### Overview
Following the initial compromise via spear phishing, the Lazarus Group swiftly moved to deploy custom malware within the Bangladesh Bank network. This report explores the specifics of the malware used, its capabilities, and its role in the broader heist operation.

### Key Findings
- **Custom Malware Identification**: The malware was tailored to bypass the bank's security measures, specifically targeting systems connected to the SWIFT network.
- **Capabilities**: Enabled covert communication with command and control servers, data exfiltration, and remote system control.
- **Evasion Techniques**: Utilized obfuscation and polymorphic features to remain undetected by traditional antivirus solutions.

### Implications
This stage allowed the attackers to gain a foothold within the network, setting the stage for establishing persistence and further infiltration.