Month: October 2022

Malware Analysis – ransomware – 861827504f3428a3b2dd79e875ccb2fe

October 21, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 861827504f3428a3b2dd79e875ccb2feSHA1: d3e9dcc29707163fc97c9628d09d41f33f72d3e6ANALYSIS DATE: 2022-10-21T04:20:42ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – persistence – 858b513459d042478f3b73009b8ee76f

October 21, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 858b513459d042478f3b73009b8ee76fSHA1: 06a95a5c95e69f61170987fa2b36a57cf50e7634ANALYSIS DATE: 2022-10-21T04:20:30ZTTPS: T1005, T1081, T1107, T1490, T1082, T1091, T1060, T1112...

Malware Analysis – djvu – e634525ae8aa58e72a9ec1b61aade37a

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: e634525ae8aa58e72a9ec1b61aade37aSHA1: 1ce5683544128ecec7aa4ba422381e0410b2fa5fANALYSIS DATE: 2022-10-21T04:21:53ZTTPS: T1222, T1012, T1082, T1005,...

Malware Analysis – smokeloader – 0e70c10f110a8d3ebd896c096e509315

October 21, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 0e70c10f110a8d3ebd896c096e509315SHA1: 8cb3b618beca9356c4830fe997203b28502f8592ANALYSIS DATE: 2022-10-21T04:31:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – persistence – f12c0cea46ebbd343a3836add3c33680

October 21, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: f12c0cea46ebbd343a3836add3c33680SHA1: 6b595afc2fbb564cb66f5aa4ad8a5f3c0e2678e4ANALYSIS DATE: 2022-10-21T04:40:31ZTTPS: T1060, T1112, T1005, T1081, T1082, T1107, T1490, T1091...

Malware Analysis – djvu – 1191e1f7f477b578be04ce4ea394fcb8

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 1191e1f7f477b578be04ce4ea394fcb8SHA1: 9e885bed61412db08b9d3294fed4f4b722dccff4ANALYSIS DATE: 2022-10-21T04:36:25ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – persistence – 7beb8c25950ec24d03ab9055a965b7a0

October 21, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 7beb8c25950ec24d03ab9055a965b7a0SHA1: 5d6ab5afd2e4d62ad9d7e3ab776e4a6fee4e639aANALYSIS DATE: 2022-10-20T19:32:53ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – persistence – 96dc40d21d90a99488de941a4f5dce24

October 21, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 96dc40d21d90a99488de941a4f5dce24SHA1: 5c82f6ecc614953656c5e28a3c4f13c745d44f1dANALYSIS DATE: 2022-10-20T19:57:59ZTTPS: T1060, T1112, T1107, T1490, T1130, T1082 ScoreMeaningExample10Known badA malware family...

Malware Analysis – persistence – a0486ef9e2966d0845476a0c54917454

October 21, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: a0486ef9e2966d0845476a0c54917454SHA1: a7b6a0e41b97518b65639a29f69658afc65ca14aANALYSIS DATE: 2022-10-20T19:44:30ZTTPS: T1082, T1112, T1060, T1107, T1490, T1130 ScoreMeaningExample10Known badA malware family...

Malware Analysis – danabot – 79ca50dff1269e7bdbae50fecc614a46

October 21, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:dcrat, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealer,...

Malware Analysis – evasion – 96e6e4cec8150c22c72e18ac4135dfe0

October 21, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: 96e6e4cec8150c22c72e18ac4135dfe0SHA1: 45d3264548858e51645ba9530170d55a2bd9013eANALYSIS DATE: 2022-10-20T19:56:39ZTTPS: T1088, T1089, T1112, T1082, T1005, T1081,...

Malware Analysis – djvu – 9ccf1911ce6ab46b6b099e34ef9b13ac

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 9ccf1911ce6ab46b6b099e34ef9b13acSHA1: c424d290599a3cbcc3c956a7c43e03f3a57dd70fANALYSIS DATE: 2022-10-20T20:18:00ZTTPS: T1012, T1082, T1060, T1112,...

Malware Analysis – chaos – a88a0aa62a9e29cc30948b721e9e8b52

October 21, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, ransomwareMD5: a88a0aa62a9e29cc30948b721e9e8b52SHA1: 45b71da84aca13b69dd9c8cb21b815260c23a215ANALYSIS DATE: 2022-10-20T20:20:09ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – e47df7a2e132f668f0f1bee0493ccb5a

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: e47df7a2e132f668f0f1bee0493ccb5aSHA1: 5439fb94522e47454d5d8de87e46b6fde3d8c4faANALYSIS DATE: 2022-10-20T20:12:14ZTTPS: T1060, T1112, T1222, T1082,...

Malware Analysis – djvu – 1ff0c18ba7cf4a19aa9b6e29a5df534b

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 1ff0c18ba7cf4a19aa9b6e29a5df534bSHA1: 43852568bde8c193c1a2dd792811258768c1e394ANALYSIS DATE: 2022-10-20T20:25:09ZTTPS: T1130, T1112, T1082, T1005,...

