Higaisa used

Higaisa exfiltrated data over its C2 channel.(Citation: Zscaler Higaisa 2020)|
|mitre-attack|enterprise-attack|Linux,macOS,Windows|T1027.001|Binary Padding|

Higaisa performed padding with null bytes before calculating its hash.(Citation: Zscaler Higaisa 2020)|