TLDR InfoSec · STRATEGIES & TACTICS
HOW TO ANALYZE MALICIOUS MSI INSTALLER FILES
Summary from the TLDR InfoSec newsletter
This blog post discusses in detail how to analyze malicious MSI files used for software installation on Windows. MSI installers can hide malicious code within legitimate packages to avoid detection by security tools. Threat actors often use custom actions in MSI files to execute harmful code during installation.