8.6
Potential compromise of [Specific Data Types].
Upon execution of internal components, the following actions were observed: BRAMOR.rar
Attempts to connect to C2 (Command & Control) server at [IP Address/Domain] . Potential compromise of [Specific Data Types]
Blacklist the associated hashes and C2 domains at the firewall and EDR level. BRAMOR.rar
Evidence of SMB scanning to adjacent workstations. 5. Remediation & Recommendations
Executes a [Trojan/Ransomware/Spyware] designed to [Exfiltrate data/Encrypt files]. 4. Impact Assessment
Disconnect the infected machine from the local network immediately.
