TF-MAL-elf.deadbolt
📛 Threat Title
Malware family: DEADBOLT
Description
ThreatFox malware family `elf.deadbolt`. Printable name: DEADBOLT.
Indicators of Compromise (1)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
domain
elf.deadbolt
VT: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/elf.deadbolt
IOC database
- Type
- domain
- Value
elf.deadbolt- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Extracted from Threat TF-MAL-elf.deadbolt
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
VirusTotal: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/elf.deadbolt
References (1)
- ThreatFox: IOCs for this family ThreatFox Malwares
Remediations (10)
-
web:blog.polyswarm.io
Sophos recently reported on Deadbolt ransomware, a malware family targeting QNAP devices.
-
web:deadboltfamily.com
The first cybersecurity game built for families. Play daily threat scenarios, compete on the family leaderboard, and teach your kids to spot scams before they click.
-
web:malpedia.caad.fkie.fraunhofer.de
DEADBOLT is a linux ransomware written in Go, targeting QNAP NAS devices worldwide. The files are encrypted with AES128 encryption and will have the . deadbolt extension appended to file names.
-
web:windowsforum.com
The emergence of RESURGE signals more than just another entry in a long line of malware threats. According to CISA, RESURGE contains advanced persistence features inherited from the SPAWNCHIMERA malware family—a group notorious for its ability to survive system reboots and avoid simplistic remediation .
-
web:www.cisa.gov
It highlights technical approaches to uncovering malicious activity and includes mitigation steps according to best practices. The purpose of this report is to enhance incident response among partners and network administrators along with serving as a playbook for incident investigation.
-
web:www.group-ib.com
Discover how to decrypt Deadbolt ransomware with Group-IB's expert solutions. Reclaim control of your data now! Learn more.
-
web:www.nature.com
This study proposes a hierarchical deep learning framework for Portable Executable (PE) malware detection and family categorization, underpinned by a novel Doubly Regularized Binary Cross-Entropy ...
-
web:www.ncsc.gov.uk
This guidance helps private and public sector organisations deal with the effects of malware (which includes ransomware). It provides actions to help organisations prevent a malware infection, and also steps to take if you're already infected. Following this guidance will reduce: the likelihood of becoming infected the spread of malware throughout your organisation the impact of the infection
-
web:www.qnap.com
Open App Center, upgrade all the apps to latest version and install Malware Remover if not installed. Open Malware Remover, click "Start Scan" and wait for Scan Complete Upgrade the NAS firmware to the latest version use QTS web interface via Control Panel > Firmware Upgrade.
-
web:www.trendmicro.com
Research highlights The DeadBolt ransomware family targets QNAP and Asustor NAS devices. This ransomware uses a configuration file that will dynamically choose specific settings based on the vendor that it targets, making it scalable and easily adaptable to new campaigns and vendors.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.