TF-MAL-elf.cephei

Description

ThreatFox malware family `elf.cephei`. Printable name: Cephei.

Indicators of Compromise (1)

Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.

References (1)

• ThreatFox: IOCs for this family ThreatFox Malwares

• Catch'em all: Classification of Rare, Prominent, and Novel Malware Families
  web:arxiv.org

  The goal of malware family classification is to assign malware family labels to known- malware examples to better understand specimen be-havior [2]. Malware authors actively generate new specimens to evade detection and to introduce novel threats, resulting in variations within existing malware families or evolution of new/novel families.

  2026-05-22 01:29 UTC
• Malicious behavior types - Sophos Central Admin
  web:docs.sophos.com

  This page explains the names we use for malicious behavior detected on computers or servers.

  2026-05-22 01:29 UTC
• Malware Families - Fraunhofer
  web:malpedia.caad.fkie.fraunhofer.de

  This page gives an overview of all malware families that are covered on Malpedia, supplemented with some basic information for each family .

  2026-05-22 01:29 UTC
• RESURGE Malware and CVE-2025-0282: Critical Threats and Defender ...
  web:windowsforum.com

  The emergence of RESURGE signals more than just another entry in a long line of malware threats. According to CISA, RESURGE contains advanced persistence features inherited from the SPAWNCHIMERA malware family—a group notorious for its ability to survive system reboots and avoid simplistic remediation .

  2026-05-22 01:29 UTC
• Advancing Malware Family Classification with MOTIF - Booz Allen Hamilton
  web:www.boozallen.com

  The ability to quickly pin down the family of malware used during a cyber attack can be a massive boon to an incident responder. Not only does family classification provide immediate insights about the characteristics and behaviors of a malware sample, but it is a core part of the triage, remediation , and attribution efforts.

  2026-05-22 01:29 UTC
• Malware Incident Response: The 7-Step Playbook for 2025 - Breachsense
  web:www.breachsense.com

  Complete malware remediation now requires addressing both the infected endpoint and the stolen authentication data. Your malware incident response playbook must account for both.

  2026-05-22 01:29 UTC
• PDF Joint Cybersecurity Advisory - AA20-245A - Technical Approaches to ...
  web:www.cisa.gov

  This joint advisory is the result of a collaborative research effort by the cybersecurity authorities of five nations: Australia, Canada, New Zealand, the United Kingdom, and the United States.1 It highlights technical approaches to uncovering malicious activity and includes mitigation steps according to best practices.

  2026-05-22 01:29 UTC
• Mitigating malware and ransomware attacks - The National Cyber Security ...
  web:www.ncsc.gov.uk

  How to defend organisations against malware or ransomware attacks.

  2026-05-22 01:29 UTC
• BenchMFC: A benchmark dataset for trustworthy malware family ...
  web:www.sciencedirect.com

  BenchMFC provides clear family , packer, and timestamp tags for each sample, it thus can support research on three types of malware concept drift: 1) unseen families, 2) packed families, and 3) evolved families.

  2026-05-22 01:29 UTC
• A Deep Dive into a Modular Malware Family - wordfence.com
  web:www.wordfence.com

  The Wordfence Threat Intelligence Team recently identified an interesting malware family on May 16, 2025 during a site clean. This malware family shared a codebase but varied in features across different versions, including credit card skimming and WordPress credential theft. Most surprisingly, one variant incorporated a live backend system hosted directly on infected websites for attacker use ...

  2026-05-22 01:29 UTC

Only Available for Registered Users. Sign in to view.