Executive Summary This analysis looks at a malicious archive, ENTITY.zip, that delivers a multi-stage Windows infostealer/RAT. The lure impersonates the “customer services” branding of a governmen...

Executive Summary A result of analyze a 32-bit Windows executable that functions as a multi-stage loader for a .NET credential and cryptocurrency-wallet stealer. The sample uses process hollowing ...