#TOUCHSHIFT

Malware/Tool

2023-03-09 • Stealing the LIGHTSHOW (Part One) — North Korea's UNC2970

TOUCHSHIFT is a malicious dropper that uses DLL search-order hijacking to load itself beside legitimate Windows binaries and execute one or two embedded payloads in memory.

Tagged Reports

« Back