Welcome back to our Triage Thursday™ blog series! We’re excited to share this week’s detection updates with you. In these quick posts, we highlight the latest malware families detections that have been added.
New Windows Families This Week
- Added detection and extraction for Nexus (Windows version), Windows trojan
- Nexus sample:
- Added detection and extraction for Sistema, Windows RAT
- Sistema sample:
- Added detection and extraction for BlakcSeeStealer, Windows stealer
- BlakcSeeStealer sample:
- Added detection for NaviRAT, Windows RAT
- NaviRAT sample:
- Added detection for NaviLogger, Windows keylogger
- NaviLogger sample:
- Added detection for ZohoMurk, Windows backdoor
- ZohoMurk sample:
- Added detection for STORESOCKS, Windows backdoor
- STORESOCKS sample:
- Added detection for SilvaTweaksStealer, Windows stealer
- SilvaTweaksStealer sample:
- Added detection for 317PremiumStealer, Windows stealer
- 317PremiumStealer sample:
- Added detection for PedrohaStealer, Windows stealer
- PedrohaStealer sample:
Detection for macOS
- Added detection for Gaslight, macOS implant
- Gaslight sample:
Detection for Android
- Added detection and extraction for MYHONE69, Android RAT
- MYHONE69 sample:
- Added detection for Geost, Android banking trojan
- Geost sample:
- Added detection for LORIKAZZ, Android botnet
- LORIKAZZ sample:
- Added detection for DoubleLocker, Android ransomware
- DoubleLocker sample:
- Added detection for FlexiSpy, Android spyware
- FlexiSpy sample:
Detection for Linux Families
- Added detection for Quasar Linux RAT (QLNX), Linux RAT
- QuasarLinux sample:
- Added detection for PITHOOK, Linux backdoor
- PITHOOK sample:
- Added detection for PITSOCK, Linux backdoor
- PITSOCK sample:
- Added detection for FritzFrog, Linux botnet
- FritzFrog sample:
- Added detection for HeadCrab, Linux botnet
- HeadCrab sample:
- Added detection for NoaBot, Linux botnet
- NoaBot sample:
- Added detection for SpectralBlur, Linux backdoor
- SpectralBlur sample:
- Added detection for QUIETEXIT, Linux backdoor
- QUIETEXIT sample:
- Added detection for IceFire, Linux backdoor
- IceFire sample:
- Added detection for AutoColor, Linux backdoor
- AutoColor sample:
Updates for Existing Families
- Updated detection and extraction for AdaptixC2 beacon
- AdaptixC2 sample:
- Updated detection and extraction for latest NJRat variant
- NJRat sample:
If you have any feedback, questions, or issues about Triage™ feel free to reach out to us any time - we do our best to respond to all feedback but even if we can’t get back to you straight away your files will go into our list of things to review and help us prioritize tasks.
You can find us directly through the website, or using the Feedback option on an analysis report page.
Not signed up yet? Head over to tria.ge to register for a free account.