ProcessHollowingLoader
Process hollowing .NET loader. Developer OPSEC fail: PDB path "cool project lol" on D:\Users\virtual\Desktop\Malware\. NtUnmapViewOfSection + SetThreadContext injection. Loader.dll + LoaderBootstrap.dll chain. Version 26.4.4.799.
Tehdit Profili
Tür
Loader
Yazılım DiliC#/.NET
C2 ProtokolüLocal
İlk Görülme2024
Hedef Kitle
Küresel
Amaç / Yetenekler
- Process Hollowing/Loader
Bu aile için henüz C2 sunucusu tespit edilmemiştir.
Araştırma Raporları (1)
ProcessHollowingLoader cool_project_lol -- D:Usersvirtual Malware projects cool project lol PDB OPSEC Hatasi, NtUnmapViewOfSection SetThreadContext Process Hollowing, Benign GUI Resource MZ Enjeksiyon Debug Kaniti, LoaderBootstrap dll Payload Yukleme Zinciri | Kritik
ProcessHollowingLoader 2eac9624 PE32+ x64 1.5MB. D:\Users\virtual\Malware\projects\cool project lol PDB OPSEC hatasi. NtUnmapViewOfSection SetThreadContext process hollowing. Benign GUI resourceMZ enjeksiyon debug kaniti. LoaderBootstrap.dll zincir.
Raporu Oku →