Category: Malware Analysis

Intelligent Monitoring: Removing the Noise from Malware Analysis

This blog post is the first in a two-part series describing how

Preventing Sandbox Evasion with Randomized Filenames

In the malware analysis community, it is common to rename a malware
2017-08-21
Poweliks Malware – Filelessly Persistent

Poweliks Malware – Filelessly Persistent

Malware Family: Poweliks Hash Value SHA256: 4727b7ea70d0fc00f96a28de7fa3d97fa 9d0b253bd63ae54fbbf0bd0c8b766bb View the Full Poweliks

Password Protected Word Document Connects to TOR Hidden Service

Hash Value SHA256: 3a813df1c8f1e835cc98dd60b799c64e61 db51a259ee30b7235004ccb3c9df64 View the Full Password Protected Word Document
2017-07-14

Petya/NotPetya/ExPetr Cyber Attack is More Wiper Than Ransomware

Malware Family: (Not)Petya Hash Value SHA256: 027cc450ef5f8c5f653329641ec1fed 91f694e0d229928963b30f6b0d7d3a745 View the Full Petya
2017-06-19
404 Error Page Hides RAMNIT.A Worm in the Source Code

404 Error Page Hides RAMNIT.A Worm in the Source Code

Malware Family: Win32/Ramnit Hash Values MD5: 089dc369616dafa44a9f7fefb18e8961 SHA1: c4a2430634b7ca7427d2c055dbbb1fb8cd42a285 SHA256: 4ebafa2738f11d73d06dddf18ce41cf 02c6913f431f2b383f7abaa0d04419f2f
2017-06-05
VMRay Analyzer Identifies Resume Containing Evasive Malware

VMRay Analyzer Identifies Resume Containing Evasive Malware

Recently, we received a seemingly innocuous job application with an attached Word
2017-05-17
Jaff Ransomware Hiding in a PDF document

Jaff Ransomware Hiding in a PDF document

The challenge for a malware author today has more to do with
2017-05-15
Wanna Decryptor Worm Spreads Over MS17-010 Vulnerability

Wanna Decryptor Worm Spreads Over MS17-010 Vulnerability

About one month ago, the Shadow Brokers hacker group published a set

Uncover the truth of Cybersecurity, one story at a time

Keep up to date with our weekly digest of articles. Get the latest news, invites to events, and threat alerts!

Subscribe to our Newsletter