fileless malware - Exetools

		Exetools > General > General Discussion
fileless malware

02-19-2017, 04:03

deroko

cr4zyserb

Join Date: Nov 2005

Posts: 217

Rept. Given: 13

Rept. Rcvd 30 Times in 14 Posts

Thanks Given: 7

Thanks Rcvd at 33 Times in 16 Posts

Actually if I remember correctly, a few years back some guys found bug in windows driver, and managed to store whole exploit/shellcode in wrongly parsed registry key (which driver parsed during boot). This could count as fileless persistent code

I don't remember who did it, or how article or poc was named. Was long time ago, if somebody remembers would be awesome to post link

__________________
http://accessroot.com

The Following 3 Users Say Thank You to deroko For This Useful Post:
Nacho_dj (02-19-2017), SinaDiR (05-24-2020), tonyweb (02-19-2017)

« Previous Thread | Next Thread »

Posting Rules
You may not post new threads You may not post replies You may not post attachments You may not edit your posts BB code is On Smilies are On [IMG] code is Off HTML code is Off Forum Rules

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Malware Analysis	ldmd	General Discussion	7	03-09-2025 18:42
ahk malware analysis	dion	General Discussion	0	12-20-2021 08:50
Malware Sample analysis	Aesculapius	Source Code	2	02-13-2018 19:35

All times are GMT +8. The time now is 21:35.