Holdinghands C2 IP Address Data Added Via Registry

Tim Peck@timpeck

•updated Oct 17, 2025•1•1•42

Detects modifications to a registry key which contain an IP address as data which is used by HoldingHands malware to update its C2 server IP address.