Trusted Design

ELISE: Security Through Obesity

概要

Taiwan has long been subjected to persistent targeting from espionage motivated threat actors. This blog presents our analysis of one of the latest malware variants targeting individuals in Taiwan, which exhibits some interesting characteristics that can be useful for detecting and defending against the threat – including the creation of an obese file, weighing in at 500MB, as part of its execution.

Created: 2026-02-23

Indicators

• hostname - ustar5.passas.us -
• FileHash-MD5 - 3940a839c8f933cbdc17a50d164186fa -
• FileHash-MD5 - 6fcdc554b71db3f0b46c7722c2a08285 -
• FileHash-MD5 - c205fc5ab1c722bbe66a4cb6aff41190 -
• FileHash-MD5 - 353fc24939bb5db003097a8dd3c0ee7b -
• FileHash-MD5 - bc179ebf3ca089dc9f3596beea38ab27 -
• hostname - dnt5b.myfw.us -
• YARA - 23cab549bde8e6cd11d1348a3d0ea1c66bf735bc -
• YARA - 31880e8affc529d8f50a4d20c875eeb975aa8a35 -
• CVE - CVE-2014-4114 -
• CVE - CVE-2015-3113 -

類似Pulses

• Defending the White Elephant (score: 0.64)
• Korplug RAT used to attack Vietnamese institutions (score: 0.61)
• Musical Chairs: Campaign Involving New Variant of Gh0st Malware (score: 0.61)
• Unusual Exploit Kit Targets Chinese Users,2 (score: 0.61)
• Poison Ivy RAT Variant Targets Hong Kong Pro-Democracy Activists (score: 0.60)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る