Turla__2018__Turla_Neuron_Malware_Update.pdf

The NCSC documents a newer version of Turla’s Neuron malware, highlighting in-memory .NET payload execution, a redesigned loader, AES-based encryption, and modified C2 communications to evade prior detections, with accompanying IOCs, Yara rules, and associated files.