Malware Disguised as Normal Installation File of a Korean Development Company – EDR Detection

AhnLab Security Emergency response Center (ASEC) has previously covered the malware that is generated by the installation file of a Korean program development company.

When malware is distributed alongside an installation file, users will struggle to notice that malware is being executed concurrently. Additionally, due to its characteristic of operating in a fileless format by being injected into a normal program, signature-based anti-malware products find it difficult to detect such malware. …

ahnlab asec center detection development distributed edr emergency file generated installation malware malware analysis notice program program development response security sliver