← Back to Pulse Feed
PULSE DETAIL
A new malware strain named DuckLogs is emerging in the wild, according to Cyble Research and Intelligence Labs (CRIL). DuckLogs is a unique combination of Stealer, Keylogger, and Clipper malware bundled into one malicious software package available in cybercrime forums for a relatively low price, making this threat dangerous to a wider set of potential victims.
MITRE ATT&CK & Malware Families
Indicators of Compromise (12 / 23 total)
| TYPE | INDICATOR | DESCRIPTION | CREATED | |
|---|---|---|---|---|
| URL | http://ilovetheducks.ru/host/drops/Gh879pKQj/btvM8o8sv.exe | — | 2022-12-01 | |
| URL | http://ilovetheducks.ru/host/drops/JTQ4iHTm3/wT9lPlvPK.exe | — | 2022-12-01 | |
| URL | http://ilovetheducks.ru/host/drops/e563bgj4y/hrldcrajl.exe | — | 2022-12-01 | |
| URL | http://lovableduck.ru/host/drops/KI2kRAS0x/rrxgKvAJd.exe | — | 2022-12-01 | |
| URL | http://lovableduck.ru/host/drops/eYjqq6Ezx/ee48v958r.exe | — | 2022-12-01 | |
| URL | http://lovableduck.ru/host/drops/k1rf7fmny/lr2xfd9m9.exe | — | 2022-12-01 | |
| URL | http://quackquack.ru/host/drops/Gh879pKQj/btvM8o8sv.exe | — | 2022-12-01 | |
| URL | http://quackquack.ru/host/drops/g6tujhiry/hjt50kzbo.exe | — | 2022-12-01 | |
| URL | http://quackquack.ru/host/drops/jgh1zyoel/fsgrvawrq.exe | — | 2022-12-01 | |
| URL | http://smallduck.ru/host/drops/20NVT6CUe/9GseGAVEy.exe | — | 2022-12-01 | |
| URL | http://smallduck.ru/host/drops/SrM7WQD2E/7s4udn5F1.exe | — | 2022-12-01 | |
| URL | http://smallduck.ru/host/drops/ezQEvGqPI/nZAQiWiHm.exe | — | 2022-12-01 |