Komari C2 - Agent Dropping Executable Payloads (T1105)
Correlates the Komari C2 agent writing secondary executable payloads (.exe, .dll) to disk, indicating lateral tool transfer or stage progression.
Microsoft Sentinel (KQL)

Correlates the Komari C2 agent writing secondary executable payloads (.exe, .dll) to disk, indicating lateral tool transfer or stage progression.

Already have an account?