Zero-Dwell Threat Intelligence Reports

Trojanized Executable Deploys XMRig-Style Miner and Modifies Autoruns.exe

PlugX-Style Dropper with UPX Sections and Rundown Execution Chains.exe

overlay

Berbew Proxy Trojan Leveraging Web Event Logger Registry Hooks.exe

overlay spreader

Go-based Mimikatz/GoAgent variant credential-theft functionality and potential C2 tunneling.exe

64bits overlay

Trojan Downloader (Upatre) Writes Temp EXE and Beacons for Payloads.exe

overlay spreader

Credential-Stealing Trojan Embeds TinyNuke Loader via Fake System Path.dll

64bits long-sleeps detect-debug-environment

Trojan.Downloader.Upatre Deploys CryptoLocker Encryption Module.exe

overlay spreader upx

Malicious Word Clone Executable Containing Tedy/Upatre Downloader Chain.exe

overlay spreader

UPX-Packed Upatre Trojan Acting as Downloader for Zbot and CryptoLocker.exe

overlay spreader

Malicious Word Executable Embeds Upatre Dropper and Overlay Resource.exe

overlay spreader

Trojan Proxy Qukart Loader with Overlay Payload and Encrypted Channel.exe

overlay spreader

Trojan.Win64.CoinMiner Variant Built with Visual Studio 2019 LTCG/C++.exe

64bits overlay