Interlock RAT PHP Variant Execution and Associated Active IOCs and TTP´s

Chaitanya B B@mralien

•updated Jul 15, 2025•3•6•51

Detects execution of the Interlock RAT PHP variant and associated activity by looking for specific execution parameters, initial download commands, and known malicious file hashes, domains, and IP addresses.