string hashing

0001-01-01

String hashing is a malware anti-analysis and obfuscation technique in which strings are hidden as hashes rather than their true values.

For example, if a sample wanted to search for processes named “securitytool”, it would hash process names and compare hashes rather than strings to match the process name. This ensures that the string “securitytool” isn’t present in the sample, masking the intent of their malware from casual observation.

This can also be used for things such as commands, filenames, passwords, etc.