Is Rust better for Malware? | Rust Language

A look at Malware in Rust to understand if/why/how it is used

"Freeze.rs is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls written in RUST"

- chapters -
00:00 intro
05:39 exewho2
17:09 freeze.rs
27:50 Luca Stealer


I also use "cargo tree" to check dependencies.

The aim of this was to view a new area of Rust without any prior knowledge. Interestingly it was good to see and understand parts of it, and realise that quite a lot of it agreed with my preconceptions and outdated knowledge of OpSec!

This is June 2024 - and much of what I researched was/is from 2 years ago or more so treat it as reference rather than "How to hack" - as that is not my intention!

https://github.com/Tylous/Freeze.rs

"Digging through Rust to find Gold: Extracting Secrets from Rust Malware" :
https://www.binarydefense.com/resourc...

Links:
https://www.smukx.site/rust-programmi...

MD5 :
"The MD5 hash function produces a 128-bit hash value. It was designed for use in cryptography, but vulnerabilities were discovered over the course of time, so it is no longer recommended for that purpose. However, it is still used for database partitioning and computing checksums to validate files transfers."

#RustLang #Malware #Freeze