TF-MAL-py.pyration
📛 Threat Title
Malware family: PY#RATION
Description
ThreatFox malware family `py.pyration`. Printable name: PY#RATION.
Indicators of Compromise (1)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
domain
py.pyration
VT: VT base fetch failed: HTTPError: 429 Too Many Requests for domains/py.pyration
IOC database
- Type
- domain
- Value
py.pyration- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Extracted from Threat TF-MAL-py.pyration
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
VirusTotal: VT base fetch failed: HTTPError: 429 Too Many Requests for domains/py.pyration
References (1)
- ThreatFox: IOCs for this family ThreatFox Malwares
Remediations (10)
-
web:cymulate.com
The PY#RATION attack campaign used spear-phishing emails with malicious attachments to drop a remote access trojan. To avoid detection the attacker leveraged fernet encryption to hide the original source compounds and web sockets for command-and-control communication and exfiltration of data.
-
web:malpedia.caad.fkie.fraunhofer.de
According to Securonix, this malware exhibits remote access trojan (RAT) behavior, allowing for control of and persistence on the affected host. As with other RATs, PY#RATION possesses a whole host of features and capabilities, including data exfiltration and keylogging. What makes this malware particularly unique is its utilization of websockets for both command and control (C2) communication ...
-
web:planetjon.net
The malware , dubbed PY#RATION by the cybersecurity firm, comes with a host of capabilities that allows the threat actor to harvest sensitive information. Later versions of the backdoor also sport anti-evasion techniques, suggesting that it's being actively developed and maintained.
-
web:thecyberwire.com
A new Python-based attack campaign. Securonix describes an attack campaign that's using a Python-based remote access Trojan dubbed " PY#RATION ." Malware distributed via phishing. Securonix observed the first version of PY#RATION in August 2022, and the malware has been updated several times since.
-
web:thehackernews.com
What's more, PY#RATION functions as a pathway for deploying more malware , which consists of another Python-based info-stealer designed to siphon data from web browsers and cryptocurrency wallets.
-
web:www.bleepingcomputer.com
A new Python-based malware has been spotted in the wild featuring remote access trojan (RAT) capabilities to give its operators control over the breached systems. Named PY#RATION by researchers at ...
-
web:www.pcrisk.com
Since PY#RATION can download and upload files, and run shell commands, it may be used to inject additional malware . For instance, ransomware, crypto-mining malware , information-stealing malware , and other types of malware . This may lead to data and monetary loss, high CPU and GPU usage, and a variety of other problems.
-
web:www.securonix.com
By Securonix Threat Research: D. Iuzvyk, T. Peck, O. Kolesnikov Figure 1: PY#RATION payload Introduction The Securonix Threat Research Team has identified a new Python-based attack campaign (tracked by Securonix as PY#RATION ) in the wild. The malware exhibits remote access trojan (RAT) behavior, allowing for control of and persistence on the affected host. As with other RATs, PY#RATION ...
-
web:www.stratosphereips.org
This blog post shows the analysis of a malware of the PyRation family by Tomas Nieponice as part of a 3-week winter cybersecurity internship at the Stratosphere Laboratory. The internship was done under the supervision of Assist. prof. Sebastian Garcia, PhD.
-
web:www.techradar.com
Cybersecurity researchers from Securonix have recently discovered a new Python-based malware that's capable of stealing files and logging keystrokes from affected endpoints. Dubbed PY#RATION ...
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.