ARCTIC WOLF HAS OBSERVED A NEW LOADER, DUBBED “CHERRYLOADER”, WRITTEN IN GO USED IN RECENT INTRUSIONS

Summary from the TLDR InfoSec newsletter

Arctic Wolf Labs has discovered a new loader called "CherryLoader" that is written in Go and has been used in recent intrusions. This loader allows threat actors to swap exploits without recompiling code. Arctic Wolf has provided technical analysis and indicators of compromise related to CherryLoader.