{"version":"1.0","type":"rich","provider_name":"RootPwn","provider_url":"https://rootpwn.me","title":"BUGHATCH Malware: In-Memory PowerShell Implant from CUBA Campaign","description":"BUGHATCH is a custom C2 implant discovered in February 2022 during the CUBA ransomware operation. The tool is delivered via an obfuscated PowerShell dropper, loads in memory, and can download and execute arbitrary code using reflection, shellcode, or system commands. Defenders should block the dropp","url":"https://rootpwn.me/news/bughatch-malware-in-memory-powershell-implant-from-cuba-campaign","thumbnail_url":"https://rootpwn.me/images/46084ac1aedd4c0680daa87691c27efe.jpg","thumbnail_width":1600,"thumbnail_height":900}