Zero-Dwell Threat Intelligence Reports

Windows API Functions Leveraged for Malicious Execution Flow by Nova Ransomware.exe

64bits detect-debug-environment payload

64-Bit Payload Executed to Encrypt Local Files by Nova Ransomware.exe

64bits detect-debug-environment calls-wmi payload

Windows Directory Abused for Payload Placement by Nova Ransomware.exe

64bits payload

Obfuscated MSIL Payload Executed via .NET Runtime by Lynx Ransomware.exe

spreader assembly payload

Secondary Payload Deployed via Dropper Component by Lynx Ransomware.exe

spreader assembly payload

Shellcode Executed via Custom Loader Component by Lynx Ransomware.exe

64bits

Command-Line Utility Abused to Configure Persistence by Lynx Ransomware.exe

spreader assembly malware

Malicious Payload Dropped to Disk by Lynx Ransomware Loader.exe

spreader assembly payload

Scheduled Task Created by Lynx Ransomware to Trigger Startup Execution.exe

assembly payload

Lynx Ransomware Loader Ensuring Reboot Survival Via Dual Persistence.exe

spreader assembly payload

Lynx Ransomware Payload Injecting Code And Bypassing Security Controls.exe

assembly payload

Dissecting Lynx Ransomware Behavior And Post-Exploitation Impact.exe

spreader assembly