s2
--:--:--UTC

Searching APEX

Starting…

  1. Searching Threats, IOCs & Threat Intelligence locally
  2. Querying external providers
  3. Asking AI Forensic Validator
  4. Creating new entry from validated hit

0s elapsed

TF-MAL-ps1.powerpepper

📛 Threat Title

Malware family: PowerPepper

Category: PowerPepper First seen: Last updated: Source: ThreatFox Malwares

Description

ThreatFox malware family `ps1.powerpepper`. Printable name: PowerPepper.

Indicators of Compromise (1)

Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.

domain ps1.powerpepper

IOC database

Type
domain
Value
ps1.powerpepper
First seen
Last seen
Attached to this threat
Appears in
1 threat
Description
Extracted from Threat TF-MAL-ps1.powerpepper

Open the full IOC page →

Threat Hunt — feed corroboration

Not present in any configured threat-intel feed.

Details From VirusTotal

No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.

References (1)

Remediations (10)

  • web:github.com

    orangegrouptech / Windows- Malware -Effects- Remediation -Tool Public Notifications You must be signed in to change notification settings Fork 15 Star 66

  • web:learn.microsoft.com

    Remediate security weaknesses discovered through security recommendations, and create exceptions if needed, in Defender Vulnerability Management.

  • web:malpedia.caad.fkie.fraunhofer.de

    Details for the PowerPepper malware family including references, samples and yara signatures.

  • web:marcusbotacin.github.io

    Enhancing Malware Family Classification in the Microsoft Challenge Dataset via Transfer Learning ... ABSTRACT In recent years, malware developers have introduced new and ad-vanced protection techniques against conventional signature-based and heuristic-based malware analysis techniques to avoid detec-tion and removal by conventional antivirus.

  • web:www.bleepingcomputer.com

    Kaspersky researchers discovered a previously undocumented Windows PowerShell malware dubbed PowerPepper and developed by the hacker-for-hire group DeathStalker.

  • web:www.breachsense.com

    Malware incident response is the coordinated process of identifying, containing, eradicating, and recovering from malware infections. It includes isolating infected systems, analyzing the malware's behavior, remediating affected accounts, and implementing controls to prevent reinfection.

  • web:www.cisa.gov

    It highlights technical approaches to uncovering malicious activity and includes mitigation steps according to best practices. The purpose of this report is to enhance incident response among partners and network administrators along with serving as a playbook for incident investigation.

  • web:www.ncsc.gov.uk

    This guidance helps private and public sector organisations deal with the effects of malware (which includes ransomware). It provides actions to help organisations prevent a malware infection, and also steps to take if you're already infected. Following this guidance will reduce: the likelihood of becoming infected the spread of malware throughout your organisation the impact of the infection

  • web:www.picussecurity.com

    Learn how CVE-2026-33825 enables attackers to escalate privileges via Windows Defender. Picus explains how the BlueHammer exploit abuses Defender's remediation logic to achieve SYSTEM access.

  • web:www.prnewswire.com

    Through testing a group of 66 engines on a PowerPepper file, as of today, VirusTotal found only 39 other engines were able to detect the malware , with the remaining either allowing the file to go ...

AI Forensic Analysis

Only Available for Registered Users. Sign in to view.