Month: May 2023

Malware Analysis – smokeloader – 90be0312184056af9fe1a4694efe6fbf

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 90be0312184056af9fe1a4694efe6fbfSHA1: c890964a52a2fea2c4a3ad6d00538d7158b73e4aANALYSIS DATE: 2023-05-01T15:09:17ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 100e418e50c70f2115a87ddcf42c5722

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 100e418e50c70f2115a87ddcf42c5722SHA1: d0998c47026ebce6af73a18baed9f0bc4289cb31ANALYSIS DATE: 2023-05-01T15:14:07ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – e53fc99c657d9ba1bd294a34a27e11f0

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, stealerMD5: e53fc99c657d9ba1bd294a34a27e11f0SHA1: 15014bd2d0ec71df5099a1afb53d9434e1aef1c4ANALYSIS DATE: 2023-05-01T15:09:42ZTTPS: T1053, T1222, T1060, T1112, T1082,...

Malware Analysis – djvu – fb791755fa7ef0b7d32524331179e71c

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, stealerMD5: fb791755fa7ef0b7d32524331179e71cSHA1: 8dd0fc69cbe3578048683b81c342a359e68a0176ANALYSIS DATE: 2023-05-01T15:13:09ZTTPS: T1053, T1130, T1112, T1060, T1222,...

Malware Analysis – djvu – ddf27a05d86bdc8e35bca06676534812

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, stealerMD5: ddf27a05d86bdc8e35bca06676534812SHA1: 1248c96cd308074ebb4cc845d83c2b1771cad3f3ANALYSIS DATE: 2023-05-01T15:10:46ZTTPS: T1130, T1112, T1222, T1060, T1082,...

Malware Analysis – smokeloader – 976f479b4be0afc04f48dcfc83ceee86

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 976f479b4be0afc04f48dcfc83ceee86SHA1: 9c064c9108f1d9214f241827a10796ec3d67e349ANALYSIS DATE: 2023-05-01T15:19:11ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 3fdfe8ffc7789f9e355edad1fd5f6db5

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, stealerMD5: 3fdfe8ffc7789f9e355edad1fd5f6db5SHA1: 07bc833cea15b4c32d65ee04cd604f9aa295ef15ANALYSIS DATE: 2023-05-01T15:16:50ZTTPS: T1130, T1112, T1060, T1222, T1082,...

Malware Analysis – djvu – 69f9147440bbffa66f8b55869c22fc31

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, stealerMD5: 69f9147440bbffa66f8b55869c22fc31SHA1: 719696217d09eb75c09c330c0238fc0017cafe71ANALYSIS DATE: 2023-05-01T15:18:39ZTTPS: T1060, T1112, T1222, T1082, T1053,...

Malware Analysis – smokeloader – 102e8427b586b6115adca5c0e454fe64

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 102e8427b586b6115adca5c0e454fe64SHA1: 374f48496cecc5a249e73858dd0e46ba2911b17eANALYSIS DATE: 2023-05-01T15:19:31ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – de4a593a21de256210a1d0bd0588302e

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: de4a593a21de256210a1d0bd0588302eSHA1: 5fce4c5267c1a600368dcefdcf58211bdebd6dacANALYSIS DATE: 2023-05-01T15:21:39ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 105f0b06dc371dcaa47c49a1d9f6792a

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 105f0b06dc371dcaa47c49a1d9f6792aSHA1: cab90e70744e792b89e17ad708d321d306bdaa0aANALYSIS DATE: 2023-05-01T15:22:38ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 5ea3074cc921ec7d7e52c741055eb7be

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, stealerMD5: 5ea3074cc921ec7d7e52c741055eb7beSHA1: 3b564eb3b3676c82786e3fcb759a50cfb5c503e6ANALYSIS DATE: 2023-05-01T15:20:22ZTTPS: T1222, T1060, T1112, T1082, T1130,...

Malware Analysis – smokeloader – dd51000228ae5517c9ffe803f297a886

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: dd51000228ae5517c9ffe803f297a886SHA1: a199f303f0b7cc164a64a8ef4261d4166596e2c9ANALYSIS DATE: 2023-05-01T15:26:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 16d35089d57c03de0258c0897710f2e9

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, stealerMD5: 16d35089d57c03de0258c0897710f2e9SHA1: 4cc712ed1ed4867f6f2d874ab7ad843abac43af6ANALYSIS DATE: 2023-05-01T15:31:00ZTTPS: T1053, T1130, T1112, T1060, T1222,...

Malware Analysis – smokeloader – d09ea65a32c1e2ad430ac9f077c5405a

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: d09ea65a32c1e2ad430ac9f077c5405aSHA1: 6e0e2ae65ba707b3681e02026c8c64bdd671cf7dANALYSIS DATE: 2023-05-01T15:31:13ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – amadey – fb51120a16bb337cc8cb3242d01df83f

May 1, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:1616034f091df9fd0229bc38dd17597f, botnet:5cb879265de0011bfc7588d5d251aee6, botnet:pub1, botnet:sprg, backdoor, discovery, evasion, persistence, ransomware, spyware, stealer, trojanMD5:...

