Xcitium Logo

Zero-Dwell Threat Intelligence Reports

Registry Interaction and External Module Invocation Detected in Signed Free Utility Build.exe
signed long-sleeps overlay assembly obfuscated
Trojanized Uninstaller Component Embedded Within Free Converter Distribution Chain.exe
64bits assembly payload
Debug-Aware Control Flow Embedded in High-Confidence Gentlemen Payload.exe
64bits long-sleeps detect-debug-environment
High-Confidence Ransomware Build Identified Through 64-Bit Console Execution.exe
64bits long-sleeps detect-debug-environment payload
Memory-Heavy Runtime and Console Execution Define Gentlemen Deployment Pattern.exe
64bits long-sleeps detect-debug-environment payload
Sandbox-Resistant Runtime Observed in 64-Bit Gentlemen Ransomware Builds.exe
64bits long-sleeps detect-debug-environment
Anti-Analysis Barriers Gate Encryption Trigger Across Gentlemen Campaigns.exe
64bits long-sleeps detect-debug-environment
Delayed Execution and Debug Environment Detection Gate Gentlemen Ransomware Detonation.exe
64bits long-sleeps detect-debug-environment
Memory-Heavy Encryption Logic Marks The Gentlemen Ransomware Build Line.exe
long-sleeps detect-debug-environment idle
Reconnaissance-Led Deployment Signals DevMan’s Enterprise Targeting Model.exe
long-sleeps detect-debug-environment
Log Clearing and Backup Sabotage Signal Imminent DevMan Detonation.exe
long-sleeps detect-debug-environment
Backup Sabotage and Log Erasure Signal Imminent Encryption Events.exe
long-sleeps overlay calls-wmi