Date: 08/26/2026
Severity: High
Summary
Researchers analyzed 405 AI-enabled malware samples and found that only a small fraction showed evidence of activity in production environments, with most being PoCs, security testing samples, or AI-themed malware. The research covered threats including FunkSec ransomware, Oyster backdoor, Rhadamanthys Stealer, and trojanized AI applications, highlighting LLM-assisted malware development and social engineering. The findings show that existing behavioral detection, sandboxing, entropy analysis, and code-signing anomaly detection remain effective against AI-enabled malware.
Indicators of Compromise (IOC) List
Hash | 1619bcad3785be31ac2fdee0ab91392d08d9392032246e42673c3cb8964d4cb7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|
Gurucul Threat Detection and Incident Response (TDIR) Queries for Detection
Detection Query 1 : | sha256hash IN ("bb932056cae8940742e50b4f2b994a802e703f7bc235e7dd647d085ae2b2baf7","e622f3b743c7fc0a011b07a2e656aa2b5e50a4876721bcf1f405d582ca4cda22","b1ef7b267d887e34bf0242a94b38e7dc9fd5e6f8b2c5c440ce4ec98cc74642fb","dd15ce869aa79884753e3baad19b0437075202be86268b84f3ec2303e1ecd966","66dbf939c00b09d8d22c692864b68c4a602e7a59c4b925b2e2bef57b1ad047bd","1619bcad3785be31ac2fdee0ab91392d08d9392032246e42673c3cb8964d4cb7","c398b3e06ef860670b9597daed85632834fa961aea87164b8ba8bb2f094a14ef","4fb58687a364c3f6d6f7e0ca03654f9dec0f8832a499d61d40b0d424db1b1b14","c233aec7917cf34294c19dd60ff79a6e0fac5ed6f0cb57af98013c08201a7a1c","20ed21bfdb7aa970b12e7368eba8e26a711752f1cc5416b6fd6629d0e2a44e5d","5226ea8e0f516565ba825a1bbed10020982c16414750237068b602c5b4ac6abd","dcf536edd67a98868759f4e72bcbd1f4404c70048a2a3257e77d8af06cb036ac")
|
Reference:
https://unit42.paloaltonetworks.com/ai-enabled-malware-analysis/