Unpacking Colibri Loader: A Russian APT-linked Campaign
A Colibri Loader unpacking walkthrough covering anti-analysis techniques, string decryption, and YARA detection.
Yara
Tracking PrivateLoader: Malware Distribution Service
Tracking PrivateLoader delivery chains and identifying 30 malware families in the collected payloads.
Decrypting and Hunting PrivateLoader
Building a PrivateLoader string decryptor and YARA rule from a stack-based XOR pattern.