Month: October 2022

Malware Analysis – evasion – 7566b7d7a5839725c9c64961a0c8b920

October 21, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 7566b7d7a5839725c9c64961a0c8b920SHA1: 1c580b6f7f3276e68cbccaf4e0857ec490fe6775ANALYSIS DATE: 2022-10-20T06:11:45ZTTPS: T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – persistence – 67539d1128a73ced00a692b4f3bdd401

October 21, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 67539d1128a73ced00a692b4f3bdd401SHA1: d7a945d19f1c6d2c9cd8c27ee81e5f0a76579068ANALYSIS DATE: 2022-10-21T02:00:27ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091, T1060, T1112...

Malware Analysis – smokeloader – d40382764d622393e1a1bb318c43b5e8

October 21, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: d40382764d622393e1a1bb318c43b5e8SHA1: e3b59e16efdb0843e0e195dc67b305201602ee02ANALYSIS DATE: 2022-10-21T02:07:06ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 476635a30e84fa5142f3b0258807cdc1

October 21, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 476635a30e84fa5142f3b0258807cdc1SHA1: 48e256b43da8ae4a2dc4f788d1e8e60ba6a5efc3ANALYSIS DATE: 2022-10-21T02:05:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – d01e1338a1c7a2aa61733ef47a7ac35d

October 21, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: d01e1338a1c7a2aa61733ef47a7ac35dSHA1: 966185c9056e67418f987dbc892d948e908f1802ANALYSIS DATE: 2022-10-21T02:01:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – e3ab48a33e6c51a9585255a0a0170830

October 21, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: e3ab48a33e6c51a9585255a0a0170830SHA1: 278f874f675777f9b22837202eba8ac4164835eaANALYSIS DATE: 2022-10-21T02:13:09ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – f7788b8b55dc237a0e70a76712cd67b8

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: f7788b8b55dc237a0e70a76712cd67b8SHA1: 77b729ddebfdf4c258fca4dedeabdeb0c4b26c32ANALYSIS DATE: 2022-10-21T02:44:32ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – djvu – 6711fe2dd09ebaa38866fd2347707c5c

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, stealerMD5: 6711fe2dd09ebaa38866fd2347707c5cSHA1: eb2788616697987a23aa49421e26c9aacc1742a3ANALYSIS DATE: 2022-10-21T02:38:04ZTTPS: T1222, T1060, T1112, T1082, T1012,...

Malware Analysis – djvu – dd8ebe57e3ae851a6bc1c6b34067ea21

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: dd8ebe57e3ae851a6bc1c6b34067ea21SHA1: 0a48af08cfcbebd2af414e4e0780608ae8885d4cANALYSIS DATE: 2022-10-21T02:48:11ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – smokeloader – c629d6f58117d412173063ef636e6b65

October 21, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: c629d6f58117d412173063ef636e6b65SHA1: 46c77ccde087080cb5ade178f10e813d48dac71bANALYSIS DATE: 2022-10-21T03:06:13ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 5ff5c285649abf718cc88f492b75df44

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 5ff5c285649abf718cc88f492b75df44SHA1: 316d2ce2d6499874f675c82e0fc5b8bd3ac99bd6ANALYSIS DATE: 2022-10-21T03:32:01ZTTPS: T1222, T1053, T1005, T1081,...

Malware Analysis – smokeloader – 45c256105d08937f2a5571b8a7827809

October 21, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 45c256105d08937f2a5571b8a7827809SHA1: 3228405c3507538b2417bf522b0c1e9343fdd58bANALYSIS DATE: 2022-10-21T03:33:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – persistence – d194ae52fbd0d872391c1bd4cdfe9af9

October 21, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: d194ae52fbd0d872391c1bd4cdfe9af9SHA1: c1979f22c4c146922923b682d395212cd8a7a89cANALYSIS DATE: 2022-10-21T03:20:20ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091, T1060, T1112...

Malware Analysis – persistence – 48a90ac8127abfd31c44ffcb0feccb79

October 21, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 48a90ac8127abfd31c44ffcb0feccb79SHA1: 8a1ffd8215b73fc85999f837ff275430f3062186ANALYSIS DATE: 2022-10-21T03:40:18ZTTPS: T1082, T1107, T1490, T1091, T1060, T1112, T1005, T1081...

