■■■□□ Kraken Mask: A sleep obfuscation tool is used to encrypt the content of the .text section with RC4 (using SystemFunction032). To achieve this encryption, a ROP chain is employed with QueueUserAPC and NtContinue.
● Half of it complete skipped my head. Don’t know what this tool actually does.
https://github.com/RtlDallas/KrakenMask
https://t.me/cKure/12723