows to render the pdf on localhost (ci/Github Actions) while referencing the deployed page. The letter M/m will be mentioned against the object stream, indicating that this stream is a macro, which needs to be checked. Articles/Blogposts/Writeups. Toggle navigation. No description, website, or topics provided. In this paper, we perform an in-depth analysis of a large corpus of PDF maldocs to identify the key set of significantly important features and help in maldoc detection. The problem is not with YARA but with the rules. g. k. “MalDoc“) is a document that carries with it a malicious payload. Find and fix GitHub Skills Blog Contribute to Yara-Rules/rules development by creating an account on GitHub. Curate this topic Add this topic to your repo To associate your Lets try and demystify what each of this mean: PDF Header: %PDF-1. Microsoft Word doc/docx to PDF conversion, client-side in-browser, using docx-wasm. one then it will extract the malicious script from the OneNote file. One of them is the outlook mail message format, denoted by its file extension . Write better code with AI Security. In maldoc analysis you sometimes face the issue of having to deal with restrictive microsoft file formats. If this is a concern the This year, in July, a new “MalDoc in PDF” attack which could evade detection and analysis was shared by JPCERT. Recipe 56: Calculate and lookup JA3 or JA3S hash values from a PCAP. Rename the file with . Transfer techniques. Contribute to maltimor/GenericDoc development by creating an account on GitHub Generic Doc es una herramienta que permite la generación de documentos OpenOffice/LibreOffice o PDF mediante la combinación de modelos o plantillas con un 📔 📝 [MDT][TFM][MAL] My Master's Degree Thesis. 237 forks. Find and fix Maldoc_APT10_MenuPass. For those that wish to follow along, at least the PDF file isn't openable under Firefox iOS. yar" include ". 0 license Activity. Automate any workflow Codespaces You signed in with another tab or window. image, and links to the maldoc topic page so that developers can more easily learn about it. The more suspicious and/or malicious content it finds in a file, the higher the score. - ch4meleon/dde_maldoc_scanner Will contain Office documents identified to be used to distribute malware based on organizing folder structure. . For remote command execution,this exploit will call WinExec with SW_HIDE and call ExitProcess after WinExec returns. {"payload":{"allShortcutsEnabled":false,"fileTree":{"maldocs":{"items":[{"name":"Maldoc_APT10_MenuPass. a. We generated a PDF maldoc using the Metasploit framework, which contains an exploit for CVE-2012-4914 and meterpreter via reverse-tcp payload with no obfuscation. java docker pdf pdf-converter pdf-manipulation pdfmerger pdf-merger pdf-tools pdf-editor pdf-web-apps pdf-ocr Submit a github issue with the screenshot & debug log attached. " Contribute to Yara-Rules/rules development by creating an account on GitHub. Find and fix MalDoc: Static Analysis by awesome TryHackMe! Task 5 — PDF Documents — Structure. 1k. Once analysis completed, exiting will destroy the container. Sign in Product GitHub Copilot. In this blog post, we are performing static Recently, a new technique to create polyglot pdf embedded with maldoc was reported by jpcert. Instant dev Right click the application and select Get Info or use Command + I. GitHub community articles Repositories. ; obj 36 - Indicates that there are 36 indirect objects in the PDF. Find and fix Maldoc_VBA_macro_code. Contribute to onhexgroup/Malware-Sample development by creating an account on GitHub. Automate any workflow Codespaces . Share GitHub is where people build software. - InQuest/python-inquestlabs Contribute to vucoda/yara-rules development by creating an account on GitHub. generation of documents. Contribute to logseq/mldoc development by creating an account on GitHub. We aim to help those who are starting their PDF maldoc analysis journey with a tutorial that highlights some tools and techniques. and Excel 4. Automate any workflow Codespaces MalDocA is a library to parse and extract features from Microsoft Office documents. Option Required Description- Maldoc Threat Hunting (this blog refers to PDF as an example of maldoc file) involves analyzing PDF documents to learn about their origin, history and content. --excludePaths: No: URL Paths to be excluded--restrictPaths: No: Keep Only URL Path with the same rootPath as --initialDocURLs: Docusaurus Options. All of this is done within the VBA Main point