Month: May 2023

Malware Analysis – djvu – 7dc6e15c9b692a35778bcbccb7ca5cd1

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, stealerMD5: 7dc6e15c9b692a35778bcbccb7ca5cd1SHA1: 2e29e05327d8d4a487afbe6545896aca7d8108cfANALYSIS DATE: 2023-05-01T16:26:10ZTTPS: T1222, T1082, T1130, T1112, T1053, T1060...

Malware Analysis – smokeloader – fd5168a3d3adb20b0eedfd5f43ee3626

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: fd5168a3d3adb20b0eedfd5f43ee3626SHA1: d0afe4c21b84f95df3ab25b832d8066c4f4974cbANALYSIS DATE: 2023-05-01T16:35:10ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – d286a50faa5f8d8bf0febacaa5df6289

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: d286a50faa5f8d8bf0febacaa5df6289SHA1: 9a0fd51d5960954439d7530f184c6addb4ad82f5ANALYSIS DATE: 2023-05-01T16:34:15ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 70a45c99bd8172db1e99c8fc1764b53b

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 70a45c99bd8172db1e99c8fc1764b53bSHA1: 448488bbcf4377e0a6460a93a0331a32a2a0eec1ANALYSIS DATE: 2023-05-01T16:34:16ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 4b4ee708db007a115d3612f82c9f8b45

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:31c7719b5ee962fbde376b75e771360d, discovery, persistence, ransomware, stealerMD5: 4b4ee708db007a115d3612f82c9f8b45SHA1: d5d4b3480f74045204986b7ba20253eabf62ed19ANALYSIS DATE: 2023-05-01T16:37:15ZTTPS: T1222, T1082, T1053, T1130, T1112,...

Malware Analysis – djvu – 16223c0fc49917710f84e251285855b5

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:31c7719b5ee962fbde376b75e771360d, discovery, persistence, ransomware, stealerMD5: 16223c0fc49917710f84e251285855b5SHA1: 3c32f9bffd3f3f27cb24a1d75fa2b5c9094a8526ANALYSIS DATE: 2023-05-01T16:39:24ZTTPS: T1060, T1112, T1222, T1082, T1130,...

Malware Analysis – djvu – 589475b3eb19a163019f2e8bf3f1f7f1

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:31c7719b5ee962fbde376b75e771360d, discovery, persistence, ransomware, spyware, stealerMD5: 589475b3eb19a163019f2e8bf3f1f7f1SHA1: c5cc3e9cdec969c1f8d1f9fad57f08736216a8ffANALYSIS DATE: 2023-05-01T16:37:36ZTTPS: T1005, T1081, T1060, T1112,...

Malware Analysis – djvu – 78c42210ada127cbd5a502f11203ae0f

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:31c7719b5ee962fbde376b75e771360d, discovery, persistence, ransomware, spyware, stealerMD5: 78c42210ada127cbd5a502f11203ae0fSHA1: af5389caa874ecee1448887a06f0e556eea0404bANALYSIS DATE: 2023-05-01T16:40:56ZTTPS: T1130, T1112, T1222, T1060,...

Malware Analysis – smokeloader – 405699bcfa799a906616ed0c0fa3e607

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 405699bcfa799a906616ed0c0fa3e607SHA1: bc6fdc3c7dde359e3d4debc205244abb6c094149ANALYSIS DATE: 2023-05-01T16:37:17ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 2371db41ba66dd8a6ad9410edb59c558

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 2371db41ba66dd8a6ad9410edb59c558SHA1: 1ecc6699cf5fc000c243e7cc928447edb6534374ANALYSIS DATE: 2023-05-01T16:45:12ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 544ca3fb991856aada9cc5d7b83cfdba

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 544ca3fb991856aada9cc5d7b83cfdbaSHA1: 167168b7d5ddeb2e99fe13ffe9044c299eb3da9aANALYSIS DATE: 2023-05-01T16:46:44ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 12fb84243368d000e3989b7932438314

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, ransomwareMD5: 12fb84243368d000e3989b7932438314SHA1: 6458cb1b8f3760529de74b3ed9570355d2540d83ANALYSIS DATE: 2023-05-01T16:43:45ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – 21e69000c86cb6587d8b717a160cacbf

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:31c7719b5ee962fbde376b75e771360d, discovery, persistence, ransomware, spyware, stealerMD5: 21e69000c86cb6587d8b717a160cacbfSHA1: f8f5f808f7862770ea84fc2cdd57d2e6a3fe86aeANALYSIS DATE: 2023-05-01T16:46:28ZTTPS: T1082, T1053, T1060, T1112,...

