D3LabSep 20, 2024

Campagne #Malware #Italy Week 38

☠️💣🔥👻
#Formbook: Ordine / Fattura
#RedLine: Nuova Cartella
#Remcos: Ordine
#AgentTesla: Documento di Spedizione DHL
#Adwind / #SambaSpy: Fattura
#AsyncRat: dominio .it
#Vidar: Fattura via PEC
#Lumma: Fake issues GitHub

#mwitaly

D3LabAug 23, 2024

Campagne #Malware #Italy Week 34

🔥☠️💣👻
#VIPKeylogger: Fattura
#RemcosRAT: Delivery
#Formbook: Preventivo
#Irata: #APK Bank
#Adwind: Fattura
#SnakeKeylogger: Pagamento
#AgentTesla: Bank
#QuasarRAT: Udienza Centrale Polizia
#Vidar: Pagamento via PEC
#Unknown: Telecom

#mwitaly

D3LabJun 14, 2024

Campagne #Malware #Italy Week 24

☠️💣🔥👻
#AgentTesla: Preventivo
#Formbook: Bonifico
#StrRat: Spedizione
#Lumma - #Stealc: Setup
#Adwind: Documenti
#PureCrypter: Hotel

#mwitaly

James_inthe_boxSep 6, 2023

A fresh... #adwind...yes...#adwind sample:

https://app.any.run/tasks/ce1f0992-988f-4131-8b64-771dc55e6eb3/

Analysis Tax-documents_PDF.jar (MD5: 9BE83826970ECC2715182A2C45F50C97) Malicious activity - Interactive analysis ANY.RUN

Interactive malware hunting service. Live testing of most type of threats in any environments. No installation and no waiting necessary.

James_inthe_boxMay 10, 2023

And some fresh #adwind (apparently I'm in the queue for java #malware today...)

https://app.any.run/tasks/679e49d2-b526-4b30-b41a-87c409097fa8#

c2: 78.142.18.221:441

Analysis 2022 1099-NEC.jar (MD5: 2E1B2D72F4290194C4E7FC84EDAB827B) Malicious activity - Interactive analysis ANY.RUN

Interactive malware hunting service. Live testing of most type of threats in any environments. No installation and no waiting necessary.

ITSEC NewsOct 29, 2019
New Adwind Variant Targets Windows, Chromium Credentials - A new version of the typically platform-agnostic Adwind trojan has been spotted targeting Windows ... more: https://threatpost.com/new-adwind-variant-windows-chromium-credentials/149642/ #internetexplorer #windowsmachines #websecurity #chromium #malware #outlook #windows #adwind #trojan #rat
New Adwind Variant Targets Windows, Chromium Credentials

A new version of the typically platform-agnostic Adwind trojan has been spotted targeting Windows applications and systems and Chromium-based browsers.

Threatpost - English - Global - threatpost.com
Valkyrie ÜrieJan 3, 2019
"She is my angel, the one who saved me, the one who protects me..."
#ocs #draws #art #ADWIND