Zero-Dwell Threat Intelligence Reports

Win64 Anubis Ransomware Exhibiting Strong Encryption And Worm Traits.exe

64bits detect-debug-environment

MSIL Backdoor Leveraging Encrypted C2 And Anti-Analysis Techniques.exe

long-sleeps detect-debug-environment calls-wmi checks-memory-available spreader assembly malware checks-disk-space

ShellHost Trojan Using Scheduled Tasks And Encrypted Remote Control.exe

detect-debug-environment calls-wmi checks-user-input assembly malware

AsyncRAT Backdoor Using Pastebin For Dynamic Command Retrieval.exe

spreader assembly payload

MSIL AsyncRAT Sample Triggering Widespread High-Confidence Detections.exe

detect-debug-environment spreader assembly malware executes-dropped-file

WinPEAS Binary Triggering Widespread Hacktool And Trojan Detections.exe

64bits detect-debug-environment calls-wmi spreader assembly checks-cpu-name

MSIL Quasar Payload Establishing Encrypted Remote Command Channel.exe

long-sleeps detect-debug-environment checks-user-input assembly

MSIL Malware Leveraging WMI Queries And TLS Communication.exe

calls-wmi assembly payload

High-Severity AsyncRAT Sample With Persistent C2 Connectivity.exe

detect-debug-environment spreader assembly obfuscated

AsyncRAT Backdoor With hVNC And Encrypted C2 Channel.exe

assembly

AsyncRAT Payload Leveraging Dynamic DNS For Remote Access.exe

assembly malware payload

Signed .NET Enumeration Tool Triggering Widespread Hacktool Detections.exe

64bits detect-debug-environment calls-wmi spreader assembly