PhantomGraph: Backdoor with OneDrive C2
PhantomGraph is a backdoor that shares code overlap with PhantomCore. It consists of two DLL modules: SysExcSvc.dll for receiving commands and exfiltrating…
Tag: DLL
LUNCHPOKE: Malicious DLL Disguised as Notepad++ Plugin
LUNCHPOKE is a malicious DLL (NppExport.dll) that unpacks a RAR archive containing BURNYBEAR and MATCHBOIL.V2. It sets up persistence via a scheduled…