BITTER PapRAT and WmRAT Campaign IOC and Behavior Detection

Aamir Muhammad@Aamir

•updated 2 days ago•0•0•13

Detects indicators of compromise (IOCs) and suspicious behaviors associated with the BITTER threat group's PapRAT and WmRAT campaigns on Windows systems, including specific file hashes, malicious domains, C2 IP addresses, dropped files, scheduled tasks, and anomalous process execution chains.