Giantspider.7z [ SECURE ]

Collects system data including CPU details, hardware configuration, and network info. Technical Indicators

The installers were signed with a now-revoked certificate issued to JOZEAL NETWORK TECHNOLOGY CO., LIMITED to bypass basic security warnings. Execution & Payload Details GiantSpider.7z

Automatically modifies Windows firewall rules to allow incoming and outgoing proxy traffic. Collects system data including CPU details

Acts as the service manager and update loader for persistence. 7zip[.]com (impersonating the legitimate 7-zip.org ).

Distribution through a lookalike website, 7zip[.]com (impersonating the legitimate 7-zip.org ).