Malware Theory - Process Injection

This is an overview to common process injection techniques used by malware, including AtomBombing, Process Hollowing aka RunPE, Process Doppelgänging.

My malware analysis course for beginners: https://www.udemy.com/course/windows-...
Buy me a coffee: https://ko-fi.com/struppigel
Follow me on Twitter:   / struppigel  

My process Injection overview infographic: http://struppigel.blogspot.com/2017/0...
Process Injection Techniques Gotta Catch Them All: https://i.blackhat.com/USA-19/Thursda...
Atom bombing: https://www.fortinet.com/blog/threat-...
Atom bombing: https://www.enisa.europa.eu/publicati...
Process Doppelgänging: https://hshrzd.wordpress.com/2017/12/...
Hasherezade's video on creating the illusion of executing a TXT file:    • Lost in Transaction: Process Doppelgä...  
DLL injection https://en.wikipedia.org/wiki/DLL_inj...
DLL Injection via LoadLibrary/CreateRemoteThread: https://www.codeproject.com/Articles/...
DLL Search Order Hijacking (DLL injection that is not process injection): https://dmcxblue.gitbook.io/red-team-...
Backdooring PE files with shellcode (code injection that is not process injection): https://www.ired.team/offensive-secur...