Intezer Analyze community roundup

April 27, 2020

Written by

Intezer

Maze ransomware, APT41 and Lazarus highlight this month's community samples

1. More_eggs variant with low Antivirus detections has modified string encoding mechanisms and other code changes

2. Penguin Turla sample shares 75 percent of its code with a sample first reported by Kaspersky in 2014

3. DragonOK (Chinese APT group) sample compiled in 2016 with no clear classification in VirusTotal shares 90 percent of its code with previously reported samples

4. Mozi malware sample first reported by CenturyLink. Like most IoT botnets this sample shares code with Mirai

5. Maze ransomware gets creative with its PDB paths "C:WuhanLabcoronashit.pdb"

6. Domestic Kitten first reported by Blackberry shares code with previous Dalvik samples from the same Iranian APT group

7. Carbanak variant unclassified on VirusTotal. Shares over 90 percent of its code with previous samples

8. Destover malware used by Lazarus group

Not an Intezer Analyze community user? Sign up for free at analyze.intezer.com to detect and classify malicious software in seconds.

Intezer

Count on Intezer AI SOC to triage, investigate and respond to every alert at unmatched speed and accuracy.

In this article

Share article

Related Articles

Company News

4 min

Intezer Workflows. The AI SOC is now complete

Detect, triage, investigate, respond. The entire SOC lifecycle now runs in one platform with AI executing and humans supervising. 

CISO

CISO Playbook: Putting Claude to work in security operations

This playbook is for security leaders who know AI belongs in the SOC, but need a practical model for where it actually fits. It’s written for CISOs, SOC leaders, detection engineers, and security teams dealing with alert volume, manual triage, reporting drag, and pressure to justify AI investment.

Company News

5 minutes

Loop engineering comes to the SOC: Introducing the Intezer Org Brain

Organizational context in an AI SOC is table stakes. Org Brain is very different. It learns, it recalls, it fetches what it's missing, and it gets sharper with every alert it touches, all autonomously.