GoReSym

Reported Context (1)

and obfuscates the moduledata structure that tools use to locate it, breaking static analysis tooling. GoReSym, which has specific recovery strategies for garbled binaries, could not resolve a function table on this Fake Zoom Installer Uses .NET Downloader to Deliver Overlord RAT on macOS

Malware (2)

People (1)

Threat Actors (1)

MITRE ATT&CK (12)

Products (1)

Tools (2)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.