This is a heavily interactive web application, and JavaScript is required. Simple HTML interfaces are possible, but that is not what this is.
Post
ThreatInsight
threatinsight.proofpoint.com
did:plc:5gwujgymmotfb4pszrxoblwb
The BAT file contacts asdxcvdfg[.]getenjoyment[.]net and executes the response. This led to multiple additional stages, including a script that creates a VBScript file and sets a scheduled task for persistence, and another that performs extensive host reconnaissance, all using the same C2 domain.
2026-01-28T21:34:33.892Z