KKernelzerainkernelzera.hashnode.dev·5d ago · 9 min readMalware Write-up: Analyzing a PDF-Disguised Multi-Stage .NET LoaderDisclaimer: This post describes malware analysis in an isolated lab. Do not run samples on a daily-use machine. Hashes and IOCs are shared for research and defense. Introduction I am an IT profession00