CCDS C2: Infrastructure and Payload Analysis
ThreatMon investigates the CCDS C2 framework, uncovering remote command execution, agent management, file transfers, and exposed authentication credentials within an operational testing environment.
ASTRO C2 Technical Analysis
ASTRO was assessed as a Rust-based command and control framework intended for Windows, Linux, and macOS. A seven-crate workspace, 102 agent source files, and more than 200 command variants were described in the supplied analysis.
August 2025 General Malware Campaign Summary Report
Reports Reports This report is about ‘August 2025 General Malware Campaign Summary Report’. Download Report Malware campaign activity remains one of the most critical threats to modern organizations, causing operational disruption, data theft, fraud, service abuse, and significant financial loss. Adversaries increasingly exploit human trust and legitimate platforms, including contact form outreach, callback social engineering, […]
Matanbuchus Loader CTI and Malware Analysis Report
Reports Reports This report is about ‘Matanbuchus Loader CTI and Malware Analysis Report’. Download Report Matanbuchusis a Windows loader offered as Malware-as-a-Service. It focuses on staging and executing second-stage payloads fully in memory, uses scheduled tasks and related Windows componentsfor persistence and tasking, and can run operator supplied PowerShell, executables,DLLs, and raw shellcode. In early […]
Retro-C2 Technical Malware Analysis Report
Reports Reports This report is about ‘Retro-C2 Technical Malware Analysis Report’. Download Report As ThreatMon, we strive to prevent potential malicious activities by informing individuals, companies, firms, institutions, and organizations about current threats through our reports, posts, and analyses. Retro-C2 is a next-generation, web-based Remote Access Trojan (RAT) and infostealer developed by the Turkish-speaking threat […]
Godfather Android Malware Report
Reports Reports This report is about ‘Godfather Android Malware’. Download Report As ThreatMon, we strive to prevent potential malicious activities by informing individuals, companies, firms, institutions, and organizations about current threats through our reports, posts, and analyses. Godfather resurfaced in 2025 as a highly modular Android banking trojan that embeds full virtualization toolkits (VirtualApp, Xposed) […]
GOGLoader Analysis Report
Reports Reports This blog is about ‘GOGLoader Analysis Report’. Download Report Threat Overview As ThreatMon, we strive to prevent potential malicious activities by informing individuals,companies, firms, institutions, and organizations about current threats through our reports,posts, and analyses. Executive Analysis Summary As the ThreatMon Malware R&D Team, we analyzed the advanced malware loader namedGOG, which features […]
Pulsar RAT Technical Malware Analysis Report
Reports Reports This report examines Pulsar RAT Technical Malware Analysis Report. Download Report Executive Summary & Key Findings At ThreatMon, we strive to prevent potential malicious activities by informing individuals, companies, firms, institutions, and organizations about current threats through our reports, posts, and analyses. Pulsar is a modular, open-source .NET-based Remote Administration Tool (RAT) designed […]
NullPoint Stealer Technical Malware Analysis Report
Reports Reports This report examines NullPoint Stealer Technical Malware Analysis Report. Download Report As ThreatMon, we strive to prevent potential malicious activities by informing individuals, companies, firms, institutions, and organizations about current threats through our reports, posts, and analyses. NullPoint Stealer is a modular and stealth-focused .NET-based infostealer designed to operate efficiently on Windows environments. […]
Connectwise Malware Campaign / Technical Malware Analysis Report
Reports Reports This report is Connectwise Malware Campaign / Technical Malware Analysis Report Download Report This report provides a comprehensive analysis of the recent ConnectWise malware campaign, detailing the full attack chain, malware capabilities, and targeted sectors. Leveraging threat intelligence and technical analysis—including process hollowing, IOC categorization, and behavioral patterns—the report offers deep insights into […]