TF-MAL-js.witchcoven

Description

ThreatFox malware family `js.witchcoven`. Printable name: witchcoven.

Indicators of Compromise (1)

Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.

References (1)

• ThreatFox: IOCs for this family ThreatFox Malwares

• WITCHCOVEN - Threat Group Cards: A Threat Actor Encyclopedia - ETDA
  web:apt.etda.or.th

  Last change to this tool card: 23 April 2020 Download this tool card in JSON format All groups using tool WITCHCOVEN

  2026-05-22 05:27 UTC
• The Most Popular Malware Families - hunt.io
  web:hunt.io

  Discover detailed profiles of malware families, including threat actor data, mitigation strategies, and targeted industries to enhance your defenses.

  2026-05-22 05:27 UTC
• Remediate vulnerabilities with Microsoft Defender Vulnerability ...
  web:learn.microsoft.com

  Remediate security weaknesses discovered through security recommendations, and create exceptions if needed, in Defender Vulnerability Management.

  2026-05-22 05:27 UTC
• witchcoven (Malware Family) - Fraunhofer
  web:malpedia.caad.fkie.fraunhofer.de

  Details for the witchcoven malware family including references, samples and yara signatures.

  2026-05-22 05:27 UTC
• PDF Malware Analysis Report
  web:media.defense.gov

  Introduction Note: This Malware Analysis Report was originally published Dec. 4, 2025, to share indicators of compromise (IOCs) and detection signatures for BRICKSTORM malware . The Cybersecurity and Infrastructure Security Agency (CISA), National Security Agency (NSA), and Canadian Centre for Cyber Security (Cyber Centre) have updated this Malware Analysis Report three times.

  2026-05-22 05:27 UTC
• Malware Incident Response Plan in 7 Steps | SpyCloud
  web:spycloud.com

  7 Incident Response Steps to Fully Remediate Malware Infections The following malware incident response steps are an addendum to your malware incident response plan to make for a more comprehensive approach to remediation , and can be incorporated into your existing IR runbooks.

  2026-05-22 05:27 UTC
• Advancing Malware Family Classification with MOTIF - Booz Allen Hamilton
  web:www.boozallen.com

  The ability to quickly pin down the family of malware used during a cyber attack can be a massive boon to an incident responder. Not only does family classification provide immediate insights about the characteristics and behaviors of a malware sample, but it is a core part of the triage, remediation , and attribution efforts.

  2026-05-22 05:27 UTC
• Malware Incident Response: The 7-Step Playbook for 2025 - Breachsense
  web:www.breachsense.com

  Complete malware remediation now requires addressing both the infected endpoint and the stolen authentication data. Your malware incident response playbook must account for both.

  2026-05-22 05:27 UTC
• Technical Approaches to Uncovering and Remediating Malicious ... - CISA
  web:www.cisa.gov

  It highlights technical approaches to uncovering malicious activity and includes mitigation steps according to best practices. The purpose of this report is to enhance incident response among partners and network administrators along with serving as a playbook for incident investigation.

  2026-05-22 05:27 UTC
• Mitigating malware and ransomware attacks - The National Cyber Security ...
  web:www.ncsc.gov.uk

  How to defend organisations against malware or ransomware attacks.

  2026-05-22 05:27 UTC

Only Available for Registered Users. Sign in to view.