Arama Sonuçları: "#DLLSideLoading"

20 sonuç
Unit 42
Unit 42@Unit42_Intel·
New #ClickFix activity: User is asked to run PowerShell script that retrieves and runs an MSI file in memory. This infection chain performs #DLLSideLoading using legitimate "NVIDIA Notification.exe" to load a malicious DLL named libcef.dll. More info at bit.ly/4krPhLd
Unit 42 tweet mediaUnit 42 tweet mediaUnit 42 tweet media
English
2
58
158
16.9K
Shanholo
Shanholo@ShanHolo·
⚠️#DllSideLoading ☣️firefox.exe/winhttp.dll➡️c2ce2f03afdbc181e74e93e6d9f82def 🔥Low Detection ratio 📡173.194.195.94
Shanholo tweet media
Shanholo@ShanHolo

🔥#DFIR #CSIRT #Intrusion🔥 1⃣Social engineering Initial access. 2⃣TA leveraged Microsoft Edge to retrieve two dat files from Internet. 3⃣TA archived bot dat files among with a TAR file using command "type". 🫢 4⃣TAR file le contained a malicious DLL masquerading as winhttp.dll.

English
2
4
17
2.2K