popup

Cyber Threat Trends

  1. Week Month

Gemelli flickerflypro flickerfly

Summary: 2025/04/28 21:21

First reported date: 2014/05/07
Inquiry period : 2025/04/27 21:21 ~ 2025/04/28 21:21 (1 days), 1 search results

지난 7일 기간대비 동일한 트렌드를 보이고 있습니다.
지난 7일 기간대비 상승한 Top5 연관 키워드는 Report 입니다.
기타 Malware Fog MWNEWS Takeaways Introduction 신규 키워드도 확인됩니다.

 * 최근 뉴스기사 Top3:
    ㆍ 2025/04/28 Navigating Through The Fog

Trend graph by period


Related keyword cloud
Top 100
# Trend Count Comparison
1Malware 1 ▲ new
2Report 1 ▲ 1 (100%)
3Fog 1 ▲ new
4MWNEWS 1 ▲ new
5Key 1 - 0 (0%)
6Takeaways 1 ▲ new
7Introduction 1 ▲ new
Special keyword group
Top 5
Malware Type
Malware Type

This is the type of malware that is becoming an issue.

No data.

Attacker & Actors
Attacker & Actors

The status of the attacker or attack group being issued.

No data.

Attack technique
Technique

This is an attack technique that is becoming an issue.

No data.

Country & Company
Country & Company

This is a country or company that is an issue.

No data.

Threat info
Last 5

SNS

(Total : 0)

No data.

News

(Total : 1)
  Total keyword

Malware Report

No Title Date
1Navigating Through The Fog - Malware.News2025.04.28

Additional information

No Title Date
110 key numbers from the 2024 FBI IC3 report - CyberScoop2025.04.24
2Malware and cryptography 41 - encrypt/decrypt payload via TEA. Simple Nim example - Malware.News2025.04.10
3The SQL Server Crypto Detour - Malware.News2025.04.09
4The SQL Server Crypto Detour - Malware.News2025.04.09
5SnakeKeylogger: A Multistage Info Stealer Malware Campaign - Malware.News2025.03.25
View only the last 5
Level Description
danger File has been identified by 52 AntiVirus engines on VirusTotal as malicious
warning Generates some ICMP traffic
watch Appends a known multi-family ransomware file extension to files that have been encrypted
watch Attempts to access Bitcoin/ALTCoin wallets
watch Attempts to create or modify system certificates
watch Collects information about installed applications
watch Communicates with host for which no DNS query was performed
watch Installs itself for autorun at Windows startup
watch Resumed a suspended thread in a remote process potentially indicative of process injection
notice A process created a hidden window
notice Allocates read-write-execute memory (usually to unpack itself)
notice Checks adapter addresses which can be used to detect virtual network interfaces
notice Checks for the Locally Unique Identifier on the system for a suspicious privilege
notice Creates a shortcut to an executable file
notice Creates a suspicious process
notice Creates executable files on the filesystem
notice Drops a binary and executes it
notice Drops an executable to the user AppData folder
notice HTTP traffic contains suspicious features which may be indicative of malware related traffic
notice Looks up the external IP address
notice One or more potentially interesting buffers were extracted
notice Performs some HTTP requests
notice Queries for potentially installed applications
notice Steals private information from local Internet browsers
notice Uses Windows utilities for basic Windows functionality
notice Yara rule detected in process memory
info Checks amount of memory in system
info Checks if process is being debugged by a debugger
info Collects information to fingerprint the system (MachineGuid
info Command line console output was observed
info One or more processes crashed
info Queries for the computername
info The executable contains unknown PE section names indicative of a packer (could be a false positive)
info Tries to locate where the browsers are installed
info Uses Windows APIs to generate a cryptographic key
Network ET HUNTING Observed Telegram API Domain (api .telegram .org in TLS SNI)
Network ET HUNTING Telegram API Domain in DNS Lookup
Network ET INFO TLS Handshake Failure
Network ET POLICY External IP Lookup ip-api.com
Network SSLBL: Malicious JA3 SSL-Client Fingerprint detected (Tofsee)
No data
No data
Beta Service, If you select keyword, you can check detailed information.