Top Tweets for #dnlibdll

almost 2 years ago

That's a gripping backdoor function in this custom #dnlibdll (#dnSpy). PDB: "D:\\New Private Panell Src 3.0\\" #remcos #agenttesla #nanocore @executemalware @malwrhunterteam @siri_urz @naumovax @vxunderground @pr0xylife @svch0st @SquiblydooBlog @Hexacorn @dr4k0nia @cocaman

VMRay

@vmray

almost 2 years ago

🚨 Alert: Remcos RAT deployed via reflectively loaded, backdoored dnlib.dll 🔗https://t.co/DcCQKmQMYl 🔎 In a new delivery chain, #Remcos #RAT is distributed via a DLL hidden inside a JPEG file hosted on the Internet Archive, which utilizes a backdoored version of dnlib.dll: a .NET assembly writer. The new method called 'VAI' inside the backdoored DLL grabs the final payload. (1/3)

vmray's tweet photo. 🚨 Alert: Remcos RAT deployed via reflectively loaded, backdoored dnlib.dll

🔗https://t.co/DcCQKmQMYl

🔎 In a new delivery chain, #Remcos #RAT is distributed via a DLL hidden inside a JPEG file hosted on the Internet Archive, which utilizes a backdoored version of dnlib.dll: a .NET assembly writer. The new method called 'VAI' inside the backdoored DLL grabs the final payload.

(1/3)

108

16K

Top Tweets for #dnlibdll

Last Seen Hashtags on Sotwe

Trends for you

Most Popular Users