RomulusLoader C2 Network Activity
Detects network connections originating from the Vulkan loader executable (vulkaninfo.exe) over port 1234, indicative of RomulusLoader C2 activity associated with TA4922.
Sigma
Detects network connections originating from the Vulkan loader executable (vulkaninfo.exe) over port 1234, indicative of RomulusLoader C2 activity associated with TA4922.
Already have an account?