TF-MAL-elf.speculoos

Description

ThreatFox malware family `elf.speculoos`. Printable name: Speculoos.

Indicators of Compromise (1)

Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.

References (1)

• ThreatFox: IOCs for this family ThreatFox Malwares

• Detecting and Explaining Malware Family Evolution Using Rule-Based ...
  web:arxiv.org

  Interpretable models are especially important in ad-versarial domains such as malware analysis, where understanding the rationale behind a classification can guide remediation efforts and enhance model robust-ness. This paper proposes a novel approach for detect-ing and explaining concept drift in malware families over time.

  2026-05-22 05:23 UTC
• PDF RecMaL: Rectify the malware family label via hybrid analysis
  web:chenligeng.github.io

  ilyinformationof malwarecanbe obtainedfrom the anti-virus labels (abbreviated as AV labels 1 ) generated by various ven- dors. A standard AV label consists of platform, malware type, malware family , variant component, and additional information thatis prepended orappendedtothe name. Such asthe mal - ware label format

  2026-05-22 05:23 UTC
• BPFDoor and Symbiote Rootkits Attacking Linux Systems Exploiting eBPF ...
  web:cybersecuritynews.com

  Two sophisticated Linux rootkits are posing increasingly serious threats to network security by exploiting eBPF technology to hide their presence from traditional detection systems. BPFDoor and Symbiote, both originating from 2021, represent a dangerous class of malware that combines advanced kernel-level access with powerful evasion capabilities.

  2026-05-22 05:23 UTC
• Runs in the Family: Malware Family Variants Identification through API ...
  web:ieeexplore.ieee.org

  In this paper, we show that understanding this difference in malware behavior among variants of the same malware family is possible through analysis of Windows API system call sequences and their related frequencies. This allows for the identification of changes in malware variant behavior and illustrates the relationships between malware families.

  2026-05-22 05:23 UTC
• Speculoos (Malware Family) - Fraunhofer
  web:malpedia.caad.fkie.fraunhofer.de

  Details for the Speculoos malware family including references, samples and yara signatures.

  2026-05-22 05:23 UTC
• RESURGE Malware and CVE-2025-0282: Critical Threats and Defender ...
  web:windowsforum.com

  The emergence of RESURGE signals more than just another entry in a long line of malware threats. According to CISA, RESURGE contains advanced persistence features inherited from the SPAWNCHIMERA malware family—a group notorious for its ability to survive system reboots and avoid simplistic remediation .

  2026-05-22 05:23 UTC
• Technical Approaches to Uncovering and Remediating Malicious ... - CISA
  web:www.cisa.gov

  It highlights technical approaches to uncovering malicious activity and includes mitigation steps according to best practices. The purpose of this report is to enhance incident response among partners and network administrators along with serving as a playbook for incident investigation.

  2026-05-22 05:23 UTC
• A hierarchical deep learning framework with doubly regularized loss for ...
  web:www.nature.com

  This study proposes a hierarchical deep learning framework for Portable Executable (PE) malware detection and family categorization, underpinned by a novel Doubly Regularized Binary Cross-Entropy ...

  2026-05-22 05:23 UTC
• Mitigating malware and ransomware attacks - The National Cyber Security ...
  web:www.ncsc.gov.uk

  How to defend organisations against malware or ransomware attacks.

  2026-05-22 05:23 UTC
• RecMaL: Rectify the malware family label via hybrid analysis
  web:www.sciencedirect.com

  Due to the rapid development of anti-virus engines, the family information of malware can be obtained from the anti-virus labels (abbreviated as AV labels1) generated by various vendors. A standard AV label consists of platform, malware type, malware family , variant component, and additional information that is prepended or appended to the name.

  2026-05-22 05:23 UTC

Only Available for Registered Users. Sign in to view.