Malware Analysis - C2 extractor for Turla’s Kopiluwak using Binary Refinery

We create a C2 extractor for APT malware Kopiluwak. For that we need to unpack two layers of code (JScript, VBA) and remove the slight obfuscation. The sample is suitable for beginners who want to train their RE skills with JScript, VBA and C2 extraction. You find the sample download below. Malware Analysis course: binary refinery: oletools: sample: kopiluwak on malpedia: Follow me on Twitter: