Check out my new blog breaking down #GOOTLOADER malware and how it has evolved this year.
#GoogleCloud #Mandiant #Malware
googlecloudcommunity.com/gc/…
The #GOOTLOADER #decoder now parses the scheduled task properties and dropped files. #UNC2565 #Mandiant
github.com/mandiant/gootload…
Updated the #GOOTLOADER #decoder to address errors produced by recent samples. github.com/mandiant/gootload…
#UNC2565 #Mandiant
Andy Morales retweeted
Check out our new blog about GOOTLOADER and notable changes to the TTPs by #UNC2565. We are covering the various methods used by the malware to obscure its code, as well as provide scripts that can automate the deobfuscation process.
#GOOTLOADER #Mandiant
mandiant.com/resources/blog/…

