Month: November 2022

Malware Analysis – – 52d105a973348d2624e2d330009c44f7

November 29, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 52d105a973348d2624e2d330009c44f7SHA1: 80ea9e73b40ce00b6f1931f0895a9d429dd0f9f6ANALYSIS DATE: 2022-11-29T03:08:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – 67c740864bdc51d44f6b24c236ab8bcd

November 29, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 67c740864bdc51d44f6b24c236ab8bcdSHA1: 62a7548974652137d19845411d3fbb58bcba9110ANALYSIS DATE: 2022-11-29T03:32:54ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – 53c5aa27bd6681277b1138951bf23c1f

November 29, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 53c5aa27bd6681277b1138951bf23c1fSHA1: 68280aaf1de6116d6e77279a715f54708617f514ANALYSIS DATE: 2022-11-29T03:10:18ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – 73c491af7776f0090a675f3cf7960212

November 29, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 73c491af7776f0090a675f3cf7960212SHA1: 1253451977624a34ce6d332fa9f210ea1b10ce2fANALYSIS DATE: 2022-11-29T03:37:53ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – 66cbab4829a7f3b2186439fa213a4dcc

November 29, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 66cbab4829a7f3b2186439fa213a4dccSHA1: e09cbde1d253731adedc92c0557c5b35a5f4de41ANALYSIS DATE: 2022-11-29T03:22:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – amadey – 247b10b19af83d3b810c7a20519ec7f8

November 29, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, backdoor, collection, discovery, persistence, ransomware, trojanMD5: 247b10b19af83d3b810c7a20519ec7f8SHA1: 3b164cfd522a8278a84053f99e157d6e45569adeANALYSIS DATE: 2022-11-29T03:43:05ZTTPS: T1012, T1120, T1082,...

Malware Analysis – – 69ce78e89e8021b42bc29b34f0c71766

November 29, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 69ce78e89e8021b42bc29b34f0c71766SHA1: c2c68c22e0f974df3aeec699b049a82ef041f9ffANALYSIS DATE: 2022-11-29T03:38:21ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – 75df8877dd746fc62f9d6221e891c212

November 29, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 75df8877dd746fc62f9d6221e891c212SHA1: c19b1f1fc02f7038d631c2214a18f54d1134b90bANALYSIS DATE: 2022-11-29T03:38:08ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – discovery – 830725fdb9974c80c884bd208c9a9e61

November 29, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 830725fdb9974c80c884bd208c9a9e61SHA1: 155fa61187f36230905d177632f721fffe01e4b8ANALYSIS DATE: 2022-11-29T03:45:21ZTTPS: T1012, T1082, T1120, T1053, T1060, T1112 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 820c4240421c9297bc8812bdfc85a2ee

November 29, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 820c4240421c9297bc8812bdfc85a2eeSHA1: 0cd5e87a2996b1ac01cd6862b2a3b4b6957f47cfANALYSIS DATE: 2022-11-29T05:46:05ZTTPS: T1130, T1112, T1005, T1081,...

Malware Analysis – discovery – 29227bc6bc9eca790c71545d771f6b3b

November 29, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, upxMD5: 29227bc6bc9eca790c71545d771f6b3bSHA1: 8b09349d8867b4a8b3024d26e6af1699cbe90e06ANALYSIS DATE: 2022-11-29T04:27:26ZTTPS: T1082, T1112, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – bb9c115236bc0cfc50b5a587502b5ce2

November 29, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, upxMD5: bb9c115236bc0cfc50b5a587502b5ce2SHA1: 996d297d64f2969db9b91d88348117500ca562efANALYSIS DATE: 2022-11-29T04:35:23ZTTPS: T1158, T1082, T1112, T1222 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – amadey – 6966deee10af19e7297e1adadaf5bfb5

November 29, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 6966deee10af19e7297e1adadaf5bfb5SHA1: e3b8379a73a5e4c7e32e1764e1f9eac176b1e255ANALYSIS DATE:...

Malware Analysis – evasion – bc08121c953549ca4d601b6c879b4ec0

November 29, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: bc08121c953549ca4d601b6c879b4ec0SHA1: cc153c8d9941c4bba48d354a2ad4691d4abb0eecANALYSIS DATE: 2022-11-27T20:39:46ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – evasion – 57422616b631cd1caf2091839ae494aa

November 29, 2022

Score: 6 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 57422616b631cd1caf2091839ae494aaSHA1: dfa69c3569b01bc4b60cd517a47c0ff9b1f1227bANALYSIS DATE: 2022-11-27T20:36:07ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – ransomware – 7a47360471fce05becd8f772b3779550

November 29, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 7a47360471fce05becd8f772b3779550SHA1: 0f828afa2582a4b8e53b4a74b60f6db9ea853c7bANALYSIS DATE: 2022-11-27T21:06:14ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – f2f15fade4e676817fb5a3298e529e62

