Once inside the network, Hidden Cobra deploys a modified variant of the Destover wiper, aiming to destroy data and disrupt services within critical infrastructure. This alert was triggered following the execution of the Destover payload on a compromised host.