Tag

Malware-Staging

1 brief RSS

Suspicious Legitimate Application Dropping Executable

This brief details a detection method for identifying malicious activity where legitimate Windows applications, including Living-Off-The-Land Binaries (LOLBINs) and common productivity software, are abused to drop executable files onto the disk, often indicating malware staging, persistence mechanisms, or process injection attempts.

living-off-the-land LOLBIN persistence malware-staging process-injection windows

1r 3t 3d ago