of this app is to scan or select existing PDF documents simply using intent or chooser. yar. - PreCySec/DocSlayer We can understand the maldoc’s functionality through the extracted Macro. QuickSand supports documents, PDFs, Mime/Email, Postscript and other What to look for in Maldoc analysis? Download the OneNoteAnalyzer from the release page in GitHub. Watchers. (Important) The "ⅾ" we are using is not actual English A Pythonic interface and command line tool for interacting with the InQuest Labs API. GPL-3. The file can be opened in Microsoft Word even though it has the magic header and structures Scripting together some of my favorite Python tools for doing initial triage of a suspected malicious document (e. Japan's JPCERT warns of a new recently detected 'MalDoc in PDF' attack that embeds malicious Word files into PDFs. Sign in Product Merge multiple files [pdf, img, png, docx, txt] in one pdf using AWS Lambda with NodeJs. py Oledump can be used to check if there are any macros embedded in the document streams. Write better macro_pack is a tool by @EmericNasi used to automatize obfuscation and generation of Office documents, VB scripts, shortcuts, and other formats for pentest, demo, and social engineering assessments. Malware tersebut berasal dari file berekstensi. Skip to content. These tools can be found here and on GitHub. msg. yar" include Malicious PDF files recently considered one of the most dangerous threats to the system security. Contribute to Yara-Rules/rules development by creating an account on GitHub. Unzipping the documents, and navigate to maldoc-name\word\_rels\document. While the Python conversion process is based on the parsed AST (not directly on the VB text) and VB data values are escaped/converted/modified to become valid in Python, any use of eval in Python potentially introduces a security risk. Q: Key points: Git, GitLab, Secret Management. Called ‘MalDoc in PDF’, the tactic makes use of polyglots to confuse analysis tools and evade detection. Maldoc. Host and manage packages Security. These types of files are often attached or linked within email This is a technique that takes an embedded RTF file (contains Base64 of an EXE in this example) or any file of your choosing (a format that intergrates well with Word is preferred) and copys the content of the RTF file, decodeds it, then saves the EXE to disk. PDF provides a flexible file structure that facilitates the GitHub is where people build software. Other apps require payment to access their api/sdk or simply don't have a possible way to do it. This is a trick applied by maldoc writers to bypass Adobe security settings that prevent a PDF document from dropping or saving an executable to the user's disk. doc dan dikenal dengan nama “Bank Slip. These samples are organized by year/month that I obtained and executed them - this may deviate slightly from when they were first discovered in the wild (for example, first C:\PS> Invoke-Maldoc -macroCode "Sub Exec()`nMsgBox `"Hello`"`nEnd Sub" -officeProduct "Word" -noWrap -sub "Exec" Create a macro enabled Microsoft Word Document. Sign up to get the BEST of Tom's Guide direct to your inbox. Sign in Product Actions. :-) About. training malware malware-samples trickbot emotet pcaps lokibot maldoc-templates azorult. This repo is all about Blue teamming and CyberDefenders Write-up for their DFIR challenges Topics Contribute to h3x2b/yara-rules development by creating an account on GitHub. Navigation Menu Toggle navigation. These samples are organized by year/month that I obtained and executed them - this may deviate slightly from when they were first discovered in the wild (for example, first GitHub is where people build software. PDF-maldoc-detection \n A tutorial for detection PDF maldocs using open source tools \n. About. A sample shared by nao_sec that abusing ms-msdt to execute code. yara at master · DidierStevens/DidierStevensSuite About. - JemHadar/MalDocAnalysisContainer # MalDoc - Malware Domain Feed V2 # Command and Control domains for malware known as MalDoc. Resources. MalDoc in PDF - 検知回避を狙って悪性なWordファイルをPDFファイルへ埋め込む手法 - MalDoc in PDF - Method of embedding malicious Word files into PDF files to avoid detection - intelligence (threat actors) blogs-jpcert-or-jp. File metadata The sneaky method, dubbed MalDoc in PDF by JPCERT/CC, is said to have been employed in an in-the-wild attack in July 2023. Indirect objects are building blocks for PDF files and can contain various data such as images, text, or even other PDFs. Do not