Using what’s already available
“... COM object interaction w/Internet Explorer to download payload ... powershell.exe loads ieproxy.dll, svchost.exe spawns iexplore.exe
, iexplore.exe makes network connection...”
https://twitter.com/danielhbohannon/status/969588645698134016?s=21
No comments:
Post a Comment