Security Intelligence Center

[b]Original filename (SHA256)[/b] : b17c5552d16151a4bfbacd9a90a94b877c47c2806babac8b9de7a6a37c6d86d0

Comment added on 2026-09-05 19:27:51 French Time Zone

[b]MWDB Link[/b] : https://mwdb.cert.pl/file/b17c5552d16151a4bfbacd9a90a94b877c47c2806babac8b9de7a6a37c6d86d0
[b]VirusShare Link[/b] : https://...

YARA Signature Match - THOR APT Scanner

RULE: SUSP_RANSOM_Note_Aug22
RULE_TYPE: THOR APT Scanner's rule set only 🔨
RULE_LINK: https://valhalla.nextron-systems.com/info/rule/SUSP_RANSOM_Note_Aug22
DESCRIPTION: Detects ransomware notes as found in encrypted folders
RULE_AUTHOR: Florian Roth

Detec...

YARA Signature Match - THOR APT Scanner

RULE: SUSP_PowerShell_Disable_MicrosoftDefender_Features_Jan22_1
RULE_TYPE: THOR APT Scanner's rule set only 🔨
RULE_LINK: https://valhalla.nextron-systems.com/info/rule/SUSP_PowerShell_Disable_MicrosoftDefender_Features_Jan22_1
DESCRIPTION: Detects command...

YARA Signature Match - THOR APT Scanner

RULE: Suspicious_String_Ransomware
RULE_TYPE: VALHALLA rule feed only ⚡
RULE_LINK: https://valhalla.nextron-systems.com/info/rule/Suspicious_String_Ransomware
DESCRIPTION: Detects suspicious strings in files used by Ransomware
REFERENCE: -
RULE_AUTHOR: Flor...

YARA Signature Match - THOR APT Scanner

RULE: SUSP_PE_Loader_Indicators_Oct21_2
RULE_TYPE: THOR APT Scanner's rule set only 🔨
RULE_LINK: https://valhalla.nextron-systems.com/info/rule/SUSP_PE_Loader_Indicators_Oct21_2
DESCRIPTION: Detects small PE files with suspicious small set of imports from ...

YARA Signature Match - THOR APT Scanner

RULE: SUSP_OBFUSC_UPX_Oct20
RULE_TYPE: THOR APT Scanner's rule set only 🔨
RULE_LINK: https://valhalla.nextron-systems.com/info/rule/SUSP_OBFUSC_UPX_Oct20
DESCRIPTION: Detects obfuscated samples with UPX and PE header anomalies
RULE_AUTHOR: Florian Roth

De...

YARA Signature Match - THOR APT Scanner

RULE: SUSP_RANSOM_Note_Generic_Aug22
RULE_TYPE: THOR APT Scanner's rule set only 🔨
RULE_LINK: https://valhalla.nextron-systems.com/info/rule/SUSP_RANSOM_Note_Generic_Aug22
DESCRIPTION: Detects ransomware notes
REFERENCE: https://www.databreaches.net/cuba-r...

**File found on MalwareBazaar**

**File Name (as uploaded):** arc
**File Type:** elf
**Reporter:** abuse_ch
**MalwareBazaar Link:** https://bazaar.abuse.ch/sample/dae779c0c6c93d93cfa6f5cdf1c675e438d332ec6266319f32779f9bb882ff8b
**JaffaCakes118 Analysis:** https://jaffacakes118.dev/analysis/dae779c0c...

[b]Original filename (SHA256)[/b] : 4e2e7e241106382980171d1633f2d27dfcb8cd5e74832fa926cc268a80e9a6cc

Comment added on 2026-09-05 19:27:38 French Time Zone

[b]MWDB Link[/b] : https://mwdb.cert.pl/file/4e2e7e241106382980171d1633f2d27dfcb8cd5e74832fa926cc268a80e9a6cc
[b]VirusShare Link[/b] : https://...

YARA Signature Match - THOR APT Scanner

RULE: SUSP_Monero_Mining_Pools_Oct21
RULE_TYPE: THOR APT Scanner's rule set only 🔨
RULE_LINK: https://valhalla.nextron-systems.com/info/rule/SUSP_Monero_Mining_Pools_Oct21
DESCRIPTION: Detects FQDNs of popular crypto mining pools in files
REFERENCE: https:...