Lost in relocation: analysis of a new loader distributing CASTLESTEALER
CYBERSECURITY FEATURED ANALYSIS

Lost in relocation: analysis of a new loader distributing CASTLESTEALER

SOURCE

Elastic Security Labs

DATE

READ

1 min read

Find out how a new obfuscated loader evades static detection using .reloc section abuse, five anti-VM/language checks and MBA obfuscation to deliver infostealer malware via Google Ads.

Find out how a new obfuscated loader evades static detection using .reloc section abuse, five anti-VM/language checks and MBA obfuscation to deliver infostealer malware via Google Ads.