Moskalvzapoe
Also reported as TA511 and MAN1.
Reports per quarter
CVEs named in reports
- CVE-2021-40444 KEV ransomware
KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.
Reports
-
The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor Hancitor (Malware Family)
Show all 31 reports Show fewer
-
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Unpacking Hancitor malware
-
FINDING BEACONS IN THE DARK 1650728751599
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor FINDING BEACONS IN THE DARK 1650728751599
-
Hancitor tries XLL as initial malware file
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Hancitor tries XLL as initial malware file
-
Wireshark Tutorial- Examining Traffic from Hancitor Infections
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Wireshark Tutorial- Examining Traffic from Hancitor Infections
-
Hancitor’s Use of Cobalt Strike and a Noisy Network Ping Tool
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Hancitor’s Use of Cobalt Strike and a Noisy Network Ping Tool
-
MAN1, Moskal, Hancitor and a side of Ransomware
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor MAN1, Moskal, Hancitor and a side of Ransomware
-
ZLoader Loads Again- New ZLoader Variant Returns
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor ZLoader Loads Again- New ZLoader Variant Returns
-
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor [RAT] DARK TRACK ALIEN 4.1
-
[Part 1] - Analysing the New Linux-AES.DDoS IoT Malware
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor [Part 1] - Analysing the New Linux-AES.DDoS IoT Malware
-
Zeus Sphinx Pushes Empty Configuration Files — What Has the Sphinx Got Cooking-
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Zeus Sphinx Pushes Empty Configuration Files — What Has the Sphinx Got Cooking-
-
Me and Mr. Robot- Tracking the Actor Behind the MAN1 Crypter
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Me and Mr. Robot- Tracking the Actor Behind the MAN1 Crypter
Newest first. Details opens the report in Explore.