haktechs.com
Retrohunting APT37: North Korean APT used VBA self decode technique to inject RokRat – Malwarebytes Labs