OTX Threat: From WhatsApp to SYSTEM: Inside the VulcanRAT207.A Intrusion Chain

A sophisticated multi-stage intrusion chain begins with a WhatsApp-delivered financial document lure carrying Statement.exe. The malware employs NRV2E compression to conceal its true payload, which performs extensive host screening before attempting privilege elevation via COM-based techniques. Using PoolParty Variant 7 injection, the loader transfers execution into the Windows Task Scheduler proc