Silent Rotor - GetAdaptersAddresses Network Discovery (T1016)

Ibrahim Saud@tektrix

•updated Jun 21, 2026•0•0•4

Hunts for the malware using the Windows API GetAdaptersAddresses to compile the host's IPv4 configurations for exfiltration. Specifically targets a process named "Подтверждение заказа продукции ЦАИ.exe" making this API call.