other
Remote access trojan named as one payload controlled through repurposed expired domains acting as C2.
No evidence-backed relationships are recorded.
No current published clusters are mapped here yet.