---
title: "Kernelzera (@kernelzera) | Hashnode"
description: "Sharing my adventures in reverse engineering. Read the latest articles by Kernelzera on Hashnode."
url: "https://hashnode.com/@kernelzera"
---

@kernelzera

# Kernelzera

@kernelzera · São Paulo, Brazil · Joined July 2026

Sharing my adventures in reverse engineering

### [Malware Write-up: Analyzing a PDF-Disguised Multi-Stage .NET Loader](https://kernelzera.hashnode.dev/malware-write-up-analyzing-a-pdf-disguised-multi-stage-net-loader?utm_source=hashnode&utm_medium=feed)

Disclaimer: This post describes malware analysis in an isolated lab. Do not run samples on a daily-use machine. Hashes and IOCs are shared for research and defense. Introduction I am an IT profession

9 min read · [kernelzera.hashnode.dev](https://kernelzera.hashnode.dev/malware-write-up-analyzing-a-pdf-disguised-multi-stage-net-loader?utm_source=hashnode&utm_medium=feed)

[1](https://hashnode.com/posts/malware-write-up-analyzing-a-pdf-disguised-multi-stage-net-loader/6a9defa05620cf1dfe54819c) [Sep 6](https://hashnode.com/posts/malware-write-up-analyzing-a-pdf-disguised-multi-stage-net-loader/6a9defa05620cf1dfe54819c)