Zero-Dwell Threat Intelligence Reports

Qilin/Agenda Ransomware Payload Containing Embedded Victim Credentials.exe

detect-debug-environment

Qilin/Black Panther Loader Disabling Defender and Destroying Backups.exe

long-sleeps calls-wmi spreader checks-usb-bus

Vilsel/Qilin-Tagged Dropper Installed Under Acrobat DC Program Path.exe

spreader payload

Large Console-Mode Qilin Payload Detected as Ransomware.Qilin/QilinLoader.exe

spreader payload

DcRat Spyware Loader Disabling UAC and Secure Desktop Prompts.exe

UPX-Packed Trojan.Upatre Variant Used in CryptoLocker Campaigns.exe

overlay spreader upx

Downloader Trojan (Upatre/Baoc) Fetching Ransomware via HTTP C2.exe

overlay spreader

Zbot Downloader Embedding Overlay Resources for Ransomware Delivery.exe

overlay spreader

Overlay EXE Fetcher Installs CryptoLocker and Modifies Autorun Keys.exe

overlay spreader

Fake Support Tool Executable Deploying Trojan.Dropper.Daws Payload.exe

spreader

Trojan Downloader Delivering Zbot Payload via HTTP from Iranian-Hosted Sites.exe

overlay spreader

Salgorea/Upatre Trojan Masquerading as Microsoft Word Executable.exe

overlay detect-debug-environment spreader