Fallout in windows, Aug 31 – Sep 6

What we caught this week while monitoring over 163,052,840 artifacts across 47 ecosystems. Campaigns that impact multiple packages are collapsed into a single entry with their siblings.

TUESDAY

Tue Sep 1 · 2 catches · 0 waves · 2 singles
objectivesobjectives/command-and-controlwell-knownwell-known/appmicro-behaviors/communicationsmicro-behaviorsmetadata/binarymetadataobjectives/evasionobjectives/privilege-escalationwell-known/library+15 23d
ErichDonahue.SpinnerforDiscogs windows 23 days ago

Signed malware with RAT capabilities

objectives/anti-analysisobjectiveswell-known/appwell-knownmicro-behaviors/communicationsmicro-behaviorsmetadata/binarymetadataobjectives/evasionobjectives/anti-staticobjectives/command-and-control+21 23d
JasonMeng.rolltape windows 23 days ago

Keylogger, screen capture, anti-analysis

MONDAY

Mon Aug 31 · 1 catch · 0 waves · 1 single
objectives/anti-staticwell-known/appwell-knownobjectives/collectionobjectives/discoveryobjectivesmicro-behaviors/processmicro-behaviorsmetadata/binarymetadataobjectives/command-and-control+22 23d
Drovio.Drovio windows 23 days ago

Keylogger, injection, evasion, C2

backdoor/binarycontrol/signal
O objectives H behaviours Md metadata · a group subscript counts categories, an atom subscript subcategories