■■■■■
Stealthy .NET Malware : Hiding Malicious Payloads as Bitmap Resources.
https://unit42.paloaltonetworks.com/malicious-payloads-as-bitmap-resources-hide-net-malware/
Reverse Engineering Snake Keylogger : Full .NET Malware Analysis Walkthrough
https://any.run/cybersecurity-blog/reverse-engineering-snake-keylogger/
A deep dive into .NET malware obfuscators:
https://any.run/cybersecurity-blog/net-malware-obfuscators-analysis-part-one/