November 29, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: f2f15fade4e676817fb5a3298e529e62SHA1: dc141ccce74986f994854ac42a5547fc664e104dANALYSIS DATE: 2022-11-27T20:45:32ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – discovery – 8d123d0cc7afcbff09aefe6c4306e998

November 29, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 8d123d0cc7afcbff09aefe6c4306e998SHA1: c06aedc2f10c5a0147c4a848ad07fa3f805140cdANALYSIS DATE: 2022-11-27T20:56:17ZTTPS: T1082, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – evasion – a09349fba92da5118fcd3f2da571a65c

November 29, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: a09349fba92da5118fcd3f2da571a65cSHA1: 54648d39cc48cf00faebd316cb66ba63c4062e7eANALYSIS DATE: 2022-11-27T21:06:57ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – evasion – 4503ad16852aef27af95dace7e6a560c

November 29, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 4503ad16852aef27af95dace7e6a560cSHA1: 260f42e31af242f0ae711554290bd9723bad5f4fANALYSIS DATE: 2022-11-27T21:18:52ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – banker – 6c4e7ca009cc269429492d75f74eb34d

November 29, 2022

Score: 8 MALWARE FAMILY: bankerTAGS:banker, evasion, ransomwareMD5: 6c4e7ca009cc269429492d75f74eb34dSHA1: c8c10e94f1ebf35aec075ca2a008ce14084fd0e7ANALYSIS DATE: 2022-11-27T21:13:50ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – evasion – 84ebbb4a923a2a5ffdb37b1eb6dd9044

November 29, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 84ebbb4a923a2a5ffdb37b1eb6dd9044SHA1: 89814c9817fcf27e48bc98a02ad2840b127bda56ANALYSIS DATE: 2022-11-27T21:11:14ZTTPS: T1082, T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – bd697c46a21884095ba171c1681e1de8

November 29, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: bd697c46a21884095ba171c1681e1de8SHA1: 8da696aae0df27bc142a6159241220199989b897ANALYSIS DATE: 2022-11-27T21:30:22ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – 1cab5b227e1a00838cbd2f77aaab68cd

November 29, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 1cab5b227e1a00838cbd2f77aaab68cdSHA1: c50e1d241e5c3700e8a8c8e41c518ba57793c73cANALYSIS DATE: 2022-11-27T21:30:34ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Month: November 2022

Malware Analysis – – 52d105a973348d2624e2d330009c44f7

Malware Analysis – – 67c740864bdc51d44f6b24c236ab8bcd

Malware Analysis – – 53c5aa27bd6681277b1138951bf23c1f

Malware Analysis – – 73c491af7776f0090a675f3cf7960212

Malware Analysis – – 66cbab4829a7f3b2186439fa213a4dcc

Malware Analysis – amadey – 247b10b19af83d3b810c7a20519ec7f8

Malware Analysis – – 69ce78e89e8021b42bc29b34f0c71766

Malware Analysis – – 75df8877dd746fc62f9d6221e891c212

Malware Analysis – discovery – 830725fdb9974c80c884bd208c9a9e61

Malware Analysis – djvu – 820c4240421c9297bc8812bdfc85a2ee

Malware Analysis – discovery – 29227bc6bc9eca790c71545d771f6b3b

Malware Analysis – discovery – bb9c115236bc0cfc50b5a587502b5ce2

Malware Analysis – amadey – 6966deee10af19e7297e1adadaf5bfb5

Malware Analysis – evasion – bc08121c953549ca4d601b6c879b4ec0

Malware Analysis – evasion – 57422616b631cd1caf2091839ae494aa

Malware Analysis – ransomware – 7a47360471fce05becd8f772b3779550

Malware Analysis – ransomware – f2f15fade4e676817fb5a3298e529e62

Malware Analysis – discovery – 8d123d0cc7afcbff09aefe6c4306e998

Malware Analysis – evasion – a09349fba92da5118fcd3f2da571a65c

Malware Analysis – evasion – 4503ad16852aef27af95dace7e6a560c

Malware Analysis – banker – 6c4e7ca009cc269429492d75f74eb34d

Malware Analysis – evasion – 84ebbb4a923a2a5ffdb37b1eb6dd9044

Malware Analysis – ransomware – bd697c46a21884095ba171c1681e1de8

Malware Analysis – ransomware – 1cab5b227e1a00838cbd2f77aaab68cd

CISA: Foreign Threat Actor Conducting Large-Scale Spearphishing Campaign with RDP Attachments

[RANSOMHUB] – Ransomware Victim: blr[.]com

HackerOne Bug Bounty Disclosure: std-process-command-batch-files-argument-escaping-could-be-bypassed-with-trailing-whitespace-or-periods–xpl-r-r

[LOCKBIT3] – Ransomware Victim: madison-home[.]com

[CHORT] – Ransomware Victim: sheboyganwi[.]gov

You may have missed