VirusTotal

Reported Context (2)

Google Threat Intelligence (GTI), accessible through VirusTotal, defines PLYCHIP as a multi-stage PowerShell-based downloader and screening tool. CIS Links SLTT Remus C2 Traffic to Three Malware Delivery Chains
similar WebDAV and ordinal-execution patterns in an attempt to recover the full infection chain. Using VirusTotal, we were able to identify a full chain from a second DLL loader named "pf.ch". ClearFake WebDAV Chains Deliver Amatera, ZigCryptoStealer and Unauthorized NetSupport

Malware (7)

Threat Actors (4)

MITRE ATT&CK (22)

Vendors (2)

Products (12)

Tools (7)

Industries (1)

Countries (7)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.