TF-MAL-elf.tsh

Description

ThreatFox malware family `elf.tsh`. Printable name: tsh. Aliases: TINYSHELL.

Indicators of Compromise (1)

Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.

References (1)

• ThreatFox: IOCs for this family ThreatFox Malwares

• Ghost in the Router: China-Nexus Espionage Actor UNC3886 Targets ...
  web:cloud.google.com

  Mandiant recommends that organizations upgrade their Juniper devices to the latest images released by Juniper Networks, which includes mitigations and updated signatures for the Juniper Malware Removal Tool (JMRT). Organizations should run the JMRT Quick Scan and Integrity Check after the upgrade.

  2026-05-22 05:24 UTC
• FBI warns of ATM jackpotting surge | Cybernews
  web:cybernews.com

  The FBI warns of a surge in ATM jackpotting attacks, with more than 700 incidents in 2025 alone. Hackers use Ploutus malware to force machines to dispense cash.

  2026-05-22 05:24 UTC
• Using TLSH for Malware Analysis | trendmicro/tlsh | DeepWiki
  web:deepwiki.com

  Using TLSH for Malware Analysis Relevant source files This document provides a comprehensive guide on leveraging TLSH (Trend Micro Locality Sensitive Hash) for malware analysis. It explains how security researchers and analysts can use TLSH to identify similar malware samples, cluster malware families, and detect variants of known malicious code.

  2026-05-22 05:24 UTC
• Remediate vulnerabilities with Microsoft Defender Vulnerability ...
  web:learn.microsoft.com

  Remediate security weaknesses discovered through security recommendations, and create exceptions if needed, in Defender Vulnerability Management.

  2026-05-22 05:24 UTC
• tsh (Malware Family)
  web:malpedia.caad.fkie.fraunhofer.de

  Details for the tsh malware family including references, samples and yara signatures.

  2026-05-22 05:24 UTC
• FINALDRAFT Malware Exploits Microsoft Graph API for Espionage on ...
  web:thehackernews.com

  REF7707 deployed FINALDRAFT malware , using Microsoft Graph API for stealthy command-and-control in a global espionage campaign.

  2026-05-22 05:24 UTC
• Malware Incident Response: The 7-Step Playbook for 2025 - Breachsense
  web:www.breachsense.com

  Complete malware remediation now requires addressing both the infected endpoint and the stolen authentication data. Your malware incident response playbook must account for both.

  2026-05-22 05:24 UTC
• Technical Approaches to Uncovering and Remediating Malicious ... - CISA
  web:www.cisa.gov

  It highlights technical approaches to uncovering malicious activity and includes mitigation steps according to best practices. The purpose of this report is to enhance incident response among partners and network administrators along with serving as a playbook for incident investigation.

  2026-05-22 05:24 UTC
• PDF Increase in Malware Enabled ATM Jackpotting Incidents Across United States
  web:www.ic3.gov

  Overview Threat actors are deploying ATM jackpotting malware , including the Ploutus family malware , to infect ATMs and force them to dispense cash. Ploutus malware exploits the eXtensions for Financial Services (XFS), the layer of software that instructs an ATM what to physically do. When a legitimate transaction occurs, the ATM application sends instructions through XFS for bank authorization ...

  2026-05-22 05:24 UTC
• Mitigating malware and ransomware attacks - The National Cyber Security ...
  web:www.ncsc.gov.uk

  How to defend organisations against malware or ransomware attacks.

  2026-05-22 05:24 UTC

Only Available for Registered Users. Sign in to view.