Blog.

Welcome back to our Triage Thursday™ blog series! We’re excited to share this week’s detection updates with you. In these quick posts, we highlight the latest malware families detections that have been added.

New Windows Families This Week

• Added detection and extraction for Enmity family, Windows stealer
  • Enmity
• Added detection and extraction for SpankRAT family, Windows RAT
  • SpankRAT
• Added detection and extraction for CrystalX, Windows RAT
  • CrystalX
• Added extraction support for RatonRAT, Windows RAT
  • RatonRAT
• Added detection for SheetCreep, Windows backdoor
  • SheetCreep
• Added detection for OsamaBinLaden family, Windows Stealer
  • OsamaBinLaden
• Added detection for MailCreep, Windows backdoor
  • MailCreep
• Added detection for DustRAT, Windows RAT
  • DustRAT
• Added detection for DeskRAT, Windows RAT
  • DeskRAT
• Added detection for BrushWorm, Windows backdoor
  • BrushWorm
• Added detection for HttpTroy, Windows backdoor
  • HttpTroy
• Added detection for Spyder family, Windows backdoor
  • Spyder

Detection for Android

• Added detection for ActionSpy, Android spyware
  • ActionSpy
• Added detection for WelcomeChat, Android spyware
  • WelcomeChat
• Added detection for Asacub, Android banking trojan
  • Asacub
• Added detection for DarkShades, Android spyware
  • DarkShades
• Added detection for SilkBean, Android spyware
  • SilkBean
• Added detection for GoldenEagle, Android spyware
  • GoldenEagle
• Added detection for DualToy of Android version, android trojan
  • DualToy
• Added detection for Exobot, Android banking trojan
  • Exobot
• Added detection for Exodus, Android spyware
  • Exodus
• Added detection for FakeSpy, Android spyware
  • FakeSpy
• Added detection for FlexNet, Android banking trojan
  • FlexNet
• Added detection for FunkyBot, Android info stealer
  • FunkyBot
• Added detection for RecruitRat, Android banking trojan
  • RecruitRat
• Added detection for SaferRat, Android banking trojan
  • SaferRat
• Added detection for OmniRAT, Android spyware
  • OmniRAT
• Added detection for AdoBot, Android spyware
  • AdoBot

Detection for Ransomawre

• Killada
• Blackmagic
• AzzaSec
• Axlocker
• Alphaware
• Alcatraz

Detection for Adware

• SpySheriff
• OpenInstall
• Metaquotes

Updates for Existing Families

• Updated detection for HelloKitty ransomware
  • HelloKitty
• Updated signatures for Medusalocker ransomware
  • Medusalocker
• Updated detection for Ako ransomware
  • Ako
• Updated detection for FakeAV adware
  • FakeAV

If you have any feedback, questions, or issues about Triage™ feel free to reach out to us any time - we do our best to respond to all feedback but even if we can’t get back to you straight away your files will go into our list of things to review and help us prioritize tasks.

You can find us directly through the website, or using the Feedback option on an analysis report page.

Not signed up yet? Head over to tria.ge to register for a free account.