LetsDefend SOC250 - APT35 HyperScrape Data Exfiltration Tool Detected

We start by taking the ownership of the alert. Next we create case for the alert. Next step is for us too start the playbook Before we move ahead, let's search for the file's hash on VirusTotal: 50 out of 70 vendors flag it as malicious, enough for us to conclude that is is. Next we move on to Endpoint Security to find if the malware was actually running on the infected host, and from the above screenshot we see that it is. Since the rule says that it was a data exfiltration attempt, the next st