Read Time:20 Second
Posted by malvuln on May 05
Discovery / credits: Malvuln – malvuln.com (c) 2022
Original source:
https://malvuln.com/advisory/710a77804637f65e22a2e230ff6444f9.txt
Contact: malvuln13 () gmail com
Media: twitter.com/malvuln
Threat: Conti.Ransom
Vulnerability: Code Execution
Description: Conti looks for and loads a DLL named “wow64log.dll” in
WindowsSystem32. Therefore, we can drop our own DLL to intercept and
terminate the malware pre-encryption. The exploit dll…