Malware Analysis – ransomware – ca5e0ee1274f175f5843e669ec94045e

October 21, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: ca5e0ee1274f175f5843e669ec94045eSHA1: 56064940ef17dffdb84f4527e982f9523ff832efANALYSIS DATE: 2022-10-21T04:00:21ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – c6e1feaea88b8be661dcbdcec20c45fd

October 21, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: c6e1feaea88b8be661dcbdcec20c45fdSHA1: 51774d9f7d1b1f94788a7c77ed9bd7770f448e15ANALYSIS DATE: 2022-10-21T04:00:31ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – afd5d656a42a746e95926ef07933f054

October 21, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: afd5d656a42a746e95926ef07933f054SHA1: 04028a0a1d44f81709040c31af026785209d4343ANALYSIS DATE: 2022-10-21T03:49:04ZTTPS: T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – ransomware – bf6baa8d5a5ec6d123f963e6a6ef2482

October 21, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: bf6baa8d5a5ec6d123f963e6a6ef2482SHA1: 1775672403c6038a1150ee6eed9de0700eaac79dANALYSIS DATE: 2022-10-21T04:00:39ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 0a48cb94d087c45731e65aa4a89a7af9

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 0a48cb94d087c45731e65aa4a89a7af9SHA1: b1149cb8aa53b14d538f6af1032a08a3c9beb440ANALYSIS DATE: 2022-10-21T04:11:51ZTTPS: T1060, T1112, T1082, T1053,...

Malware Analysis – persistence – 3b3ae808cd645506b674412b72032761

October 21, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 3b3ae808cd645506b674412b72032761SHA1: b7f7dd5e30d7c97d76fbaec499e9d35ade81d30fANALYSIS DATE: 2022-10-21T04:00:57ZTTPS: T1082, T1107, T1490, T1091, T1060, T1112, T1005, T1081...

Malware Analysis – ransomware – 03041c499ab0882e785c8fac5b239d1d

October 21, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 03041c499ab0882e785c8fac5b239d1dSHA1: ec997327764fd1e7af5f51fb295c078e98f756b6ANALYSIS DATE: 2022-10-21T04:00:50ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – persistence – 24f44660b6d00456516b255b05e58f61

October 21, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 24f44660b6d00456516b255b05e58f61SHA1: 6729ff5069fc229e0ac5c08a3905bd2691816417ANALYSIS DATE: 2022-10-21T04:01:08ZTTPS: T1107, T1490, T1091, T1060, T1112, T1005, T1081, T1082...

Malware Analysis – persistence – c211f09f9b109906231bed988c1c3254

October 21, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: c211f09f9b109906231bed988c1c3254SHA1: 596b55ab0218afa23c86a94e90d54fa44a9ad549ANALYSIS DATE: 2022-10-21T04:20:22ZTTPS: T1091, T1060, T1112, T1005, T1081, T1082, T1107, T1490...

Malware Analysis – persistence – 68ec127444d92b7943db5194c15f376d

October 21, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 68ec127444d92b7943db5194c15f376dSHA1: dcd9f4d707ea4f7e24e75312760cb57404f5f7c1ANALYSIS DATE: 2022-10-21T04:20:39ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091, T1060, T1112...

Month: October 2022

Malware Analysis – evasion – 7566b7d7a5839725c9c64961a0c8b920

Malware Analysis – persistence – 67539d1128a73ced00a692b4f3bdd401

Malware Analysis – smokeloader – d40382764d622393e1a1bb318c43b5e8

Malware Analysis – smokeloader – 476635a30e84fa5142f3b0258807cdc1

Malware Analysis – smokeloader – d01e1338a1c7a2aa61733ef47a7ac35d

Malware Analysis – smokeloader – e3ab48a33e6c51a9585255a0a0170830

Malware Analysis – djvu – f7788b8b55dc237a0e70a76712cd67b8

Malware Analysis – djvu – 6711fe2dd09ebaa38866fd2347707c5c

Malware Analysis – djvu – dd8ebe57e3ae851a6bc1c6b34067ea21

Malware Analysis – smokeloader – c629d6f58117d412173063ef636e6b65

Malware Analysis – djvu – 5ff5c285649abf718cc88f492b75df44

Malware Analysis – smokeloader – 45c256105d08937f2a5571b8a7827809

Malware Analysis – persistence – d194ae52fbd0d872391c1bd4cdfe9af9

Malware Analysis – persistence – 48a90ac8127abfd31c44ffcb0feccb79

Malware Analysis – ransomware – ca5e0ee1274f175f5843e669ec94045e

Malware Analysis – ransomware – c6e1feaea88b8be661dcbdcec20c45fd

Malware Analysis – ransomware – afd5d656a42a746e95926ef07933f054

Malware Analysis – ransomware – bf6baa8d5a5ec6d123f963e6a6ef2482

Malware Analysis – djvu – 0a48cb94d087c45731e65aa4a89a7af9

Malware Analysis – persistence – 3b3ae808cd645506b674412b72032761

Malware Analysis – ransomware – 03041c499ab0882e785c8fac5b239d1d

Malware Analysis – persistence – 24f44660b6d00456516b255b05e58f61

Malware Analysis – persistence – c211f09f9b109906231bed988c1c3254

Malware Analysis – persistence – 68ec127444d92b7943db5194c15f376d

[DRAGONFORCE] – Ransomware Victim: Ikav Global Energy

[DRAGONFORCE] – Ransomware Victim: Asheville Eye Associates

[FUNKSEC] – Ransomware Victim: deportesapalategui[.]com

CVE Alert: CVE-2024-43705

CVE Alert: CVE-2020-1821

You may have missed