RareWolf Dropper Archive Extraction via WinRAR/7-Zip with Hard-coded Password

Subhankar H@Andrewsec57

•updated yesterday•0•0•4

Detects WinRAR or 7-Zip extracting an archive with a hard-coded password supplied via command line from a cmd.exe batch parent, using switch patterns associated with the RareWolf AnyDesk dropper.