Zero-Dwell Threat Intelligence Reports

Massive PE Resource Payload Exhibiting Classic Worm Capabilities.exe

payload exploit

WannaCry-Themed Dropper Deleting Shadow Copies For Impact.exe

long-sleeps detect-debug-environment assembly

Legacy WannaCrypt Payload Compiled With Visual Studio 98 Toolchain.exe

payload

WannaCry Ransomware Variant Embedding Classic Tor Onion C2 Paths.exe

payload

Classic WannaCrypt Payload Compiled With Legacy Visual Studio Tools.exe

payload

WannaCry Ransomware Sample Embedding Multiple Tor Onion C2 Endpoints.exe

Suspicious PE Executable Showing Strong WannaCrypt Ransomware Traits.exe

overlay corrupt

Backdoor Payload Adding RunKey Persistence And Defender Exclusions.exe

long-sleeps detect-debug-environment calls-wmi assembly persistence

XWorm Variant Adding Defender Exclusions Through PowerShell Commands.exe

long-sleeps detect-debug-environment calls-wmi checks-user-input assembly persistence obfuscated

XWorm V6.5 Payload Exhibiting Strong Sandbox Evasion Techniques.exe

detect-debug-environment checks-user-input assembly

XWorm Variant Implementing Long-Sleep Delays To Evade Sandboxes.exe

long-sleeps overlay detect-debug-environment calls-wmi assembly

XWorm Executable Using UPX Packing And Multiple AES Keys.exe

long-sleeps detect-debug-environment executes-dropped-file persistence upx