Malware Analysis Report (MAR) - 10135536-B

#### Executive Summary: This US-CERT Malware Analysis Report analyzes seven malicious Windows binaries attributed to North Korean HIDDEN COBRA (BANKSHOT) actors, describing proxy servers and remote-access tools that use XOR-based ciphers, falsified TLS handshakes with legitimate certificates, and OpenSSL/DGA mechanisms to conceal C2 and proxy traffic; the report includes YARA signatures, file hashes, detailed behavioral analysis, IOCs, and mitigation guidance.