Findings: Immediately after execution, python.exe performed a DNS query for ADDC01.KCD.local. The DNS response successfully resolved the hostname to 172.16.0.7. This indicates that the malware ...