BeepRAT HFY.exe Trojanized Telecom Utility Execution (Operation DragonClone)

Ibrahim Saud@tektrix

•updated Jun 30, 2026•0•0•0

Detects the execution of HFY.exe, a known component of the BeepRAT malware family, along with the presence of its associated sideloaded or dependency DLL files (e.g., data.dll, SQLite.Interop.dll). The rule monitors both process creation events and file system artifacts indicative of the malware's deployment.