logo

Ares - Technical Analysis

ID: 78bbd059-3b45-5789-b63a-f1a82f41c839

STIX ID: report--78bbd059-3b45-5789-b63a-f1a82f41c839

Feed Name: Zscaler Security Research Blog

Threat Score
75/100

Date Published: 2025-04-02

Date Updated: 2026-05-01

...
...

This technical analysis describes Kronos banking malware and its Osiris and Ares forks, covering new packers (DarkCrypter, BMPack), Ares Stealer functionality (credential, file and crypto-wallet theft), persistence, web-inject campaigns targeting German financial institutions, multiple C2 endpoints, and provides YARA/Snort rules and extensive IOCs for detection and response.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.