Malware Analysis
🔒 LockedVery Easy
HackTheBox — Sherlock: PhantomRing
Static analysis of PhantomRing — a stealthy Linux post-exploitation agent built to slip past EDR syscall monitoring and erase itself. Full writeup sealed until the Sherlock retires.