SYMBOLCOMMON_NAMEaka. SYNONYMS
win.anubis_loader (Back to overview)

Anubis Loader

aka: Kraken, Pepega

A loader written in Go, tracked since at least October 2021 by ZeroFox. Originally named Kraken and rebranded to Anubis in February 2022.

References
2022-02-22 ⋅ ZeroFox ⋅ Stephan Simon
@online{simon:20220222:quick:900a4cd, author = {Stephan Simon}, title = {{Quick Update: Kraken Completes Its Rebrand to Anubis}}, date = {2022-02-22}, organization = {ZeroFox}, url = {https://www.zerofox.com/blog/quick-update-kraken-completes-its-rebrand-to-anubis/}, language = {English}, urldate = {2022-03-07} } Quick Update: Kraken Completes Its Rebrand to Anubis
Anubis Loader
2022-02-21 ⋅ Windows Report ⋅ Alexandru Poloboc
@online{poloboc:20220221:watch:e30f452, author = {Alexandru Poloboc}, title = {{Watch out, the Kraken botnet can easily bypass Defender and steal your crypto}}, date = {2022-02-21}, organization = {Windows Report}, url = {https://windowsreport.com/kraken-botnet/}, language = {English}, urldate = {2022-03-02} } Watch out, the Kraken botnet can easily bypass Defender and steal your crypto
Anubis Loader
2022-02-18 ⋅ Bleeping Computer ⋅ Sergiu Gatlan
@online{gatlan:20220218:new:6472349, author = {Sergiu Gatlan}, title = {{New Golang botnet empties Windows users’ cryptocurrency wallets}}, date = {2022-02-18}, organization = {Bleeping Computer}, url = {https://www.bleepingcomputer.com/news/security/new-golang-botnet-empties-windows-users-cryptocurrency-wallets/}, language = {English}, urldate = {2022-03-02} } New Golang botnet empties Windows users’ cryptocurrency wallets
Anubis Loader SmokeLoader
2022-02-16 ⋅ ZeroFox ⋅ Stephan Simon
@online{simon:20220216:meet:2a05254, author = {Stephan Simon}, title = {{Meet Kraken: A New Golang Botnet in Development}}, date = {2022-02-16}, organization = {ZeroFox}, url = {https://www.zerofox.com/blog/meet-kraken-a-new-golang-botnet-in-development/}, language = {English}, urldate = {2022-03-07} } Meet Kraken: A New Golang Botnet in Development
Anubis Loader
2022-02-14 ⋅ Medium walmartglobaltech ⋅ Jason Reaves, Joshua Platt
@online{reaves:20220214:privateloader:e7e062e, author = {Jason Reaves and Joshua Platt}, title = {{PrivateLoader to Anubis Loader}}, date = {2022-02-14}, organization = {Medium walmartglobaltech}, url = {https://medium.com/walmartglobaltech/privateloader-to-anubis-loader-55d066a2653e}, language = {English}, urldate = {2022-08-05} } PrivateLoader to Anubis Loader
Anubis Loader PrivateLoader

There is no Yara-Signature yet.