New Loader Version DLL Sideloading
Detects the loading of version.dll from a non-standard directory, a technique associated with DLL Sideloading. This specific variant was observed being used by a loader for TorNet and PureHVNC.
YARA-L
Detects the loading of version.dll from a non-standard directory, a technique associated with DLL Sideloading. This specific variant was observed being used by a loader for TorNet and PureHVNC.
Already have an account?