ReflectiveDLLInjector

Reflective DLL injector targeting svchost.exe. Internal name SvchostInjector.x64.dll. ReflectiveLoader fileless injection. Direct NTDLL syscall access for ETW/AV bypass. Process enumeration via CreateToolhelp32Snapshot. Memory-mapped injection. 128-char AES key config string.

Perfil de amenaza

Tipo Loader

Lenguaje de programaciónC/C++

Protocolo C2Named Pipe/C2

Primera detección2024

Objetivos Küresel

Propósito / Capacidades

Process Injection/Fileless Loader

Aún no se han identificado servidores C2 para esta familia.

Informes de investigación (1)

Kritik 2 Tem 2026

ReflectiveDLLInjector out.dll -- SvchostInjector.x64.dll Dahili Isim, ReflectiveLoader Dosyasiz Enjeksiyon, ntdll.dll Direkt Syscall ETW AV Bypass, CreateToolhelp32Snapshot Process32FirstW Hedef Proses Tespiti | Kritik

ReflectiveDLLInjector out.dll x64. SvchostInjector.x64.dll dahili isim. ReflectiveLoader dosyasiz enjeksiyon. ntdll.dll direkt syscall ETW AV bypass. CreateToolhelp32Snapshot Process32FirstW hedef proses tespiti.

Leer informe →