NailaoLoader: Hiding Execution Flow via Patching

Author(s): neeraj
Organization: Github (knight0x07)

Open article directly Open article on Archive.org

2022-01-18 ⋅ Twitter (@knight0x07) ⋅ neeraj
Thread on yet another comprehensive analysis of WHISPERGATE
WhisperGate

2021-11-19 ⋅ Twitter (@knight0x07) ⋅ neeraj
Tweet on Exmatter, custom data exfiltration tool, used by Blackmatter ransomware group
ExMatter

Propose Change NailaoLoader: Hiding Execution Flow via Patching