avatar

Stephen Lincoln

@s2s_stephen
1 follower42 downloads1 copy4 likes55 views

1 detection

Detects components of the KimJongRAT PE variant, including the orchestrator (NetworkService.dll), loader (sys.dll/baby.dll), and stealer (dwm.dll), based on unique strings, PDB paths, and network communication artifacts.
avatar
Stephen Lincoln@s2s_stephen
avatar
Detections.ai Community
1 year ago
1434