Malware Analysis – djvu – 134f9f18d30fc723f358fccfefbe1cf4

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, spyware, stealerMD5: 134f9f18d30fc723f358fccfefbe1cf4SHA1: ba3e5b0cb37b0044294055b9553eeefacfd0d902ANALYSIS DATE: 2023-05-01T15:32:57ZTTPS: T1012, T1222, T1005, T1081,...

Malware Analysis – wannacry – 780dd7926a05a54889a1df7c717c4b75

May 1, 2023

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 780dd7926a05a54889a1df7c717c4b75SHA1: 486d66e8f23c4c2998d30214531307de998c8b9cANALYSIS DATE: 2023-05-01T15:33:51ZTTPS: T1046, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – c866040dc5bafd88f3b12fa63eaef0b4

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, stealerMD5: c866040dc5bafd88f3b12fa63eaef0b4SHA1: 08e94841f4765adc3891daee728d9de03a3b9375ANALYSIS DATE: 2023-05-01T15:33:19ZTTPS: T1082, T1053, T1130, T1112, T1060,...

Malware Analysis – ransomware – 0fdf742ed3f86d75f58080e1c1b0d5c9

May 1, 2023

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 0fdf742ed3f86d75f58080e1c1b0d5c9SHA1: 9a745882cc9acc2c087d7e0d5a3be66bf9c5a840ANALYSIS DATE: 2023-05-01T15:33:52ZTTPS: T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – wannacry – 5849b1b61e88f7461064b986a204b9c7

May 1, 2023

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 5849b1b61e88f7461064b986a204b9c7SHA1: f9b447d8ea1645afcf7e2bebea2881c88e7c34adANALYSIS DATE: 2023-05-01T15:33:56ZTTPS: T1046, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – wannacry – 35ddab0d213703ddef37431caae4e6e4

May 1, 2023

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, spyware, stealer, wormMD5: 35ddab0d213703ddef37431caae4e6e4SHA1: 47a589d219f7693bdfbf5f2a6cb9464a41047daaANALYSIS DATE: 2023-05-01T15:34:09ZTTPS: T1046, T1012, T1005, T1081 ScoreMeaningExample10Known badA...

Malware Analysis – chaos – db472ec2bee48bc9b193c57866906b79

May 1, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, ransomware, spyware, stealerMD5: db472ec2bee48bc9b193c57866906b79SHA1: 988fc9c4f56ca78d0efc3488b5370dfc8c254b34ANALYSIS DATE: 2023-05-01T15:34:06ZTTPS: T1082, T1005, T1081, T1491, T1112 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 7990f321b538eeffedcaa37c98093783

May 1, 2023

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 7990f321b538eeffedcaa37c98093783SHA1: 2e8a2b5d12a6d282d9c3e13504a9fc8ed8aaf694ANALYSIS DATE: 2023-05-01T15:34:01ZTTPS: T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Month: May 2023

Malware Analysis – smokeloader – 90be0312184056af9fe1a4694efe6fbf

Malware Analysis – smokeloader – 100e418e50c70f2115a87ddcf42c5722

Malware Analysis – djvu – e53fc99c657d9ba1bd294a34a27e11f0

Malware Analysis – djvu – fb791755fa7ef0b7d32524331179e71c

Malware Analysis – djvu – ddf27a05d86bdc8e35bca06676534812

Malware Analysis – smokeloader – 976f479b4be0afc04f48dcfc83ceee86

Malware Analysis – djvu – 3fdfe8ffc7789f9e355edad1fd5f6db5

Malware Analysis – djvu – 69f9147440bbffa66f8b55869c22fc31

Malware Analysis – smokeloader – 102e8427b586b6115adca5c0e454fe64

Malware Analysis – smokeloader – de4a593a21de256210a1d0bd0588302e

Malware Analysis – smokeloader – 105f0b06dc371dcaa47c49a1d9f6792a

Malware Analysis – djvu – 5ea3074cc921ec7d7e52c741055eb7be

Malware Analysis – smokeloader – dd51000228ae5517c9ffe803f297a886

Malware Analysis – djvu – 16d35089d57c03de0258c0897710f2e9

Malware Analysis – smokeloader – d09ea65a32c1e2ad430ac9f077c5405a

Malware Analysis – amadey – fb51120a16bb337cc8cb3242d01df83f

Malware Analysis – djvu – 134f9f18d30fc723f358fccfefbe1cf4

Malware Analysis – wannacry – 780dd7926a05a54889a1df7c717c4b75

Malware Analysis – djvu – c866040dc5bafd88f3b12fa63eaef0b4

Malware Analysis – ransomware – 0fdf742ed3f86d75f58080e1c1b0d5c9

Malware Analysis – wannacry – 5849b1b61e88f7461064b986a204b9c7

Malware Analysis – wannacry – 35ddab0d213703ddef37431caae4e6e4

Malware Analysis – chaos – db472ec2bee48bc9b193c57866906b79

Malware Analysis – ransomware – 7990f321b538eeffedcaa37c98093783

[LYNX] – Ransomware Victim: communisis[.]com & paragon[.]world

Cobalt Strike Beacon Detected – 154[.]64[.]231[.]1:8443

Cobalt Strike Beacon Detected – 47[.]92[.]135[.]251:8443

Cobalt Strike Beacon Detected – 120[.]46[.]151[.]73:80

Cobalt Strike Beacon Detected – 51[.]79[.]214[.]246:443

You may have missed