Month: May 2023

Malware Analysis – smokeloader – 3cb28e804cc2dab7c94f96bd7a95d45f

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 3cb28e804cc2dab7c94f96bd7a95d45fSHA1: e5303d9431ba2bbc2d2cb07ab5253a6fb0a1aa89ANALYSIS DATE: 2023-05-01T15:47:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 2679dd3ef68ab6c395840715af1dda17

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 2679dd3ef68ab6c395840715af1dda17SHA1: d59f6b7fad296ecc1a5dc2b848141347d491c532ANALYSIS DATE: 2023-05-01T15:50:07ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 3048d1e5baa400d6e1aee39ce99b098b

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 3048d1e5baa400d6e1aee39ce99b098bSHA1: 1f2c64876cd351e5bc7d6da2db8daf7dae88ea0aANALYSIS DATE: 2023-05-01T15:54:31ZTTPS: T1130, T1112, T1060, T1222, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – smokeloader – 385760657f7547791531585106ad0432

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 385760657f7547791531585106ad0432SHA1: 265d1f0c4ac7e2a0c88d913ccb6e3a4ff30c76f8ANALYSIS DATE: 2023-05-01T15:55:35ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 5af5f4ff15470980027b6b5beb9c49b1

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 5af5f4ff15470980027b6b5beb9c49b1SHA1: a6c066d0646b330042deb929b1aa4e28bffb7f5eANALYSIS DATE: 2023-05-01T15:50:29ZTTPS: T1130, T1112, T1060, T1222, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – af8344a5661e5bca1525164bbcfcc316

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, stealerMD5: af8344a5661e5bca1525164bbcfcc316SHA1: 3907b25dab78167d0aea39e89e39b7df79530835ANALYSIS DATE: 2023-05-01T16:08:22ZTTPS: T1060, T1112, T1222, T1082, T1130,...

Malware Analysis – smokeloader – 8be4ba30ab79c3c53e17033864d175e2

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 8be4ba30ab79c3c53e17033864d175e2SHA1: ce3f27df008bc62b959bc07625114369bb4bb0feANALYSIS DATE: 2023-05-01T16:08:55ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – troldesh – 6f4a3bce5a21f15c57b1fb175048a374

May 1, 2023

Score: 10 MALWARE FAMILY: troldeshTAGS:family:troldesh, discovery, persistence, ransomware, trojan, upxMD5: 6f4a3bce5a21f15c57b1fb175048a374SHA1: 0c6fbba46356f5ed4a11b593fafd6cb89ee95038ANALYSIS DATE: 2023-05-01T16:08:01ZTTPS: T1012, T1060, T1112, T1082 ScoreMeaningExample10Known badA...

Malware Analysis – smokeloader – 66fe0d6e3fd740e3f38fb54b07ad2ddb

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 66fe0d6e3fd740e3f38fb54b07ad2ddbSHA1: 8f438467cb7b9f4c89f698434f07b4b2242377aeANALYSIS DATE: 2023-05-01T16:06:55ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – e210d4b9b543ffbb9e663ed404109625

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:31c7719b5ee962fbde376b75e771360d, discovery, persistence, ransomware, spyware, stealerMD5: e210d4b9b543ffbb9e663ed404109625SHA1: f9c674001e83ba5e0ac5bbdf7b41e3f85dc67b53ANALYSIS DATE: 2023-05-01T16:13:59ZTTPS: T1130, T1112, T1060, T1222,...

Malware Analysis – smokeloader – 18d7ce6bec819881fc82e742aaca770a

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 18d7ce6bec819881fc82e742aaca770aSHA1: 986c0bc60b9470f4b8acd8a8a11e21800f956f17ANALYSIS DATE: 2023-05-01T16:12:44ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 393f6d66fc64392251ad70fbe4472b35

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:31c7719b5ee962fbde376b75e771360d, discovery, persistence, ransomware, stealerMD5: 393f6d66fc64392251ad70fbe4472b35SHA1: dd94436d3b6749cf1dee62a8fc9bad36ac6127b7ANALYSIS DATE: 2023-05-01T16:10:34ZTTPS: T1053, T1130, T1112, T1060, T1222,...

Malware Analysis – djvu – 329cb2da266501b7c09a7b31d35ec024

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:31c7719b5ee962fbde376b75e771360d, discovery, persistence, ransomware, stealerMD5: 329cb2da266501b7c09a7b31d35ec024SHA1: 70f7a247b954a3714fb3f8bba9095247eeee25ebANALYSIS DATE: 2023-05-01T16:14:14ZTTPS: T1130, T1112, T1060, T1222, T1082,...

