Potassium Mirai downloader connecting to C2 134.199.154.64 over HTTP
Detects outbound network connections from processes targeting a known hard-coded Potassium campaign C2 IP address (134.199.154.64), followed by fallback DNS resolver queries using standard public DNS servers by the same process.
Microsoft Sentinel (KQL)
