Corrupted Headers Conceal Novel Windows RAT

Corrupted headers conceal novel Windows RAT

Identification and analysis efforts have been evaded for weeks by a new Windows remote access trojan through the use of corrupted Disk Operating System and Portable Executable headers, which could have provided more insi…

New Malware Spotted Corrupts Its Own Headers To Block Analysis - Cybernoz - Cybersecurity News

The FortiGuard Incident Response Team has released a detailed investigation into a newly discovered malware that managed to quietly operate on a compromised Windows machine for several weeks. What makes this malware different from others is its deliberate corruption of its own DOS and PE headers, a method designed to obstruct forensic analysis and reconstruction efforts by security researchers. Despite this challenge, Fortinet’s team successfull…

New Malware Spotted Corrupts Its Own Headers to Block Analysis

Fortinet spots new malware that corrupts its own headers to block forensic analysis, hide behavior, and communicate with its C2 server.