3 ms·
> a base 64 encrypted string that gets decrypted and then passed to a shell. This is a very common malicious behavior. Packj detects obfuscation [1] as well as
by ashishbijlani 4y ago
> a base 64 encrypted string that gets decrypted and then passed to a shell.
This is a very common malicious behavior. Packj detects obfuscation [1] as well as spawning of shell commands (exec system call) [2]. I've updated threats.csv to flag code obfuscation.
1. https://github.com/ossillate-inc/packj/blob/main/main.py#L486 https://github.com/ossillate-inc/packj/blob/main/main.py#L48...
2. https://github.com/ossillate-inc/packj/blob/main/main.py#L481 https://github.com/ossillate-inc/packj/blob/main/main.py#L48...