7 ms·
indeed, but the point was this malicious scripts usually try to install programs, like droppers.
by jmau111 4y ago
indeed, but the point was this malicious scripts usually try to install programs, like droppers.
- _8j50 4y agoRunning and installing are different things. A popular dropper I frequently run into for example never drops an executable to disk, it loads base64 from registry, decodes/decrypts it and reflectively executes the .NET assembly which in turn decodes and executes shell code from registry.