TF-MAL-jar.supremebot
📛 Threat Title
Malware family: SupremeBot
Description
ThreatFox malware family `jar.supremebot`. Printable name: SupremeBot. Aliases: BlazeBot.
Indicators of Compromise (1)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
domain
jar.supremebot
VT: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/jar.supremebot
IOC database
- Type
- domain
- Value
jar.supremebot- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Extracted from Threat TF-MAL-jar.supremebot
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
VirusTotal: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/jar.supremebot
References (1)
- ThreatFox: IOCs for this family ThreatFox Malwares
Remediations (10)
-
web:computersecurityinfo.com
Manual Removal Of SupremeBot Is Complex And Risky Due To Hidden Persistence Hooks And Fileless Execution Methods. Simply Deleting Visible Files Often Fails To Eliminate The Infection Completely, As Scheduled Tasks, Registry Keys, And Memory-resident Components May Reinstate Malware Upon Reboot.
-
web:cyble.com
Cyble analyzes SupremeBot , a crypto-mining client leveraging a trojanized Super Mario game installer to spread Umbral stealer malware .
-
web:malpedia.caad.fkie.fraunhofer.de
Details for the SupremeBot malware family including references, samples and yara signatures.
-
web:threatfox.abuse.ch
A malware sample can be associated with only one malware family . The page below gives you an overview on indicators of compromise associated with jar. supremebot .
-
web:www.breachsense.com
Complete malware remediation now requires addressing both the infected endpoint and the stolen authentication data. Your malware incident response playbook must account for both.
-
web:www.cert-in.org.in
The malware gathers data about the target's hardware and establishes a connection with a mining server in order to initiate mining operations. Within the game's installation directory, "atom.exe" ( SupremeBot ) generates a replica of its own file and conceals it within a hidden folder.
-
web:www.cisa.gov
It highlights technical approaches to uncovering malicious activity and includes mitigation steps according to best practices. The purpose of this report is to enhance incident response among partners and network administrators along with serving as a playbook for incident investigation.
-
web:www.cshub.com
A Trojanized installer for the popular Nintendo fan game Super Mario Forever has been used to spread malware . This discovery was made cyber security company Cyble. Cyble's researchers found that malicious actors were spreading a Monero (XMR) miner, a SupremeBot mining client and an open-source Umbral stealer all bundled with a legitimate installer for Super Mario Forever. Once successfully ...
-
web:www.csk.gov.in
The malware gathers data about the target's hardware and establishes a connection with a mining server in order to initiate mining operations. Within the game's installation directory, "atom.exe" ( SupremeBot ) generates a replica of its own file and conceals it within a hidden folder.
-
web:www.malwarebytes.com
The SupremeBot malware uses some techniques to stay under the radar. First it creates a copy of itself called Super-Mario-Bros.exe and drops that in a randomly named subfolder of the ProgramData folder.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.