Bulbature Network Reconnaissance Command

Tim Peck@timpeck

•updated Jan 8, 2026•2•0•58

Detects a specific command used by the Bulbature malware (associated with UAT-7290) to obtain the local network interface's name. This is part of its system reconnaissance routine.