Maybe easier to find an exploit in sonar and patch it to rewrite everything it writes to disk into executables