ThreatInfo research digest
A concise set of new file reports that were not used in recent digests. Each entry includes the detection name, MD5 hash, and a direct report link so analysts can verify the exact sample before taking action.
New report links20
Tracked categories5
Primary actionVerify hash
Reports worth opening
Adware
Review browser changes, bundled installers, extensions, and unexpected advertising behavior.
DetectionAdware.Gen
MD57d4967e51a40062ae97638c25a4c4ae4
DetectionAdware.Gen
MD5586431b19af2801990efbbb4e93f60d9
DetectionPUP.ELEX
MD55cd990681476c1089d3ac89ee2d92ae5
DetectionAdware.ELEX
MD577966913e9b938286c440c269225c878
PUP/PUA
Check whether the file came from an installer bundle, optimizer, updater, or optional offer.
DetectionAdware.SweetIM
MD589b7d9f41453942d50e5dcca70c44fec
DetectionAdware.SweetIM
MD56736b554a4b5f7140180c50ae7b11df2
DetectionAdware.SweetIM
MD539b53d508c9ac4ae7bcc0f87a82fb247
DetectionAdware.SweetIM
MD5199c353a3c0830cbb01f19036a8d20fa
Trojan
Verify the hash and origin before trusting the filename; trojans often imitate legitimate software.
DetectionGeneral Threat
MD557712fe52623737e2313d63494ec5ec5
DetectionTrojan.Agent
MD5f7cd1b54e619e20add6d40148e301e59
DetectionRansom.Blocker
MD525a283f9dcaa5799876a4ae94a0ca385
DetectionSpy.Keylogger
MD5d03a8e1030a28df3fcf7f7317afd4a38
Ransomware
Prioritize isolation and backup checks when this class appears on an endpoint.
DetectionRansom.Exp
MD50535f7307efc8a47f99afc4bc0341072
DetectionRansom.Exp
MD5bd078dc4a27c5259b15b1bd463b8b911
DetectionRansom.Exp
MD5246793998f9f27e061d20498c782c63f
DetectionRansom.Wacatac
MD51784fd66059ff3ee715231c6f775d6fc
Virus
Look for copied or modified executables and scan related files created around the same time.
DetectionVirus.Neshta
MD5345e1b9c40d30fee0139ca550660a84f
DetectionVirus.Gen
MD58b52d9c37624eb520d1d3fa42cdb6b1c
DetectionVirus.Neshta
MD513e7601fd1367266e4cb6af6c0222d28
DetectionGeneral Threat
MD532985605ac65dd7582eabab029cf932a
How to use this digest
Start with the MD5 hash, not the filename. If the hash or file path matches a system you manage, open the report, review the publisher and detection details, then scan the endpoint with GridinSoft Anti-Malware. ThreatInfo reports show whether GridinSoft already detects the file and which detection name is used.
Related