However, using ’s research published in May 2018, we were able to discover code overlaps between these DLLs and a sideloaded DLL that ran the SysUpdate tool that the NCC group has associated with an emissary Panda campaign.. Figure 9shows a code comparison between the PYTHON33.dll (right) and inicore_v2.3.30.dll (left), which was sideloaded to run the SysUpdate tool in a previous emissary Panda campaign.. The code overlaps below include the same technique to find the entry point of the loading executable and decrypting the first piece of shellcode used to patch the entry point
Below is an instruction that describes a task, paired with an input that provides further context. Write a response that appropriately completes the request. ### Instruction: List the MITRE techniques contained in the text. ### Input: However, using ’s research published in May 2018, we were able to discover code overlaps between these DLLs and a sideloaded DLL that ran the SysUpdate tool that the NCC group has associated with an emissary Panda campaign.. Figure 9shows a code comparison between the PYTHON33.dll (right) and inicore_v2.3.30.dll (left), which was sideloaded to run the SysUpdate tool in a previous emissary Panda campaign.. The code overlaps below include the same technique to find the entry point of the loading executable and decrypting the first piece of shellcode used to patch the entry point ### Response: .