Evidence of SMB scanning to adjacent workstations. 5. Remediation & Recommendations
Creates a registry key at HKCU\Software\Microsoft\Windows\CurrentVersion\Run . BRAMOR.rar
Disconnect the infected machine from the local network immediately. Evidence of SMB scanning to adjacent workstations