Grixba Infostealer - Gt_net.exe WMI/WinRM Enumeration from Public Music Directory
Detects signs of Grixba malware activity, including process execution of Gt_net.exe from the Public/Music directory, associated WMI/WinRM remote network connections, and the creation of staging artifacts such as data.zip or ExportData.db.
Cortex XDR
