Stealth Falcon preying over Middle Eastern skies with Deadglyph

ESET Research discovered and analyzed Deadglyph, a sophisticated, modular backdoor attributed to the Stealth Falcon APT targeting a Middle Eastern government; the report describes a multistage registry-based loader, a native x64 Executor that hosts a .NET Orchestrator, module-based command delivery from C2, multiple evasion techniques (machine-specific keys, obfuscation, AMSI avoidance), associated multistage shellcode downloader, IoCs (file hashes, certificates, C2 addresses), and mapped MITRE ATT&CK techniques.