Malware Analysis – smokeloader – e9effc43ffecb7f83c350a6b62fec18c

October 21, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: e9effc43ffecb7f83c350a6b62fec18cSHA1: 4b1b63220f72bb4f1ac4553ebca9bfb43c40d632ANALYSIS DATE: 2022-10-20T20:35:45ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – a0f7dc4067d9f4dd460321c488741c3b

October 21, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: a0f7dc4067d9f4dd460321c488741c3bSHA1: fe8d0a533b0f2e79fbd60efe83530a4351f7b001ANALYSIS DATE: 2022-10-20T20:33:47ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – 404daa83559bebcaa19f071e65118bf2

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 404daa83559bebcaa19f071e65118bf2SHA1: 56fb8af0879706ef32d5ee41971b67329abc8092ANALYSIS DATE: 2022-10-20T20:59:55ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – chaos – eb9c6acdedd1e8a8bfd266403bfd520a

October 21, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, persistence, ransomware, spyware, stealerMD5: eb9c6acdedd1e8a8bfd266403bfd520aSHA1: c835f8e3fe7f35b7c61cffe842056bd573ce939bANALYSIS DATE: 2022-10-20T20:37:36ZTTPS: T1490, T1059, T1107, T1005, T1081, T1082,...

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]30:443

October 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – 86c250a21b9480cffb170f2e6cde8444

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 86c250a21b9480cffb170f2e6cde8444SHA1: 7fd2348e27e494122cab4d5786763a6c1a16bd57ANALYSIS DATE: 2022-10-20T21:01:23ZTTPS: T1060, T1112, T1082, T1005,...

Malware Analysis – danabot – f0557a599dbe4fcdc93cfac451726ccc

October 21, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: f0557a599dbe4fcdc93cfac451726cccSHA1: b252de02acae4256e348773e4a7b751834175593ANALYSIS...

Malware Analysis – smokeloader – f4e87073dc5a3cc5be70b52c4bf249f6

October 21, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: f4e87073dc5a3cc5be70b52c4bf249f6SHA1: 7615bf0b7dbf057aaf96a17b81f97fcf035912e7ANALYSIS DATE: 2022-10-20T21:10:48ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – lockbit – 37b5a15357d7104206489317e7396c22

October 21, 2022

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, ransomwareMD5: 37b5a15357d7104206489317e7396c22SHA1: bc7ae22e6bef74a38092184d0254f96167077561ANALYSIS DATE: 2022-10-20T21:18:59ZTTPS: T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Month: October 2022

Malware Analysis – ransomware – 861827504f3428a3b2dd79e875ccb2fe

Malware Analysis – persistence – 858b513459d042478f3b73009b8ee76f

Malware Analysis – djvu – e634525ae8aa58e72a9ec1b61aade37a

Malware Analysis – smokeloader – 0e70c10f110a8d3ebd896c096e509315

Malware Analysis – persistence – f12c0cea46ebbd343a3836add3c33680

Malware Analysis – djvu – 1191e1f7f477b578be04ce4ea394fcb8

Malware Analysis – persistence – 7beb8c25950ec24d03ab9055a965b7a0

Malware Analysis – persistence – 96dc40d21d90a99488de941a4f5dce24

Malware Analysis – persistence – a0486ef9e2966d0845476a0c54917454

Malware Analysis – danabot – 79ca50dff1269e7bdbae50fecc614a46

Malware Analysis – evasion – 96e6e4cec8150c22c72e18ac4135dfe0

Malware Analysis – djvu – 9ccf1911ce6ab46b6b099e34ef9b13ac

Malware Analysis – chaos – a88a0aa62a9e29cc30948b721e9e8b52

Malware Analysis – djvu – e47df7a2e132f668f0f1bee0493ccb5a

Malware Analysis – djvu – 1ff0c18ba7cf4a19aa9b6e29a5df534b

Malware Analysis – smokeloader – e9effc43ffecb7f83c350a6b62fec18c

Malware Analysis – ransomware – a0f7dc4067d9f4dd460321c488741c3b

Malware Analysis – djvu – 404daa83559bebcaa19f071e65118bf2

Malware Analysis – chaos – eb9c6acdedd1e8a8bfd266403bfd520a

Cobalt Stike Beacon Detected – 206[.]119[.]205[.]30:443

Malware Analysis – djvu – 86c250a21b9480cffb170f2e6cde8444

Malware Analysis – danabot – f0557a599dbe4fcdc93cfac451726ccc

Malware Analysis – smokeloader – f4e87073dc5a3cc5be70b52c4bf249f6

Malware Analysis – lockbit – 37b5a15357d7104206489317e7396c22

[DRAGONFORCE] – Ransomware Victim: Ikav Global Energy

[DRAGONFORCE] – Ransomware Victim: Asheville Eye Associates

[FUNKSEC] – Ransomware Victim: deportesapalategui[.]com

CVE Alert: CVE-2024-43705

CVE Alert: CVE-2020-1821

You may have missed