Malpedia Library

2024-09-06 ⋅ splunk ⋅ Splunk Threat Research Team
Handala’s Wiper: Threat Analysis and Detections
Handala Hatef Handala

2024-02-27 ⋅ splunk ⋅ Splunk Threat Research Team, Teoderick Contreras
Unveiling Phemedrone Stealer: Threat Analysis and Detections
Phemedrone Stealer

2024-01-17 ⋅ splunk ⋅ Splunk Threat Research Team
Enter The Gates: An Analysis of the DarkGate AutoIt Loader
DarkGate

2023-12-06 ⋅ splunk ⋅ Splunk Threat Research Team
Unmasking the Enigma: A Historical Dive into the World of PlugX Malware
PlugX

2023-07-25 ⋅ splunk ⋅ Splunk Threat Research Team
Amadey Threat Analysis and Detections
Amadey

2023-03-31 ⋅ splunk ⋅ Splunk Threat Research Team
Splunk Insights: Investigating the 3CXDesktopApp Supply Chain Compromise
3CX Backdoor

2023-03-27 ⋅ splunk ⋅ Splunk Threat Research Team
AsyncRAT Crusade: Detections and Defense
AsyncRAT

2022-12-01 ⋅ splunk ⋅ Splunk Threat Research Team
From Macros to No Macros: Continuous Malware Improvements by QakBot
QakBot

2022-11-16 ⋅ splunk ⋅ Splunk Threat Research Team
Inside the Mind of a ‘Rat’ - Agent Tesla Detection and Analysis
Agent Tesla

2022-10-04 ⋅ splunk ⋅ Splunk Threat Research Team
Deliver a Strike by Reversing a Badger: Brute Ratel Detection and Analysis
Brute Ratel C4

2022-08-25 ⋅ splunk ⋅ Splunk Threat Research Team
AppLocker Rules as Defense Evasion: Complete Analysis
Azorult

2022-07-26 ⋅ splunk ⋅ Splunk Threat Research Team
ML Detection of Risky Command Exploit

2022-06-23 ⋅ splunk ⋅ Splunk Threat Research Team
Threat Update: Industroyer2
INDUSTROYER2

2022-05-19 ⋅ splunk ⋅ Splunk Threat Research Team
Threat Update: AcidRain Wiper
AcidRain

2022-04-15 ⋅ splunk ⋅ Splunk Threat Research Team
STRT-TA03 CPE - Destructive Software
AcidRain CyclopsBlink

2022-04-07 ⋅ splunk ⋅ Splunk Threat Research Team
You Bet Your Lsass: Hunting LSASS Access
Cobalt Strike MimiKatz

2022-04-01 ⋅ splunk ⋅ Splunk Threat Research Team
Threat Update: CaddyWiper
CaddyWiper

2022-03-28 ⋅ splunk ⋅ Splunk Threat Research Team
Threat Update DoubleZero Destructor
DoubleZero

2022-03-10 ⋅ splunk ⋅ Splunk Threat Research Team
Detecting HermeticWiper
HermeticWiper PartyTicket

2022-01-27 ⋅ splunk ⋅ Splunk Threat Research Team
Threat Advisory: STRT-TA02 - Destructive Software
WhisperGate

2022-01-10 ⋅ splunk ⋅ Splunk Threat Research Team
Detecting Malware Script Loaders using Remcos: Threat Research Release December 2021
Remcos

2021-11-11 ⋅ splunk ⋅ Splunk Threat Research Team
FIN7 Tools Resurface in the Field – Splinter or Copycat?
JSSLoader Remcos

2021-11-04 ⋅ splunk ⋅ Splunk Threat Research Team
Detecting IcedID... Could It Be A Trickbot Copycat?
IcedID

2021-07-21 ⋅ splunk ⋅ Splunk Threat Research Team
Detecting Trickbot with Splunk
TrickBot

2021-07-06 ⋅ splunk ⋅ Splunk Threat Research Team
REvil Ransomware Threat Research Update and Detections
REvil

2021-06-10 ⋅ splunk ⋅ Splunk Threat Research Team
Detecting Password Spraying Attacks: Threat Research Release May 2021

2021-05-17 ⋅ splunk ⋅ Splunk Threat Research Team
DarkSide Ransomware: Splunk Threat Update and Detections
DarkSide

2021-05-03 ⋅ splunk ⋅ Splunk Threat Research Team
Clop Ransomware Detection: Threat Research Release, April 2021
Clop

2021-04-13 ⋅ splunk ⋅ Splunk Threat Research Team
Detecting Clop Ransomware
Clop