I missed this one because of ~~beer~~ summer holidays.

[oldirtysilma@infosec.exchange]

I missed this one because of ~~beer~~ summer holidays.
Anyway, if you want to see how a shellter protected binary looks like:

Taking SHELLTER: a commercial evasion framework abused in-the-wild — Elastic Security Labs

Elastic Security Labs detected the recent emergence of infostealers using an illicitly acquired version of the commercial evasion framework, SHELLTER, to deploy post-exploitation payloads.

(www.elastic.co)

#malware #reverseengineering #shellter