Year: 2022

Malware Analysis – djvu – 100881ee6d40225ea7efe89cd109ae60

October 9, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 100881ee6d40225ea7efe89cd109ae60SHA1: 8387433a295320bfd6874048d9a5e4c8965f4909ANALYSIS DATE: 2022-10-09T02:19:34ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – djvu – 2bb7ae53adee28b7e5d300a848dd4fde

October 9, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 2bb7ae53adee28b7e5d300a848dd4fdeSHA1: a0d3075cf5fb82fea22a2c51ea056b689b0f5b32ANALYSIS DATE: 2022-10-09T03:00:42ZTTPS:...

Malware Analysis – evasion – ecc918fd6e040ba4675c3179f05da459

October 9, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: ecc918fd6e040ba4675c3179f05da459SHA1: b372124021c93ffc52e43a7af0883e880d4eb730ANALYSIS DATE: 2022-10-09T04:02:35ZTTPS: T1031, T1562, T1489, T1082, T1107, T1490, T1012, T1120 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – 274a3adc493e3976af2c17b42f28c9e2

October 9, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 274a3adc493e3976af2c17b42f28c9e2SHA1: 4935386d5a008fcc12c4ab1230575dd014a81621ANALYSIS DATE: 2022-10-09T03:41:01ZTTPS: T1082, T1053, T1005, T1081,...

Malware Analysis – djvu – 894309cd05c4f52581845a5287141f9c

October 9, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 894309cd05c4f52581845a5287141f9cSHA1: 9f259feda6315bc3c21f67385fa05a59aa64b819ANALYSIS DATE: 2022-10-09T02:33:05ZTTPS: T1222, T1053, T1005, T1081,...

Malware Analysis – discovery – 04196baa125b73c7230d9eefb642ebb3

October 9, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, ransomwareMD5: 04196baa125b73c7230d9eefb642ebb3SHA1: 6e87156aa1512c23709be66bf0562a2bee96b86eANALYSIS DATE: 2022-10-09T04:03:04ZTTPS: T1046, T1082, T1130, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 8779e126ebbaebb7cc78b4619ec27443

October 9, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 8779e126ebbaebb7cc78b4619ec27443SHA1: e7e8afaa3232d2c64ab3649b05548df125075ce4ANALYSIS DATE: 2022-10-09T04:06:47ZTTPS:...

Malware Analysis – evasion – ecc918fd6e040ba4675c3179f05da459

October 9, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: ecc918fd6e040ba4675c3179f05da459SHA1: b372124021c93ffc52e43a7af0883e880d4eb730ANALYSIS DATE: 2022-10-09T04:03:04ZTTPS: T1082, T1107, T1490, T1012, T1120, T1031, T1562, T1489 ScoreMeaningExample10Known badA...

Malware Analysis – discovery – 04196baa125b73c7230d9eefb642ebb3

October 9, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, ransomwareMD5: 04196baa125b73c7230d9eefb642ebb3SHA1: 6e87156aa1512c23709be66bf0562a2bee96b86eANALYSIS DATE: 2022-10-09T04:02:44ZTTPS: T1046, T1082, T1130, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – d212497f441a3a7d4d8893b3bf314a42

October 9, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: d212497f441a3a7d4d8893b3bf314a42SHA1: aa2829d33d8fa244faf1ee568788674e84fb1019ANALYSIS DATE: 2022-10-09T04:33:56ZTTPS: T1012, T1005, T1081, T1222,...

Malware Analysis – evasion – ede5c49bec4a648e32a4f52f95fea2db

October 9, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: ede5c49bec4a648e32a4f52f95fea2dbSHA1: 641a51392d97a3470021eeb76606fc4035441a6cANALYSIS DATE: 2022-10-09T04:12:20ZTTPS: T1490, T1059, T1107, T1053 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 7975898ff46d2d1da41ed19eff05735e

October 9, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 7975898ff46d2d1da41ed19eff05735eSHA1: 85f0d6f74690f48aa9541ff500273e4baac91573ANALYSIS DATE: 2022-10-09T04:49:56ZTTPS: T1222, T1082, T1005, T1081,...

Malware Analysis – djvu – 49d2c475c84c763b4108b62cd1b7c0bd

October 9, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 49d2c475c84c763b4108b62cd1b7c0bdSHA1: c73f8af0890da2169406f82a65a594bbfc081b5dANALYSIS DATE: 2022-10-09T04:37:54ZTTPS:...

Malware Analysis – djvu – 5fc28945e43189d5d50012c5513cf116

October 9, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 5fc28945e43189d5d50012c5513cf116SHA1: d41fb9e7f1b86bbace14a4397ca2923c6ab09f73ANALYSIS DATE: 2022-10-08T20:24:47ZTTPS: T1060, T1112, T1005, T1081,...

