Maze ransomware, APT41 and Lazarus highlight this month's community samples
1. More_eggs variant with low Antivirus detections has modified string encoding mechanisms and other code changes
2. Penguin Turla sample shares 75 percent of its code with a sample first reported by Kaspersky in 2014
3. DragonOK (Chinese APT group) sample compiled in 2016 with no clear classification in VirusTotal shares 90 percent of its code with previously reported samples
4. Mozi malware sample first reported by CenturyLink. Like most IoT botnets this sample shares code with Mirai
5. Maze ransomware gets creative with its PDB paths "C:WuhanLabcoronashit.pdb"
6. Domestic Kitten first reported by Blackberry shares code with previous Dalvik samples from the same Iranian APT group
7. Carbanak variant unclassified on VirusTotal. Shares over 90 percent of its code with previous samples
8. Destover malware used by Lazarus group
Not an Intezer Analyze community user? Sign up for free at analyze.intezer.com to detect and classify malicious software in seconds.
Intezer
Count on Intezer AI SOC to triage, investigate and respond to every alert at unmatched speed and accuracy.
In this article
Share article
Related Articles
.svg)
Alert Triage
AI SOC
3 min
We let a fruit fly brain triage 12,716 real SOC Alerts. Here is what happened.
On behalf of people who run SOCs, we explore how a fly brain triages alerts compared with a boring linear model you could train in eleven seconds.
.png)
AI SOC
4 min
The impact of the AI SOC: Intezer joins the Cybersecurity Awesomeness Podcast
Intezer's Field CISO and CMO join the Cybersecurity Awesomeness Podcast to explain what the AI SOC is, how it cuts false positives, and why analysts end up more empowered.
.svg)
AI SOC
CISO
MDR
4 min
Financial services need to rethink the MDR model
MDR providers investigate only about 40% of alerts. Learn why financial institutions are rethinking MDR renewals and what full alert coverage requires in 2026.
