Рет қаралды 355
This was a simulation of a fileless malware that stores a replication of itself inside the Windows Registry in chunks. Every time the system reboots, it will read the chunks from the Windows Registry and replicate itself to a different location. This sample for simulation purposes also stores itself using different file types (e.g. PDF files).