TF-MAL-elf.shellbind

Description

ThreatFox malware family `elf.shellbind`. Printable name: ShellBind.

Indicators of Compromise (1)

Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.

References (1)

• ThreatFox: IOCs for this family ThreatFox Malwares

• Metasploit : Creating a Stealthy Windows Hidden Bind Shell
  web:blog.geekinstitute.org

  Learn how to create a stealthy Windows hidden bind shell using Metasploit, evading detection by Nmap and network scanners

  2026-05-22 05:23 UTC
• ShellBind (Malware Family)
  web:malpedia.caad.fkie.fraunhofer.de

  Details for the ShellBind malware family including references, samples and yara signatures.

  2026-05-22 05:23 UTC
• Detecting and Exploiting Bind Shell Backdoor on Metasploitable 2
  web:medium.com

  Introduction A "Bind Shell" backdoor is malicious software that infiltrates a computer system and creates a shell that listens for incoming connections on a specific port. This allows an ...

  2026-05-22 05:23 UTC
• SHELLBIND Malware Exploits SambaCry Vulnerability
  web:redpiranha.net

  A malware known as SHELLBIND has been detected and is said to have advanced capabilities to target network-attached storage (NAS) appliances. The malware which basically exploits the CVE-2017-7494 vulnerability dubbed as the SambaCry that allows attackers to take control of the affected devices.

  2026-05-22 05:23 UTC
• RESURGE Malware and CVE-2025-0282: Critical Threats and Defender ...
  web:windowsforum.com

  The emergence of RESURGE signals more than just another entry in a long line of malware threats. According to CISA, RESURGE contains advanced persistence features inherited from the SPAWNCHIMERA malware family—a group notorious for its ability to survive system reboots and avoid simplistic remediation .

  2026-05-22 05:23 UTC
• Malware Incident Response: The 7-Step Playbook for 2025 - Breachsense
  web:www.breachsense.com

  Complete malware remediation now requires addressing both the infected endpoint and the stolen authentication data. Your malware incident response playbook must account for both.

  2026-05-22 05:23 UTC
• Technical Approaches to Uncovering and Remediating Malicious ... - CISA
  web:www.cisa.gov

  It highlights technical approaches to uncovering malicious activity and includes mitigation steps according to best practices. The purpose of this report is to enhance incident response among partners and network administrators along with serving as a playbook for incident investigation.

  2026-05-22 05:23 UTC
• Mitigating malware and ransomware attacks - The National Cyber Security ...
  web:www.ncsc.gov.uk

  How to defend organisations against malware or ransomware attacks.

  2026-05-22 05:23 UTC
• Malware Targets NAS Devices Via SambaCry Exploit
  web:www.securityweek.com

  Cybercrime Malware Targets NAS Devices Via SambaCry Exploit A piece of malware dubbed by researchers SHELLBIND leverages a recently patched Samba vulnerability in attacks aimed at Internet of Things (IoT) devices, particularly network-attached storage (NAS) appliances.

  2026-05-22 05:23 UTC
• ELF_SHELLBIND.A - Threat Encyclopedia - Trend Micro ID
  web:www.trendmicro.com

  This malware opens a command shell on the targeted system. It mainly targets IoT devices, particularly Network Attached Storage (NAS) devices.

  2026-05-22 05:23 UTC

Only Available for Registered Users. Sign in to view.