op_chimera

A targeted phishing campaign has been captured by your mail gateway. Analysts isolated an attached ISO that contained a Windows dropper. Several hashes were uploaded to a malware repository.

Task: correlate the provided intel artifacts to find the dropper's c2 domain and the campaign codename.

Format: SPL{dropperc2domain_campaigncodename}