ctrlINT What the industry said about every indicator, with the quote

in-memory[.]toDomain

Reported by 1 independent source · first reported by Zscaler ThreatLabz · last reported

Last reported 6 months ago

What the reports say

1 report, newest first · the exact sentence from each

  1. “…bedded assembly into memory and execute its entry point.Figure 5: Reflection-based loading and execution of an embedded .NET assembly in-memory[.]To avoid being detected, the attackers carefully blend in with legitimate activity like normal system processes.”

    Zscaler ThreatLabzVendor
    In-Memory Loader Drops ScreenConnect

Indicators reported together

named in the same reports
Copy these 3 indicators · defanged

Thanks — we review every report.

Report a wrong value
What is wrong with in-memory[.]to here?
No account needed. We do not store your IP address.