Analysts often find a C2 (Command & Control) IP address embedded in a config file.
Extract contents to find hidden files, such as .exe , .bat , or .lnk shortcuts. WinblowsEkspee.zip
Use tools like file or strings to check for suspicious text. Analysts often find a C2 (Command & Control)