BBTok Targeting Brazil: Deobfuscating the .NET Loader with dnlib and PowerShell

We break down the full infection chain of the Brazilian-targeted threat BBTok and demonstrate how to deobfuscate the loader DLL using PowerShell, Python, and dnlib.

Article Link: A hard look at at BBTok

1 post – 1 participant

Read full topic

​We break down the full infection chain of the Brazilian-targeted threat BBTok and demonstrate how to deobfuscate the loader DLL using PowerShell, Python, and dnlib.

     
Article Link: A hard look at at BBTok
1 post – 1 participant
Read full topic