### Overview
Following the initial access, a Remote Access Trojan (RAT) was executed, gaining control over compromised systems.

### Findings
- **RAT Identified**: RAT-X v2.4
- **Capabilities**: Keylogging, Screen Capture, Command Execution
- **Command and Control Servers**: Traced to multiple IPs in Eastern Europe

### Impact
The RAT enables attackers to execute commands remotely, potentially leading to information theft and further system compromise.

### Next Steps
Investigate potential persistence mechanisms, including credential theft or other tactics used to maintain access.