Revealing the ‘Snip3’ Crypter, a Highly Evasive RAT Loader

Researchers identified four versions containing 11 sub-versions in this initial loader stage, with the main difference between the four being the second-stage PowerShell loading mechanism.