Curl Download From Telegram To Temp
Detects curl.exe being used to fetch content from Telegram channels and saving it to the AppData\Local\Temp directory, indicative of Gamaredon Dead Drop Resolver (DDR) resolution.
Sigma
Detects curl.exe being used to fetch content from Telegram channels and saving it to the AppData\Local\Temp directory, indicative of Gamaredon Dead Drop Resolver (DDR) resolution.
Already have an account?