Gamaredon - SFX Archive dropping GammaDrop (T1204.002)

Ibrahim Saud@tektrix

•updated Jun 20, 2026•1•0•7

Identifies self-extracting archives (SFX) natively dropping the initial VBS payload into temporary paths.