@endrift@social.treehouse.systems
Post #1705132
2026-04-16 07:45 UTC
I don't think it actually injects this machine code as a payload actually, it just loads it into memory as a bytestring in Python, remaps the memory as executable, and then calls directly into it, with some malware-prevention bypass stuff in the middle.
Replies (1)
-
@endrift@social.treehouse.systems 2026-04-16 07:49
Anyway yeah if a malware analyst follows me and wants any of the stages involved, from the raw Python script to the machine code payload lmk