TF-MAL-apk.filecoder
📛 Threat Title
Malware family: FileCoder
Description
ThreatFox malware family `apk.filecoder`. Printable name: FileCoder.
Indicators of Compromise (1)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
domain
apk.filecoder
VT: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/apk.filecoder
IOC database
- Type
- domain
- Value
apk.filecoder- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Extracted from Threat TF-MAL-apk.filecoder
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
VirusTotal: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/apk.filecoder
References (1)
- ThreatFox: IOCs for this family ThreatFox Malwares
Remediations (10)
-
web:cybersecuritynews.com
A new ransomware has been identified, which is believed to be the first-ever ransomware strain that leverages a local AI model to generate its malicious components. Dubbed "PromptLock" by the ESET Research team that discovered it, the malware uses OpenAI's gpt-oss:20b model via the Ollama API to create custom, cross-platform Lua scripts for its attack chain.
-
web:dailysecurityreview.com
Qilin ransomware, a potent threat emerging in 2022, has rapidly gained notoriety. This blog post delves into its advanced tactics, techniques, and procedures (TTPs), providing crucial insights into its operational evolution, attack methods, and effective defense strategies. Discover how to protect your systems from this dangerous malware .
-
web:macos.checkpoint.com
We can see in the picture above how the malware executes the zip command with the -P command (password protected) to generate new files with a ".crypt" extension and right after that the original file will be deleted.The malware will leave a ransom note asking for 0.25 BTC, even though the malware does not communicate with a C&C, meanig the ...
-
web:malwaretips.com
Removal Instructions for Trojan FileCoder This malware removal guide may appear overwhelming due to the number of steps and numerous programs that are being used. We have only written it this way to provide clear, detailed, and easy-to-understand instructions that anyone can use to remove malware for free.
-
web:www.cisa.gov
It highlights technical approaches to uncovering malicious activity and includes mitigation steps according to best practices. The purpose of this report is to enhance incident response among partners and network administrators along with serving as a playbook for incident investigation.
-
web:www.enigmasoftware.com
SpyHunter is a powerful malware remediation and protection tool designed to help provide users with in-depth system security analysis, detection and removal of a wide range of threats like FileCoder Ransomware as well as a one-on-one tech support service. Download SpyHunter (FREE Trial!*) Save Your Business Money!
-
web:www.eset.com
ESET has published technical details to raise awareness within the cybersecurity community. The malware has been classified as Filecoder .PromptLock.A. Make sure to follow ESET Research on Twitter (today known as X), BlueSky, and Mastodon for the latest news from ESET Research.
-
web:www.microsoft.com
The technical architecture of the Filecoder family varies significantly across variants. For example, some versions use the Delphi programming language to achieve efficient system-level interaction, while some variants utilize the NW.js framework to run JavaScript as a standalone Windows application.
-
web:www.securemac.com
Decryption is not possible due to bugs in the malware's code, even if the infected user paid the ransom to unlock their files. Filecoder Threat Removal MacScan can detect and remove Filecoder Ransomware from your system, as well as provide protection against other security and privacy threats.
-
web:www.trendmicro.com
This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Ransom notes dropped by Ransom.Win32. FILECODER malware family
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.