XWorm Attack Chain: JavaScript, PowerShell, Reflective .NET Loader
The XWorm chain, from an obfuscated JavaScript dropper through PowerShell to a reflective loader that injects into MSBuild.
[ TAG ]
deobfuscation
2 malware analysis write-ups tagged deobfuscation.