JavaScript or VBScript files designed to reach out to a Command & Control (C2) server. Indicators of Compromise (IoCs)
While specific hashes vary by campaign, the following behaviors are consistent with this file: Spätzle.7z
Distributed via phishing emails disguised as invoices, shipping notifications, or internal HR documents (often referencing "Spätzle," a traditional German dish, to appear localized and innocuous). JavaScript or VBScript files designed to reach out