TF-MAL-apk.badcall

Description

ThreatFox malware family `apk.badcall`. Printable name: BADCALL.

Indicators of Compromise (1)

Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.

References (1)

• ThreatFox: IOCs for this family ThreatFox Malwares

• PDF MAR-10135536-10 - North Korean Trojan: BADCALL
  web:archive.orkl.eu

  This MAR includes malware descriptions related to HIDDEN COBRA, suggested response actions and recommended mitigation techniques. Use should flag activity associated with the malware , report the activity to the DHS National Cybersecurity and Communications Integration Center (NC Watch (CyWatch), and give the activity the highest priority for ...

  2026-05-23 22:27 UTC
• BADCALL, Software S0245 | MITRE ATT&CK®
  web:attack.mitre.org

  BADCALL is a Trojan malware variant used by the group Lazarus Group. [1]

  2026-05-23 22:27 UTC
• Malware BADCALL - NoHackMe
  web:cve.nohackme.com

  BADCALL is a Trojan malware variant used by the group Lazarus Group.

  2026-05-23 22:27 UTC
• BADCALL (Malware Family) - Fraunhofer
  web:malpedia.caad.fkie.fraunhofer.de

  Details for the BADCALL malware family including references, samples and yara signatures.

  2026-05-23 22:27 UTC
• Technical Approaches to Uncovering and Remediating Malicious ... - CISA
  web:www.cisa.gov

  It highlights technical approaches to uncovering malicious activity and includes mitigation steps according to best practices. The purpose of this report is to enhance incident response among partners and network administrators along with serving as a playbook for incident investigation.

  2026-05-23 22:27 UTC
• Incident Of The Week: RAT Malware Strains Believed To Be N. Korean
  web:www.cshub.com

  Both malware strains - called HARDRAIN and BADCALL - have the ability to install a remote access tool (RAT) payload on Androids. Windows systems are then drawn in as proxy servers, which disguises command-and-control communications. The analysis of HARDRAIN and BADCALL comes from a Malware Analysis Report (MAR) between the agencies.

  2026-05-23 22:27 UTC
• Malware Analysis Framework v2.0 - FIRST
  web:www.first.org

  Introduction Overview The Malware Analysis Framework, developed by FIRSTs Malware Analysis Special Interest Group (SIG), is a document aimed to help CSIRTs establish their own malware analysis workflow (s). It provides step-by-step guidance in all workflow phases on how to develop malware analysis capabilities within CSIRTs. This document also lists supporting resources that can further assist ...

  2026-05-23 22:27 UTC
• BADCALL - Malware - Cyber Threat Intelligence
  web:www.giovannicarrieri.it

  Tecniche Associate (8) ID ATT&CK Tattiche T1001.003 Protocol or Service Impersonation - T1016 System Network Configuration Discovery - T1082 System Information Discovery - T1090 Proxy - T1112 Modify Registry - T1562.004 Disable or Modify System Firewall - T1571 Non-Standard Port - T1573.001 Symmetric Cryptography -

  2026-05-23 22:27 UTC
• Trojan:Win32/BadCall.A threat description - microsoft.com
  web:www.microsoft.com

  Understand how this virus or malware spreads and how its payloads affects your computer. Protect against this threat, identify symptoms, and clean up or remove infections.

  2026-05-23 22:27 UTC
• A comprehensive survey of tools and techniques mitigating computer and ...
  web:www.sciencedirect.com

  In this paper, we present a comprehensive investigation of computer-based and mobile-based malware , their countermeasures, and various detection methods. We also discuss the additional issues and the challenges of malware detection and finally highlight a few open research issues, directing the trends of malware /anti- malware development.

  2026-05-23 22:27 UTC

Only Available for Registered Users. Sign in to view.