Hey malware hunting friends! It’s Triage Thursday, and we’re here to spotlight the newest and sneakiest malware families out there.
Have you noticed any fresh threats this week? We have some new updates to share that will make defense much easier!
Feel free to share your thoughts and feedback with us at any time. Let’s check out the latest threats and explore our detection and extraction to effectively hunt them down!
New Families This Week
-
Added detection for MaksRAT Java-based infostealer, Windows stealer
- MaksRAT Analysis
-
Added detection for Poseidon family, Linux backdoor
- Poseidon Analysis
-
Added detection for SmartAssembly, Windows .NET packer
Updates for Existing Families
-
Updated detection and extraction for Darkcloud v3.2
- Darkcloud Analysis
-
Updated detection and extraction for SvcStealer and its PyInstaller version family
- SvcStealer Analysis
-
Updated detection for Rhadamanthys stealer to detect its payload
-
Updated detection for .NET Reactor, Windows .NET packer
-
Updated detection for WSHRAT, Windows stealer
- WSHRAT Analysis
If you have any feedback, questions, or issues about Triage feel free to reach out to us any time - we do our best to respond to all feedback but even if we can’t get back to you straight away your files will go into our list of things to review and help us prioritize tasks.
You can find us directly through the website, or using the Feedback option on an analysis report page.
Not signed up yet? Head over to tria.ge to register for a free account.