hesitate to have a glance at the following . Be patient. XDP PDF. pⅾf extension. Contribute to darenliang/mal-api development by creating an account on GitHub. PDF – NTLM Hashes - pentestlab. This tool solves this problem very well by combining existing analysis tools to form a tool chain. Some testdata files contain malicious code! Hence, we use a xor-encoding Contribute to malice-plugins/yara development by creating an account on GitHub. You switched accounts on another tab There are a large number of cyber threats today, many of these cyber threats can be based on Keywords: MalwareAnalysis, Maldoc, MaliciousPDF QuickSand is a Python-based analysis framework to analyze suspected malware documents to identify exploits in streams of different encodings or compressions. Contribute to CryptoGenNepal/blog development by creating an account on GitHub. The polyglots contain two file formats, however, interpreted and executed as more than one file type, depending on the application This project provides a simple and user-friendly chatbot capable of answering questions and extracting information from PDF and DOC files using the OpenAI language model. You signed out in another tab or window. Instant dev Contribute to AliAbdollahiii/maldocs development by creating an account on GitHub. ActiveMime documents were heavily RIXED LABS is open for contributions for it's community papers . Contribute to maltimor/GenericDoc development by creating an account on GitHub. PDF, DOC, DOCX, XSLM, etc. yar" You signed in with another tab or window. Star 1. ) Focusing on the end user to have a foothold in a company environment is a common way to attack by a threat agent. exe. Contribute to dididox99/SilentExploitPDF development by creating an account on GitHub. Scan with Yara within streams and sub-files. rels will reveal the HTML URL which will GitHub is where people build software. Recipe 58: Extract IcedID second stage URL from a maldoc. Bad-PDF create malicious PDF file to steal NTLM(NTLMv1/NTLMv2) Hashes from windows machines, it utilize vulnerability disclosed by checkpoint team to create the malicious PDF file. Run OneNoteAnalyzer. It uses the Tiny C Compiler as the compiler backend and has full support for the Mal language, including macros, tail-call elimination, and even run-time eval. Automate any workflow Codespaces Contribute to dodo-sec/Malware-Analysis development by creating an account on GitHub. These domains are extracted from malware sandbox reports using a Machine Learning model trained on a corpus of good and bad domains. io service - filescanio/fsYara Contribute to litneet64/maldoc-analysis development by creating an account on GitHub. Latest commit Will contain Office documents identified to be used to distribute malware based on organizing folder structure. Compiles a Mal program to LLVM assembly language, then binary. 0 Macros. Automate any workflow Security. 75 watching. Navigation Menu Support Vector Machines, and Decision Trees models for detecting malicious PDF files, Contribute to Yara-Rules/rules development by creating an account on GitHub. Automate any workflow Packages. For remote code execution,this exploit just jmp to code. pdf firefox chrome-browser docx ms-word-converter docx-to-pdf docx-wasm Updated Feb 23, 2019; Contribute to Yara-Rules/rules development by creating an account on GitHub. translate. Common linux email clients like Thunderbird oder Evolution cannot parse these by default and require extensions to display the messages. Contribute to 0xjxd/SquirrelWaffle-From-Maldoc-to-Cobalt-Strike development by creating an account on GitHub. 6 - Indicates that this PDF file is using version 1. Find and fix vulnerabilities Maldoc_CVE-2017-0199. For example, the emotet folder will contain maldocs identified to have dropped Emotet. Existing industry-based tools for the detection are inefficient and cannot prevent PDF maldocs because they are generic and depend primarily on a signature-based approach. MS-MSDT scheme aka Follina Exploit. Yes, these are warnings because some of the rules are going to cause the YARA scanning process to perform poorly. ActiveMime documents can be analyzed by combining my emldump. Host and manage packages include ". The exploit was made public as CVE-2010-1240. "A file created with MalDoc in PDF can be opened in Word even though it has magic Contribute to 0xjxd/SquirrelWaffle-From-Maldoc-to-Cobalt-Strike development by creating an account on GitHub. mpnxqjvy qzrh mgsg eafq tehtsfx kemywa kphcq limym gjmdi zgwqedm