{
	"id": "27ccbd6f-4e24-475d-87ac-8c84025bd017",
	"created_at": "2026-04-06T00:19:31.653095Z",
	"updated_at": "2026-04-10T03:27:18.689701Z",
	"deleted_at": null,
	"sha1_hash": "d284a4e501d23013c7d12fbde0346b89086a9269",
	"title": "Ploutus ATM (Malware Family)",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 46742,
	"plain_text": "Ploutus ATM (Malware Family)\r\nBy Fraunhofer FKIE\r\nArchived: 2026-04-05 17:12:07 UTC\r\nwin.ploutus_atm (Back to overview)\r\nPloutus ATM\r\nThere is no description at this point.\r\nReferences\r\n2021-11-10 ⋅ CrowdStrike ⋅ Antonio Parata\r\nPloutus ATM Malware Case Study: Automated Deobfuscation of a Strongly Obfuscated .NET Binary\r\nPloutus ATM\r\n2021-03-02 ⋅ Metabase Q ⋅ Jesus Dominguez, Ocelot Offensive Security Team\r\nPloutus is back, targeting Itautec ATMs in Latin America\r\nPloutus ATM\r\n2021-02-22 ⋅ AdvIntel ⋅ Beatriz Pimenta Klein\r\nEconomic Growth, Digital Inclusion, \u0026 Specialized Crime: Financial Cyber Fraud in LATAM\r\nBRATA Mekotio Metamorfo Ploutus ATM VictoryGate\r\n2019-05-30 ⋅ Talos Intelligence ⋅ Vanja Svajcer\r\n10 years of virtual dynamite: A high-level retrospective of ATM malware\r\nFastCash Project Alice Cutlet Ploutus ATM Skimer Tyupkin\r\n2018-03-30 ⋅ Trend Micro ⋅ David Sancho, Massimiliano Michenz, Numaan Huq\r\nCashing in on ATM Malware: A Comprehensive Look at Various Attack Types\r\nProject Alice ATMitch Ploutus ATM Ripper ATM Skimer SUCEFUL Tyupkin\r\n2018-02-26 ⋅ Secure coding and more blog ⋅ Antonio Parata\r\nAnalyzing the nasty .NET protection of the Ploutus.D malware\r\nPloutus ATM\r\n2017-01-12 ⋅ FireEye ⋅ Daniel Regalado\r\nNew Variant of Ploutus ATM Malware Observed in the Wild in Latin America\r\nPloutus ATM\r\nThere is no Yara-Signature yet.\r\nhttps://malpedia.caad.fkie.fraunhofer.de/details/win.ploutus_atm\r\nPage 1 of 2\n\nSource: https://malpedia.caad.fkie.fraunhofer.de/details/win.ploutus_atm\r\nhttps://malpedia.caad.fkie.fraunhofer.de/details/win.ploutus_atm\r\nPage 2 of 2",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"ETDA"
	],
	"references": [
		"https://malpedia.caad.fkie.fraunhofer.de/details/win.ploutus_atm"
	],
	"report_names": [
		"win.ploutus_atm"
	],
	"threat_actors": [
		{
			"id": "679e335a-38a4-4db9-8fdf-a48c17a1f5e6",
			"created_at": "2023-01-06T13:46:38.820429Z",
			"updated_at": "2026-04-10T02:00:03.112131Z",
			"deleted_at": null,
			"main_name": "FASTCash",
			"aliases": [],
			"source_name": "MISPGALAXY:FASTCash",
			"tools": [],
			"source_id": "MISPGALAXY",
			"reports": null
		}
	],
	"ts_created_at": 1775434771,
	"ts_updated_at": 1775791638,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/d284a4e501d23013c7d12fbde0346b89086a9269.pdf",
		"text": "https://archive.orkl.eu/d284a4e501d23013c7d12fbde0346b89086a9269.txt",
		"img": "https://archive.orkl.eu/d284a4e501d23013c7d12fbde0346b89086a9269.jpg"
	}
}