Reversing a Nim-based APT Sample with Ghidra and x64dbg

Introduction This article is not just about analysing a malware sample, it's more about sharing my malware analysis methodology in general, and the sample I used has some interesting characteristics that make it a good candidate for demonstration. The sample is from a Chinese APT group known as RedDelta. The …