SANS @MIC Talk - Self-Compiling Malware

  • Monday, 20 Apr 2020 3:30PM EDT (20 Apr 2020 19:30 UTC)
  • Speaker: Xavier Mertens

While hunting, I recently found interesting malware samples that use Microsoft. NET commands to compile their second stage on-premise. This talk will review some of them and show you how they (ab)use the commands present on almost any modern Windows computer.