Screening Serpens - SoftwareLicencing Anomalous Network

Ibrahim Saud@tektrix

•updated Jun 19, 2026•0•0•4

Detects the disguised SoftwareLicencing.exe reaching out to external networks rather than internal KMS servers, as observed in the 'Screening Serpens' campaign attributed to Iranian APT groups.