TF-MAL-apk.gustuff
📛 Threat Title
Malware family: Gustuff
Description
ThreatFox malware family `apk.gustuff`. Printable name: Gustuff.
Indicators of Compromise (1)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
domain
apk.gustuff
VT: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/apk.gustuff
IOC database
- Type
- domain
- Value
apk.gustuff- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Extracted from Threat TF-MAL-apk.gustuff
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
VirusTotal: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/apk.gustuff
References (1)
- ThreatFox: IOCs for this family ThreatFox Malwares
Remediations (10)
-
web:101.school
In conclusion, remediation is a critical aspect of dealing with malware incidents. By understanding the different strategies and techniques involved, you can effectively mitigate the impact of a malware attack and prevent future infections.
-
web:attack.mitre.org
Gustuff Gustuff is mobile malware designed to steal users' banking and virtual currency credentials. [1]
-
web:cybersecuritynews.com
Microsoft has released urgent security updates to address a zero-day vulnerability in the Windows Cloud Files Mini Filter Driver (cldflt.sys) that is currently being exploited in the wild.
-
web:malpedia.caad.fkie.fraunhofer.de
Group-IB describes Gustuff as a mobile Android Trojan, which includes potential targets of customers in leading international banks, users of cryptocurrency services, popular ecommerce websites and marketplaces. Gustuff has previously never been reported. Gustuff is a new generation of malware complete with fully automated features designed to steal both fiat and crypto currency from user ...
-
web:tria.ge
Check this gustuff report malware sample 6bdfb79f813448b7f1b4f4dbe6a45d1938f3039c93ecf80318cedd1090f7e341, with a score of 10 out of 10.
-
web:windowsforum.com
The emergence of RESURGE signals more than just another entry in a long line of malware threats. According to CISA, RESURGE contains advanced persistence features inherited from the SPAWNCHIMERA malware family—a group notorious for its ability to survive system reboots and avoid simplistic remediation .
-
web:www.boozallen.com
The ability to quickly pin down the family of malware used during a cyber attack can be a massive boon to an incident responder. Not only does family classification provide immediate insights about the characteristics and behaviors of a malware sample, but it is a core part of the triage, remediation , and attribution efforts.
-
web:www.cisa.gov
It highlights technical approaches to uncovering malicious activity and includes mitigation steps according to best practices. The purpose of this report is to enhance incident response among partners and network administrators along with serving as a playbook for incident investigation.
-
web:www.group-ib.com
Considering the high activity of the Gigabud malware family , the blog aims to equip organizations and the community with valuable insights into the Gigabud trojan's functionality and the topography of attacks.
-
web:www.ncsc.gov.uk
How to defend organisations against malware or ransomware attacks.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.