Skip To Main Content
LPVOID lpEnvironment on Muck Rack

LPVOID lpEnvironment

As seen in: Check Point Research
Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work. Claim your profile

Get in touch with LPVOID

Contact LPVOID, search articles and posts on X, monitor coverage, and track replies from one place.

Learn more about Muck Rack

Actions

Share this page

Is this you?

As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile

Articles

DotRunpeX - demystifying new virtualized .NET injector used in the wild

|
By LPWSTR lpCommand Line, BOOL bInherit Handles, DWORD Flags, LPVOID lpEnvironment
| Check Point Research
Check Point Research (CPR) provides an in-depth analysis of the dotRunpeX injector and its relation to the older version DotRunpeX is protected by virtualization (a customized version of KoiVM) and obfuscation (ConfuserEx) – both were defeated Investigation shows that dotRunpeX is used in the wild to deliver numerous known malware families Commonly distributed via phishing emails as malicious attachments and websites masquerading as regular program utilities We confirmed and detailed the...
Open in Who Shared Issue with article?
See all 1 articles