Hancitor

Hancitor is downloader used to deliver other malware families.

Process spawned unexpected child process

This typically indicates the parent process was compromised via an exploit or macro.

suricata: ET MALWARE Tordal/Hancitor/Chanitor Checkin

suricata: ET MALWARE Tordal/Hancitor/Chanitor Checkin

Blocklisted process makes network request