Gootloader is back! We’ve seen the sophisticated malware loader in three incidents since Oct. 27. Get the latest in our blog: okt.to/MlBGEL

I was looking at a recent #RaccoonV2 sample that uses API hammering to delay execution and complicate the analysis. tria.ge/230107-vytztah… I wrote a quick script to cleanup the decompiled code. github.com/N1ght-W0lf/Mal… (1/3)