Malware Analysis – djvu – 5a74f152191f4536c1aa72fbc9c2af94

October 9, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 5a74f152191f4536c1aa72fbc9c2af94SHA1: 3f272e9fca62eeef5fe8b7e95a12a0ac9f5af946ANALYSIS DATE: 2022-10-08T20:21:55ZTTPS: T1060, T1112, T1082, T1053,...

Cobalt Stike Beacon Detected – 5[.]44[.]42[.]49:443

October 9, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 31[.]7[.]62[.]194:443

October 9, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 128[.]199[.]225[.]53:80

October 9, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 101[.]43[.]249[.]51:81

October 9, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – d36adfd8ca6256e28f92f559347f0f45

October 9, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: d36adfd8ca6256e28f92f559347f0f45SHA1: 30729283bac983139b98f99c182ae5d6db07e42eANALYSIS DATE: 2022-10-08T20:42:02ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – djvu – 589db297cea020e84850c31f811839d8

October 9, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 589db297cea020e84850c31f811839d8SHA1: eed4e70e2c5eacec8927dc30a4a64d5c0c523939ANALYSIS DATE: 2022-10-08T20:41:13ZTTPS: T1222, T1082, T1005, T1081,...

Malware Analysis – djvu – 3aedc46600040196cd9cf8a41020d81b

October 9, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 3aedc46600040196cd9cf8a41020d81bSHA1: 81e706eaaf6d14eea5a86a4c5613baac4229a720ANALYSIS DATE: 2022-10-08T21:02:17ZTTPS: T1222, T1012, T1082, T1005,...

Malware Analysis – djvu – 70522f6d4d1aac922291b1cde7194392

October 9, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 70522f6d4d1aac922291b1cde7194392SHA1: 434c905aa4ecb59c75bd014c2b312de8c5369c0aANALYSIS DATE: 2022-10-08T21:01:09ZTTPS:...

Malware Analysis – – a36e43c61d51a333f7ea5403a7a657f2

October 9, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: a36e43c61d51a333f7ea5403a7a657f2SHA1: 981fd36739b6bdb27ac098cdc52efe4f903afdcaANALYSIS DATE: 2022-10-08T21:37:33ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Year: 2022

Malware Analysis – djvu – 100881ee6d40225ea7efe89cd109ae60

Malware Analysis – djvu – 2bb7ae53adee28b7e5d300a848dd4fde

Malware Analysis – evasion – ecc918fd6e040ba4675c3179f05da459

Malware Analysis – djvu – 274a3adc493e3976af2c17b42f28c9e2

Malware Analysis – djvu – 894309cd05c4f52581845a5287141f9c

Malware Analysis – discovery – 04196baa125b73c7230d9eefb642ebb3

Malware Analysis – djvu – 8779e126ebbaebb7cc78b4619ec27443

Malware Analysis – evasion – ecc918fd6e040ba4675c3179f05da459

Malware Analysis – discovery – 04196baa125b73c7230d9eefb642ebb3

Malware Analysis – djvu – d212497f441a3a7d4d8893b3bf314a42

Malware Analysis – evasion – ede5c49bec4a648e32a4f52f95fea2db

Malware Analysis – djvu – 7975898ff46d2d1da41ed19eff05735e

Malware Analysis – djvu – 49d2c475c84c763b4108b62cd1b7c0bd

Malware Analysis – djvu – 5fc28945e43189d5d50012c5513cf116

Malware Analysis – djvu – 5a74f152191f4536c1aa72fbc9c2af94

Cobalt Stike Beacon Detected – 5[.]44[.]42[.]49:443

Cobalt Stike Beacon Detected – 31[.]7[.]62[.]194:443

Cobalt Stike Beacon Detected – 128[.]199[.]225[.]53:80

Cobalt Stike Beacon Detected – 101[.]43[.]249[.]51:81

Malware Analysis – djvu – d36adfd8ca6256e28f92f559347f0f45

Malware Analysis – djvu – 589db297cea020e84850c31f811839d8

Malware Analysis – djvu – 3aedc46600040196cd9cf8a41020d81b

Malware Analysis – djvu – 70522f6d4d1aac922291b1cde7194392

Malware Analysis – – a36e43c61d51a333f7ea5403a7a657f2

[DRAGONFORCE] – Ransomware Victim: Land and Lakes

[DRAGONFORCE] – Ransomware Victim: Engineering Design Initiative

[DRAGONFORCE] – Ransomware Victim: Kats, Jamison & Associates

[DRAGONFORCE] – Ransomware Victim: SCP Building Products

[MEDUSA] – Ransomware Victim: Dolmor Salon

You may have missed