TF-MAL-elf.doublefantasy
📛 Threat Title
Malware family: DoubleFantasy
Description
ThreatFox malware family `elf.doublefantasy`. Printable name: DoubleFantasy.
Indicators of Compromise (1)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
domain
elf.doublefantasy
VT: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/elf.doublefantasy
IOC database
- Type
- domain
- Value
elf.doublefantasy- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Extracted from Threat TF-MAL-elf.doublefantasy
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
VirusTotal: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/elf.doublefantasy
References (1)
- ThreatFox: IOCs for this family ThreatFox Malwares
Remediations (10)
-
web:apt.etda.or.th
Threat Group Cards: A Threat Actor Encyclopedia Tool: DOUBLEFANTASY ... Last change to this tool card: 28 December 2022 Download this tool card in JSON format All groups using tool DOUBLEFANTASY ... 1 group listed (1 APT, 0 other, 0 unknown) ↑
-
web:arxiv.org
Interpretable models are especially important in ad-versarial domains such as malware analysis, where understanding the rationale behind a classification can guide remediation efforts and enhance model robust-ness. This paper proposes a novel approach for detect-ing and explaining concept drift in malware families over time.
-
web:attack.mitre.org
Antivirus/Antimalware solutions utilize signatures, heuristics, and behavioral analysis to detect, block, and remediate malicious software, including viruses, trojans, ransomware, and spyware. These solutions continuously monitor endpoints and systems for known malicious patterns and suspicious behaviors that indicate compromise. Antivirus/Antimalware software should be deployed across all ...
-
web:cloud.google.com
The Triple DOUBLE malware ecosystem consists of a downloader (DOUBLEDRAG) (or alternatively an Excel document with an embedded macro), a dropper (DOUBLEDROP), and a backdoor (DOUBLEBACK).
-
web:danielroberson.com
0001-01-01 DOUBLEFANTASY is a POSIX -compliant, multiplatform malware written by the Equation Group.
-
web:malpedia.caad.fkie.fraunhofer.de
Details for the DoubleFantasy malware family including references, samples and yara signatures.
-
web:windowsforum.com
The emergence of RESURGE signals more than just another entry in a long line of malware threats. According to CISA, RESURGE contains advanced persistence features inherited from the SPAWNCHIMERA malware family—a group notorious for its ability to survive system reboots and avoid simplistic remediation .
-
web:www.cisa.gov
The FBI is working closely with industry partners to share information about the malware to maximize detection, remediation , and prevention measures for network defenders.
-
web:www.nature.com
hierarchical deep learning framework for Portable Executable (PE) malware detection and family categorization, underpinned by a novel Doubly Regularized Binary Cross-Entropy (DRBCE) loss function ...
-
web:www.ncsc.gov.uk
How to defend organisations against malware or ransomware attacks.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.