I ended an article a couple of months ago with:
> I may analyze the final payload in a future post.

And finally the day has come.
Spoiler: it was not the final payload.

Dissecting PureCrypter: A Technical Malware Analysis
https://0xlibris.net/posts/infection_chain_infostealer_2

#PureCrypter #malware #infosec #reversing #cybersecurity #infostealer #malwareanalysis

Having fun with php:
https://0xlibris.net/posts/php_botnet

#malware #botnet #php #backdoor