ThreatInfo Detection Digest: May 27, 2026

ThreatInfo research digest

A concise set of new file reports that were not used in recent digests. Each entry includes the detection name, MD5 hash, and a direct report link so analysts can verify the exact sample before taking action.

New report links20
Tracked categories5
Primary actionVerify hash

Category overview

Reports worth opening

Adware

Review browser changes, bundled installers, extensions, and unexpected advertising behavior.

DetectionAdware.Gen
MD5fbfec94b4be3344424528bf1ba0e09f6
DetectionAdware.Gen
MD5f9dabbde034c44a12af5789d4b2b77d3
DetectionAdware.ELEX
MD590384600c295d8db7fc5dcbd941ee1cc
DetectionUnder review
MD54bc70ae4d5c7be84cc47ae9cfc5fd5c6

PUP/PUA

Check whether the file came from an installer bundle, optimizer, updater, or optional offer.

DetectionAdware.SweetIM
MD53cd3f6a9ca86b295086448d18f623a49
DetectionAdware.SweetIM
MD528918719e99b7af995bb222d6a0558bc
DetectionAdware.SweetIM
MD50ded43808d5b0613e64e1b2ae5f23e76
DetectionPUP.Toolbar
MD5bca1545f58cfbd93a1f239f0a078c3e1

Trojan

Verify the hash and origin before trusting the filename; trojans often imitate legitimate software.

DetectionTrojan.Gen
MD5bab6a34666c2e14b1db995f7617f4851
DetectionSuspicious Object
MD53d5fa6d9aa8cf0087e59296463598c2e
DetectionTrojan.Gen
MD581ecb3e505949726364bfd699603fd59
DetectionAdware.ELEX
MD59896325e7b2c61e0c083789794feef14

Ransomware

Prioritize isolation and backup checks when this class appears on an endpoint.

DetectionTrojan.Packed
MD502e00de4670422f074fb74a7ed8517b9
DetectionRansom.Wacatac
MD5299fa0349b3e2536a9d40d95674cfa96
DetectionRansom.Wacatac
MD5c0dc3ea79dab77df4e5cc8dde00b210c
File5.exe
DetectionRansom.Wacatac
MD5a7ffc700eca3323c9bbe5aa9bd15f759

Virus

Look for copied or modified executables and scan related files created around the same time.

DetectionVirus.Neshta
MD5f84116867f9fb368653dfe48d88bdd15
DetectionVirus.Neshta
MD5f42b34caae83c7587d47070f3739a302
DetectionVirus.Jeefo
MD53c8d56178cbe24ce1023b25fb6699e76
DetectionVirus.Neshta
MD520268704661fe16262b71dc227b0e860

How to use this digest

Start with the MD5 hash, not the filename. If the hash or file path matches a system you manage, open the report, review the publisher and detection details, then scan the endpoint with GridinSoft Anti-Malware. ThreatInfo reports show whether GridinSoft already detects the file and which detection name is used.

Exit mobile version