#kesakode DB update to 1.0.48:

● new sigs: Crazyhunter, Echogather, IranBot, MaskGramStealer, PulsarRat and Themeforestrat
● 9 existing entries updated
● FP-fixed signatures: 82
● 1146 new clean programs whitelisted
● +527K unique functions
● +700K unique strings

#Malcat tip:

#Kesakode can be useful even when facing unknown/packed samples. Check "Show UNK" and focus on unique code and strings.

Here a simple downloader:

#Kesakode updated to1.0.45 !

● New malware entries: Fullmetal, Laplas, RoningLoader, ShadowRat, Silentsweeper and SystemShock
● Updated malware entries: 29
● FP-fixed signatures: 931
● 16587 new clean programs whitelisted
● 3452882 new functions
● 165257 new strings

#kesakode DB update to 1.0.43, with again a focus on the clean set:

● 18 new malware entries
● 53 existing entries updated
● FP-fixed signatures: 749

● 5280 new clean programs whitelisted
● +2M unique functions
● +300K unique strings

#kesakode updated to 1.0.42:

* New entries: Brickstorm, Butoflex, Ladvix, NetStar, Pantegana, Tendyron, Tsunamikit and VampireBot

* Updated entries: AuraStealer, Latrodectus, NightshadeC2 and QNAPCrypt

* 33275 new clean programs whitelisted

* FP-fixed signatures: 1028

#Kesakode updated to 1.0.41:

Malware signatures:
* New malware entries: Akdoortea, AuraStealer, Bert, Castlerat, Countloader, GodPotato, Kkrat, NightshadeC2, RDPWrap, Rustonotto, Secondhandtea, Snakedisk, Yibackdoor and Yokai
* Updated malware entries: 16
* FP-fixed signatures: 1340

Files:
* 33 new malicious samples in database
* 52010 new clean programs whitelisted

Database:
* 13093705 new unique functions
* 7778950 new unique strings
* 22 new unique constant fingerprints

Updated #kesakode to 1.0.38:

Malware signatures:
* New malware entries: 20 new families
* Extended malware signatures: 661
* FP-fixed signatures: 79

Files:
* 36 new malicious samples in database
* 6687 new library objects seen
* 6218 new clean programs whitelisted

Database:
* 564116 new unique functions
* 197608 new unique strings
* 27 new unique constant fingerprints

Library signatures:
* Extended library signatures: 28
* FP-fixed signatures: 1