Skip to content

Malware

LucidRook

According to Cisco Talos, LucidRook is a sophisticated stager that embeds a Lua interpreter and Rust-compiled libraries within a dynamic-link library (DLL) to download and execute staged Lua bytecode

LucidRook is a Windows malware family.

Background

Cisco Talos characterizes LucidRook as an advanced stager that packs a Lua interpreter and Rust-compiled libraries into a dynamic-link library (DLL), which it uses to fetch and run staged Lua bytecode payloads.


Source: Malpedia (Fraunhofer FKIE).