It attempts to suppress Windows Firewall, EventLog, and Resmon, reducing visibility into destructive activity. Explore the behavior: https://app.any.run/tasks/de26bdeb-e6af-48b4-a960-56d5d458f99b/
Full breakdown and IOCs: https://any.run/cybersecurity-blog/ironchain-analysis/
https://i.redd.it/jyv9pbz319uh1.jpeg
Source: r/u/ANYRUN-team · by /u/ANYRUN-team