Análise de ameaças abrangente, IOCs e relatórios de pesquisa sobre RAT, Infostealer, Backdoor e outras famílias de malware.
GoldDigger Android 185KB ktbcs.net C2. /var/jenkins_home/workspace/remoteEncrypt Jenkins CI PDB. businessPlugins StrategyUtils.
Babuk2 2MB. AES-GCM AAD cannot be input after data to be encrypted. GetTickCount64+GetTickCount+IsDebuggerPresent uclu anti-debug.
PhobosRansom 73KB LisectAVT_2403002C_164.exe 164. hedef. LisectAVT kampanya adlandirmasi. Cok kucuk 73KB ransomware.
FickerStealer 569KB Rust dili. _ZN5alloc11collections5btree Rust sembol isim mangling. mixsix_20211018-121016 zaman damgasi.
RisePro 1.7MB rise.exe kisa isim. ipinfo.io ve MaxMind.com kurban IP cografya parmak izi. 3 anti-debug.
NanoCore 1MB Scan#250226HPJetstar.exe HP yazici 25 Subat 2025. ZhaoZe DianJi Cin Nanocore config. C:\Users\Administrator pINX.pdb.
LokiBot 1.3MB Ordine di acquisto PO_109228 doc.iso italyanca satin alma siparisi. .iso UAC bypass teknik.
MedusaLocker 683KB. medusakxxtp3uo7vusntvubnytaph4d3amxivbggl3hnhpk2nmus34yd.onion + 2 ek onion. medusa.su. mike PDB. BTC.
Remcos 1.3MB SCAN DOC LOI.r00 Fransizca LOI kanun belgesi tarama lure. .r00 cok parcali RAR arsivi birinci parca.
FormBook 1.9MB Purchase_Order_Form.js satin alma siparisi JS. 1888 string 1.9MB = max obfuskasyon. aggregate viewport metrikleri sahte yorum.
RaccoonStealer 1.3MB ProtonVPN.exe ProtonVPN gizlilik VPN taklidi. Gazeteci aktivist hedef.
AsyncRAT 1.9MB RFQ-VIS_DGS_PR_202606015.js haziran 2026 tarih kodlu JS. dryst karakter arasi ayrac obfuskasyon.
NjRAT 988KB COTIZACION VANKARV.com.exe ispanyolca teklif. .exe gömülü sahte sirket ismi VANKARV.com.exe. LATAM.
DCRat 1MB sostener1.vbs ispanyolca dropper. 18 karakter rastgele degisken geutqmonpmjthuux WScript.Shell. power+shell string split.
PurpleFox 1.6MB openclaw installation.exe oyun lure. 103.118.255.239:8888/wj/1.jpg dropper JPEG kamuflaj. app.cc-coins.xyz.
SpyNote Android APK i11111i111.zip. com.clean.exchanges.xyz sahte kripto exchange paketi. Genymotion vbox86p emulator tespiti.
Gh0stRAT 826KB Çince 无常订制QQ语音神器.exe QQ ses araci lure. Wuchang ozel siparis QQ voice. Cin hedefleme.
CyberGate 1.1MB sqlite.dll SQLite veritabani DLL taklidi. sqlite3_aggregate_context sqlite3_aggregate_count gerçek SQLite export.
SectopRAT 1.1MB GARDEN.ps1. locationPhysicians4230.Su Sovyet .su TLD C2. yvtobgD4Uu base64 config. 2 BTC.
CrimsonRAT APT36 Transparent Tribe 4.7MB. Invitation-Letter-Fazel-Mumbai-House-ICWA lure. java-for-minecraft.com sahte Java.