Hogfarming.7z ◎ (FREE)
: Launching the primary file triggers the sideloading of a malicious component (often disguised as a library like MpsSvc.dll or similar).
: It is frequently utilized in campaigns that leverage DLL Side-Loading techniques. In these scenarios, a legitimate, digitally signed executable is bundled with a malicious DLL that the executable is forced to load. HogFarming.7z
: The file is primarily distributed via Spear Phishing emails. These emails often use topical lures related to regional geopolitics or government directives to entice victims into downloading and extracting the archive. Analysis of the Infection Chain : Launching the primary file triggers the sideloading