localfile (BlackShades, NanoCore, DarkComet, Remcos, ISFB, Bozok, Vertex Loader, Poison Ivy, NetWire) — malware analysis report

File info

Filename

localfile

File type

POSIX tar archive

File size

13.7 MB

First seen

2025-09-05 00:49

Last seen

2026-06-17 17:31

Environment

win7/x86 en

Hashes

SHA1

62d09bceb461531165f6f536ab034cf7a0f7dfde

SHA256

4f2cdbd02bfea75932444694f1d3c317c79041be76b0adb6a091e72fcf9284d0

MD5

18ea858f966113154acd965a1548787c

Malwares

• BlackShades
• NanoCore
• DarkComet
• Remcos
• ISFB
• Bozok
• Vertex Loader
• Poison Ivy
• NetWire

Signatures

Related reports

• localfile — BlackShades, NanoCore, DarkComet, Remcos, ISFB, Bozok, Vertex Loader, Poison Ivy, NetWire
• localfile — BlackShades, TriangleDB, NanoCore, DarkComet, LaZagne, Cobalt Strike, Lockbit, Bozok, Vertex Loader, HermeticWiper, WhisperGate, DarkSide, Poison Ivy, NetWire, Follina
• vtdl_1781697047_ncgpntfb — Remcos
• vtdl_1781696359_vg0gf0j1 — Remcos
• tmp-eml_attach_for_scan-457964b2c6a5a5941b6897bd90e73e16.file — Remcos