Dragon Weave - Com.dat Encrypted Payload Retrieval
Detects malicious UnityPlayer.dll reading the encrypted Com.dat container for decryption routines, indicative of the 'Dragon Weave' campaign.
Microsoft Sentinel (KQL)

Detects malicious UnityPlayer.dll reading the encrypted Com.dat container for decryption routines, indicative of the 'Dragon Weave' campaign.

Already have an account?