Search
Keyword: W2KM_MONALIS
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Trojan arrives on a system as a
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Trojan arrives on a system as a
This spyware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This spyware arrives on a system as a
This threat downloads TROJ_CRIBIT.B, a ransomware that steals funds from various cryptocurrency wallets. To get a one-glance comprehensive view of the behavior of this Spyware, refer to the Threat
This backdoor arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This backdoor arrives on a system as a
(Note: The default value data of the said registry entry is 2 .) It deletes the following registry keys: HKEY_LOCAL_MACHINE\Software\Microsoft\ Windows\Currentversion\Uninstall\ SafeSearch
This spyware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This spyware arrives on a system as a
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Trojan arrives on a system as a
This Trojan Spy arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. As of this writing, the said sites are inaccessible.
This Trojan Spy arrives as an attachment to email messages spammed by other malware/grayware or malicious users. It arrives on a system as a file dropped by other malware or as a file downloaded
This Trojan Spy arrives as an attachment to email messages spammed by other malware/grayware or malicious users. It arrives on a system as a file dropped by other malware or as a file downloaded
This Trojan Spy arrives as an attachment to email messages spammed by other malware/grayware or malicious users. It arrives on a system as a file dropped by other malware or as a file downloaded
the following registry entries: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\ services\Windows Defender ( if running as Admin ) Start = "2" HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\ services\Windows
the following registry entries: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\ services\Windows Defender ( if running as Admin ) Start = "2" HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\ services\Windows
This Trojan Spy arrives as an attachment to email messages spammed by other malware/grayware or malicious users. It deletes itself after execution. Arrival Details This Trojan Spy arrives as an
This Backdoor arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It executes commands from a remote malicious user,
This Backdoor arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It executes commands from a remote malicious user,
AM on {date of Installation} - After triggered, repeat every 1 hour indefinitely Action: powershell –nop –w hidden –ep bypass –f %Application Data%\Microsoft\cred.ps1 Name: {Random Name} Trigger: At
\SystemRestore DisableSR = 1 (Note: The default value data of the said registry entry is 0 .) HKEY_CURRENT_USER\Software\Microsoft\ Windows\CurrentVersion\Policies\ System DisableTaskMgr = 2 (Note: The default
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\ Services\SharedAccess Start = "4" (Note: The default value data of the said registry entry is 2 .) It modifies the following registry entries to hide files with Hidden