VERY IMPORTANT

Affiliate involved in Maze ransomware operations profiled from the actor perspective while also detailing their involvement in other groups. Finding the Maze loader being leveraged for delivering the Maze payload in memory is something that doesn’t happen very frequently. This loader has been leveraged in its unpacked form being directly downloaded.