Cobalt Strike Loader Deobfuscation Using CyberChef and Emulation (.hta files)

https://embee-research.ghost.io/malware-analysis-decoding-a-simple-hta-loader/

https://twitter.com/home/status/1729525488278983093

https://twitter.com/home/status/1729526700386742326

https://twitter.com/home/status/1729527038652948689

https://twitter.com/home/status/1729529879333413276

https://twitter.com/home/status/1729591772748148819