Skuggaheimar/Threat Intelligence/Eddie Virus
EDDIE VIRUS
EDDIE
MALWARE
DARK AVENGER
Threat IntelligenceMalwareMay 1, 2025•15 min read

Eddie Virus: Threat Intelligence Profile

Classic file infector

Scroll

Eddie Virus (also known as Eddie, Dark Avenger) is a malware active since 1989. Classic file infector. Key characteristics include: file infector, one of first polymorphic viruses, historical significance, Bulgarian origin.

Overview & Background

Classic file infector. First identified in 1989, this threat is attributed to Dark Avenger.

Threat Assessment

Eddie Virus remains an active threat. Organizations should implement detection rules and monitor for indicators associated with this malware.

Technical Analysis

Eddie Virus employs the following capabilities and techniques:

MITRE ATT&CK Mapping

TacticTechniqueUsage
Initial AccessT1566.001 Phishing AttachmentCommon delivery vector
ExecutionT1204.002 Malicious FileUser-triggered execution
PersistenceT1547.001 Registry Run KeysAutostart persistence
Defense EvasionT1027 Obfuscated FilesPayload obfuscation
C2T1071.001 Web ProtocolsHTTP/HTTPS C2

Detection & Defense

Defend Against Eddie Virus

Mjolnir Security provides detection and response capabilities against Eddie Virus and similar threats.

Threat DetectionIncident ResponseThreat HuntingMDR ServicesThreat Intelligence
  • Proactive Threat Hunting Hunt for Eddie Virus indicators and TTPs within your environment.
  • Threat Intelligence Monitor Eddie Virus campaigns and infrastructure changes.
  • 24/7 Incident Response Rapid containment and forensic investigation. Call +1 833 403 5875.
Written by: Mjolnir Security  |  Published: May 1, 2025
Related Reports
Malware

Cobalt Strike: When Red Team Tools Become the Adversary's Arsenal

Read Report →
Malware

RedLine Stealer: The Infostealer That Fueled a Cybercrime Empire

Read Report →