[QuickNote] Techniques for decrypting BazarLoader strings

Malware Analysis
1
  1. Overview Usually, to make it more difficult for analysts, malware authors will hide important strings and only decrypt these strings during runtime. The famous malwares like Emotet, QakBot or TrickBot often use the one or some functions to perform decrypting strings when needed. However, on researching and analyzing some other malwares such as Conti, […]

Article Link: [QuickNote] Techniques for decrypting BazarLoader strings | 0day in {REA_TEAM}