TF-MAL-fas.acad
📛 Threat Title
Malware family: AutoCAD Downloader
Description
ThreatFox malware family `fas.acad`. Printable name: AutoCAD Downloader. Aliases: Acad.Bursted,Duxfas.
Indicators of Compromise (2)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
domain
fas.acad
VT: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/fas.acad
IOC database
- Type
- domain
- Value
fas.acad- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Extracted from Threat TF-MAL-fas.acad
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
VirusTotal: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/fas.acad
domain
acad.bursted
VT: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/acad.bursted
IOC database
- Type
- domain
- Value
acad.bursted- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Extracted from Threat TF-MAL-fas.acad
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
VirusTotal: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/acad.bursted
References (1)
- ThreatFox: IOCs for this family ThreatFox Malwares
Remediations (10)
-
web:help.autodesk.com
Overview Malicious executable code, also known as malware or viruses, has become more common and can impact users of AutoCAD and AutoCAD -based products. If allowed to spread, malware can result in loss of intellectual property and reduced productivity.
-
web:learn.microsoft.com
Remediation actions can include removing a file, sending it to quarantine, or allowing it to remain. This article includes information and links to resources about specifying what actions should be taken when threats are detected on devices. You can choose from several methods, such as: Configure remediation for Microsoft Defender Antivirus ...
-
web:malpedia.caad.fkie.fraunhofer.de
Small downloader composed as a Fast-AutoLoad LISP (FAS) module for AutoCAD .
-
web:www.cisa.gov
It highlights technical approaches to uncovering malicious activity and includes mitigation steps according to best practices. The purpose of this report is to enhance incident response among partners and network administrators along with serving as a playbook for incident investigation.
-
web:www.crowdstrike.com
Remediate faster Execute built-in commands or custom scripts to easily carry out complex remediation actions on any managed endpoint remotely. Connect to and quickly isolate the impacted endpoint, then remove malicious files to immediately shut down the attack.
-
web:www.itpro.com
Organizations that use AutoCAD - and AutoDesk products - need to be vigilant. There may be a temptation to allow exceptions relating to this software, but that would leave the system exposed to ransomware attacks using the AutoCAD file types. As malware has proliferated, cybersecurity developers have created tools to detect it.
-
web:www.malwarebytes.com
Trojan.GuLoader is Malwarebytes' detection name for a family of Trojans that download and install additional malware .
-
web:www.ncsc.gov.uk
How to defend organisations against malware or ransomware attacks.
-
web:www.redteamnews.com
Autodesk AutoCAD Vulnerabilities Patched: Key Details and Remediation Steps Autodesk has recently addressed multiple vulnerabilities in its AutoCAD software, a critical tool used by architects, engineers, and designers worldwide.
-
web:www.tenable.com
The version of Autodesk AutoCAD installed on the remote Windows host is affected by multiple vulnerabilities. (Nessus Plugin ID 192656)
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.