TF-MAL-py.pyramid

Description

ThreatFox malware family `py.pyramid`. Printable name: Pyramid.

Indicators of Compromise (1)

Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.

References (1)

• ThreatFox: IOCs for this family ThreatFox Malwares

• Detecting and Explaining Malware Family Evolution Using Rule-Based ...
  web:arxiv.org

  Interpretable models are especially important in ad-versarial domains such as malware analysis, where understanding the rationale behind a classification can guide remediation efforts and enhance model robust-ness. This paper proposes a novel approach for detect-ing and explaining concept drift in malware families over time.

  2026-05-22 05:32 UTC
• GitHub - Wanhu-Nie/pyramal
  web:github.com

  PyraMal is a malware visualization framework featuring a pyramid -structured feature distribution. It treats raw binary bytes as a Markov chain, computes the State Transition Frequency Matrix (STFM), and applies the DT-LHTA algorithm to construct RGB images for malware detection and classification.

  2026-05-22 05:32 UTC
• Malicious Code Family Classification Method Based on Spatial Pyramid ...
  web:ieeexplore.ieee.org

  Malicious code and its derivative code have become a major threat to network security. At present, some methods transform malicious code into images and use deep learning to classify families. However, these family classification methods based on deep learning has a problem that the malicious code images need to be uniformly scaled before model training, which may result in the loss of ...

  2026-05-22 05:32 UTC
• Pyramid (Malware Family)
  web:malpedia.caad.fkie.fraunhofer.de

  According to its author, Pyramid is a post exploitation framework written in Python, capable of executing offensive tooling from a signed binary (e.g. python.exe) by importing their dependencies in memory. It was created to demonstrate a bypass strategy against EDRs based on some blind-spots assumptions.

  2026-05-22 05:32 UTC
• Advancing Malware Family Classification with MOTIF - Booz Allen Hamilton
  web:www.boozallen.com

  The ability to quickly pin down the family of malware used during a cyber attack can be a massive boon to an incident responder. Not only does family classification provide immediate insights about the characteristics and behaviors of a malware sample, but it is a core part of the triage, remediation , and attribution efforts.

  2026-05-22 05:32 UTC
• Malware Incident Response: The 7-Step Playbook for 2025 - Breachsense
  web:www.breachsense.com

  Complete malware remediation now requires addressing both the infected endpoint and the stolen authentication data. Your malware incident response playbook must account for both.

  2026-05-22 05:32 UTC
• Technical Approaches to Uncovering and Remediating Malicious ... - CISA
  web:www.cisa.gov

  It highlights technical approaches to uncovering malicious activity and includes mitigation steps according to best practices. The purpose of this report is to enhance incident response among partners and network administrators along with serving as a playbook for incident investigation.

  2026-05-22 05:32 UTC
• Remediate Threats Quickly and Confidently - CrowdStrike
  web:www.crowdstrike.com

  Remediate faster Execute built-in commands or custom scripts to easily carry out complex remediation actions on any managed endpoint remotely. Connect to and quickly isolate the impacted endpoint, then remove malicious files to immediately shut down the attack.

  2026-05-22 05:32 UTC
• Malware Analysis Framework v2.0 - FIRST
  web:www.first.org

  Introduction Overview The Malware Analysis Framework, developed by FIRSTs Malware Analysis Special Interest Group (SIG), is a document aimed to help CSIRTs establish their own malware analysis workflow (s). It provides step-by-step guidance in all workflow phases on how to develop malware analysis capabilities within CSIRTs. This document also lists supporting resources that can further assist ...

  2026-05-22 05:32 UTC
• Mitigating malware and ransomware attacks - The National Cyber Security ...
  web:www.ncsc.gov.uk

  This guidance helps private and public sector organisations deal with the effects of malware (which includes ransomware). It provides actions to help organisations prevent a malware infection, and also steps to take if you're already infected. Following this guidance will reduce: the likelihood of becoming infected the spread of malware throughout your organisation the impact of the infection

  2026-05-22 05:32 UTC

Only Available for Registered Users. Sign in to view.