Bring Your Own Command & Control (BYOC2) | Huntress

Huntress analyzes a JScript/Valak malware sample that bluntly includes plaintext C2 domains and loads additional JavaScript from a registry key; the sample builds Base64-encoded C2 endpoints, polls multiple domains for --TASK payloads, decodes and executes tasks via WMIC and scheduled tasks for persistence and command execution, and the blog post provides IOCs and links to the discovered code.