Rus-129.7z «SIMPLE — PICK»

: The malware often creates a registry key under HKCU\Software\Microsoft\Windows\CurrentVersion\Run or schedules a task to ensure it survives system reboots.

Based on current threat intelligence and technical indicators, is a malicious compressed archive identified as part of targeted phishing or cyber-espionage campaigns, often associated with geopolitical themes involving Russia and Eastern Europe. Technical Summary File Name : RUS-129.7z Extension : .7z (7-Zip compressed archive) Primary Threat Category : Trojan / Stealer / Downloader RUS-129.7z

: Alert staff to be wary of compressed archives with "RUS" or military-style naming conventions, especially when sent from unverified external addresses. : The malware often creates a registry key

Follow us on: