DotRunpeX – demystifying new virtualized .NET injector used in the wild

Highlights: Introduction During the past few months, we have been monitoring the dotRunpeX malware, its usage in the wild, and infection vectors related to dozens of campaigns. The monitoring showed that this new dotnet injector is still evolving and in high development. We uncovered several different methods of distribution where in all cases, the dotRunpeX […]

The post DotRunpeX – demystifying new virtualized .NET injector used in the wild appeared first on Check Point Research.

campaigns cases check point research publications development distribution dotnet dotrunpex high infection injector introduction malware monitoring