VBS Stager to In-Memory C# Loader
From an obfuscated VBS dropper through two PowerShell stages to a fileless C# loader that hides its strings in a DES-encrypted resource and hollows RegAsm.
[ TAG ]
vbs
2 malware analysis write-ups tagged vbs.