TF-MAL-php.ensikology

Description

ThreatFox malware family `php.ensikology`. Printable name: Ensikology. Aliases: Ensiko.

Indicators of Compromise (1)

Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.

References (1)

• ThreatFox: IOCs for this family ThreatFox Malwares

• Detecting and Explaining Malware Family Evolution Using Rule-Based ...
  web:arxiv.org

  Interpretable models are especially important in ad-versarial domains such as malware analysis, where understanding the rationale behind a classification can guide remediation efforts and enhance model robust-ness. This paper proposes a novel approach for detect-ing and explaining concept drift in malware families over time.

  2026-05-23 22:44 UTC
• CNN-Based Malware Family Classification and Evaluation
  web:ieeexplore.ieee.org

  Due to the diversity of malware types and families and the rapid increase of malware attacks, there is a need to develop a way to find and categorize the malware to its families. Traditional malware classification techniques depend on malware signatures, which are known to be associated with certain malware families or variants. However, the rapid increase of new malware variants with unknown ...

  2026-05-23 22:44 UTC
• Ensikology (Malware Family) - Fraunhofer
  web:malpedia.caad.fkie.fraunhofer.de

  Details for the Ensikology malware family including references, samples and yara signatures.

  2026-05-23 22:44 UTC
• Malware Incident Response: The 7-Step Playbook for 2025 - Breachsense
  web:www.breachsense.com

  Complete malware remediation now requires addressing both the infected endpoint and the stolen authentication data. Your malware incident response playbook must account for both.

  2026-05-23 22:44 UTC
• Technical Approaches to Uncovering and Remediating Malicious ... - CISA
  web:www.cisa.gov

  It highlights technical approaches to uncovering malicious activity and includes mitigation steps according to best practices. The purpose of this report is to enhance incident response among partners and network administrators along with serving as a playbook for incident investigation.

  2026-05-23 22:44 UTC
• Malware Analysis Framework v2.0 - FIRST
  web:www.first.org

  Introduction Overview The Malware Analysis Framework, developed by FIRSTs Malware Analysis Special Interest Group (SIG), is a document aimed to help CSIRTs establish their own malware analysis workflow (s). It provides step-by-step guidance in all workflow phases on how to develop malware analysis capabilities within CSIRTs. This document also lists supporting resources that can further assist ...

  2026-05-23 22:44 UTC
• A hierarchical deep learning framework with doubly regularized loss for ...
  web:www.nature.com

  This study proposes a hierarchical deep learning framework for Portable Executable (PE) malware detection and family categorization, underpinned by a novel Doubly Regularized Binary Cross-Entropy ...

  2026-05-23 22:44 UTC
• Mitigating malware and ransomware attacks - The National Cyber Security ...
  web:www.ncsc.gov.uk

  This guidance helps private and public sector organisations deal with the effects of malware (which includes ransomware). It provides actions to help organisations prevent a malware infection, and also steps to take if you're already infected. Following this guidance will reduce: the likelihood of becoming infected the spread of malware throughout your organisation the impact of the infection

  2026-05-23 22:44 UTC
• (PDF) eBPF-based Malware - ResearchGate
  web:www.researchgate.net

  Prevention and detection of eBPF-based malware is also explored, with the goal of providing organizations or legitimate users of eBPF techniques to harden their systems against eBPF-based malware ...

  2026-05-23 22:44 UTC
• RecMaL: Rectify the malware family label via hybrid analysis
  web:www.sciencedirect.com

  Due to the rapid development of anti-virus engines, the family information of malware can be obtained from the anti-virus labels (abbreviated as AV labels1) generated by various vendors. A standard AV label consists of platform, malware type, malware family , variant component, and additional information that is prepended or appended to the name.

  2026-05-23 22:44 UTC

Only Available for Registered Users. Sign in to view.