Malware Analysis – smokeloader – dcee6f7a3dcc70ee3c9eb67af55f24e1

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: dcee6f7a3dcc70ee3c9eb67af55f24e1SHA1: 9b389976a46aee50daf5437021cede7a961ea820ANALYSIS DATE: 2023-05-01T16:17:14ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 46e1b93070ad0e0f816723b7197e80eb

May 1, 2023

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 46e1b93070ad0e0f816723b7197e80ebSHA1: 343519e8113ece30ae895fc898916756e46f9580ANALYSIS DATE: 2023-05-01T16:16:27ZTTPS: T1107, T1490, T1082, T1012, T1120 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 6f376d25fc8b446e9f386e7c4cef2078

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 6f376d25fc8b446e9f386e7c4cef2078SHA1: 5ae8e23e17ef0c547449183dc1132af59d58f0bfANALYSIS DATE: 2023-05-01T16:16:46ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – a7e54293629d6264bb9d563c88b3cf59

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: a7e54293629d6264bb9d563c88b3cf59SHA1: 092f6901438b26a4d635854027257277d1e4c42dANALYSIS DATE: 2023-05-01T16:17:11ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 816fe767af27de98d455306cd7e1f345

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:31c7719b5ee962fbde376b75e771360d, discovery, persistence, ransomware, spyware, stealerMD5: 816fe767af27de98d455306cd7e1f345SHA1: 55be8d88cf16a43168aa8c2c5228119f3b2141d4ANALYSIS DATE: 2023-05-01T16:22:37ZTTPS: T1130, T1112, T1005, T1081,...

Malware Analysis – djvu – 0f8a92ef142701f5c7b3cc280ee5ee54

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:31c7719b5ee962fbde376b75e771360d, discovery, persistence, ransomware, spyware, stealerMD5: 0f8a92ef142701f5c7b3cc280ee5ee54SHA1: d915dcf9c86572e771e3a1da40e08dfbab4ea237ANALYSIS DATE: 2023-05-01T16:21:00ZTTPS: T1130, T1112, T1082, T1060,...

Malware Analysis – smokeloader – ad10926cb1ff6dffa5bb17e627b494e7

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: ad10926cb1ff6dffa5bb17e627b494e7SHA1: 8285f03213beae36dbf678232b4f09a330d384c3ANALYSIS DATE: 2023-05-01T16:21:57ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 7af47d2bd6075227e4c96cfd3e2f773e

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, spyware, stealerMD5: 7af47d2bd6075227e4c96cfd3e2f773eSHA1: 16426e4baf92b88ff1d36f0fb9295419c24e7c99ANALYSIS DATE: 2023-05-01T16:23:18ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – smokeloader – 0e5768e5106ad5956530ada9cbd08647

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 0e5768e5106ad5956530ada9cbd08647SHA1: 6d836c86a3dbbfb17ba25b013f6f395a37f271ffANALYSIS DATE: 2023-05-01T16:30:15ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 93771fbbc0900f187f831de1435c00ee

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 93771fbbc0900f187f831de1435c00eeSHA1: d0d65242f8d53f7b3b7b9c981708c85c1d2f69c4ANALYSIS DATE: 2023-05-01T16:31:50ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 914f0ee6a51aece7b01fcecdc704c1a3

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:31c7719b5ee962fbde376b75e771360d, discovery, persistence, ransomware, stealerMD5: 914f0ee6a51aece7b01fcecdc704c1a3SHA1: bdfe039a62a91be638ec85010efef310e220870cANALYSIS DATE: 2023-05-01T16:25:08ZTTPS: T1130, T1112, T1060, T1222, T1082,...

Month: May 2023

Malware Analysis – smokeloader – 3cb28e804cc2dab7c94f96bd7a95d45f

Malware Analysis – smokeloader – 2679dd3ef68ab6c395840715af1dda17

Malware Analysis – djvu – 3048d1e5baa400d6e1aee39ce99b098b

Malware Analysis – smokeloader – 385760657f7547791531585106ad0432

Malware Analysis – djvu – 5af5f4ff15470980027b6b5beb9c49b1

Malware Analysis – djvu – af8344a5661e5bca1525164bbcfcc316

Malware Analysis – smokeloader – 8be4ba30ab79c3c53e17033864d175e2

Malware Analysis – troldesh – 6f4a3bce5a21f15c57b1fb175048a374

Malware Analysis – smokeloader – 66fe0d6e3fd740e3f38fb54b07ad2ddb

Malware Analysis – djvu – e210d4b9b543ffbb9e663ed404109625

Malware Analysis – smokeloader – 18d7ce6bec819881fc82e742aaca770a

Malware Analysis – djvu – 393f6d66fc64392251ad70fbe4472b35

Malware Analysis – djvu – 329cb2da266501b7c09a7b31d35ec024

Malware Analysis – smokeloader – dcee6f7a3dcc70ee3c9eb67af55f24e1

Malware Analysis – ransomware – 46e1b93070ad0e0f816723b7197e80eb

Malware Analysis – smokeloader – 6f376d25fc8b446e9f386e7c4cef2078

Malware Analysis – smokeloader – a7e54293629d6264bb9d563c88b3cf59

Malware Analysis – djvu – 816fe767af27de98d455306cd7e1f345

Malware Analysis – djvu – 0f8a92ef142701f5c7b3cc280ee5ee54

Malware Analysis – smokeloader – ad10926cb1ff6dffa5bb17e627b494e7

Malware Analysis – djvu – 7af47d2bd6075227e4c96cfd3e2f773e

Malware Analysis – smokeloader – 0e5768e5106ad5956530ada9cbd08647

Malware Analysis – smokeloader – 93771fbbc0900f187f831de1435c00ee

Malware Analysis – djvu – 914f0ee6a51aece7b01fcecdc704c1a3

[LYNX] – Ransomware Victim: Woodport Doors

[FUNKSEC] – Ransomware Victim: barilga[.]gov[.]mn

CVE Alert: CVE-2025-21133

CVE Alert: CVE-2025-21127

CVE Alert: CVE-2025-21134

You may have missed