Sample
- SHA256
-
bb35048b13c65e89ea00df97518a341404281bb7fe04cf095243c8e32ebd7da5 - Difficulty
- medium
- Platform
- Windows
- Tags
- bytecode electron galaxy hooking javascript v8
- Likes
- 0
- Views
- 65
- Submitter
- struppigel
Analysis
Goal
Use hooking to figure out the malware type and the C2 server.
Description
This sample has a hook defense mechanism, because it overrides console.log. Overcome this first to see any output.
Recommended Tools
nodejs notepad++
Image
Video
Solution by struppigel: Hooking V8 JavaScript Bytecode
Comments
Please login to view and post comments.