Malware Analysis – smokeloader – 47d48d432cffa139836800a6f9f2a831

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 47d48d432cffa139836800a6f9f2a831SHA1: 97ae5229d682afd84ae00b5707ce7e9c32a5bf73ANALYSIS DATE: 2023-05-01T16:47:42ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – c2b7325eee7f24ca9437681955c771cb

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: c2b7325eee7f24ca9437681955c771cbSHA1: 07a462b7358cba34df5dc288be3dfb7a5f25ad7cANALYSIS DATE: 2023-05-01T16:46:54ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – fabb956f14621c3088e1f31642be016a

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: fabb956f14621c3088e1f31642be016aSHA1: d07d919ce2c986b35e89b2652a710afc38d98c8eANALYSIS DATE: 2023-05-01T16:48:12ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 5dd6eaf0ad64284a1c5b2777adee3339

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 5dd6eaf0ad64284a1c5b2777adee3339SHA1: 2eb973333d9e6342d9e68796e2bc88c8efcde750ANALYSIS DATE: 2023-05-01T16:47:02ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 567e821bf25e1fffe2cf2baf499a906e

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:31c7719b5ee962fbde376b75e771360d, discovery, persistence, ransomware, spyware, stealerMD5: 567e821bf25e1fffe2cf2baf499a906eSHA1: 167e3f1a91edea7b9cde6673ba6e59ba420bdf81ANALYSIS DATE: 2023-05-01T16:49:34ZTTPS: T1060, T1112, T1005, T1081,...

Malware Analysis – djvu – f1d07de2ea686b9e275f9e1202a9d70e

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:31c7719b5ee962fbde376b75e771360d, discovery, persistence, ransomware, stealerMD5: f1d07de2ea686b9e275f9e1202a9d70eSHA1: 6f9bee9f26d7068fe175fd50407f0774cb134d46ANALYSIS DATE: 2023-05-01T16:49:53ZTTPS: T1060, T1112, T1222, T1082, T1130,...

Malware Analysis – smokeloader – f627126e4b34348c4decede20abd8a45

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: f627126e4b34348c4decede20abd8a45SHA1: 7f626e6c710ca4f1e6d44dd0b3d6d83763bbda2fANALYSIS DATE: 2023-05-01T16:50:21ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 0093b1c267fabf6fb6746173e37d5618

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 0093b1c267fabf6fb6746173e37d5618SHA1: 0ffecd65935898c1df2848b69dd404fe0a3e4340ANALYSIS DATE: 2023-05-01T16:50:17ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – cb021251a6cf6317a61b976f0a285a89

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: cb021251a6cf6317a61b976f0a285a89SHA1: 4395ccfca60b9655afb1a0f10fd541f32baa6ca3ANALYSIS DATE: 2023-05-01T16:50:35ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 327e918914d2646a044d4909210b5e3b

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:31c7719b5ee962fbde376b75e771360d, discovery, persistence, ransomware, spyware, stealerMD5: 327e918914d2646a044d4909210b5e3bSHA1: 2f06777afd68a161063e722f8ef3c734a89a62adANALYSIS DATE: 2023-05-01T16:50:33ZTTPS: T1012, T1130, T1112, T1222,...

Malware Analysis – smokeloader – 2bb706aa99db28a1c9fc6b095c558465

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 2bb706aa99db28a1c9fc6b095c558465SHA1: 277e71f887cf275fe4acad441c3844cbebc5f145ANALYSIS DATE: 2023-05-01T16:51:57ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Month: May 2023

Malware Analysis – djvu – 7dc6e15c9b692a35778bcbccb7ca5cd1

Malware Analysis – smokeloader – fd5168a3d3adb20b0eedfd5f43ee3626

Malware Analysis – smokeloader – d286a50faa5f8d8bf0febacaa5df6289

Malware Analysis – smokeloader – 70a45c99bd8172db1e99c8fc1764b53b

Malware Analysis – djvu – 4b4ee708db007a115d3612f82c9f8b45

Malware Analysis – djvu – 16223c0fc49917710f84e251285855b5

Malware Analysis – djvu – 589475b3eb19a163019f2e8bf3f1f7f1

Malware Analysis – djvu – 78c42210ada127cbd5a502f11203ae0f

Malware Analysis – smokeloader – 405699bcfa799a906616ed0c0fa3e607

Malware Analysis – smokeloader – 2371db41ba66dd8a6ad9410edb59c558

Malware Analysis – smokeloader – 544ca3fb991856aada9cc5d7b83cfdba

Malware Analysis – djvu – 12fb84243368d000e3989b7932438314

Malware Analysis – djvu – 21e69000c86cb6587d8b717a160cacbf

Malware Analysis – smokeloader – 47d48d432cffa139836800a6f9f2a831

Malware Analysis – smokeloader – c2b7325eee7f24ca9437681955c771cb

Malware Analysis – smokeloader – fabb956f14621c3088e1f31642be016a

Malware Analysis – smokeloader – 5dd6eaf0ad64284a1c5b2777adee3339

Malware Analysis – djvu – 567e821bf25e1fffe2cf2baf499a906e

Malware Analysis – djvu – f1d07de2ea686b9e275f9e1202a9d70e

Malware Analysis – smokeloader – f627126e4b34348c4decede20abd8a45

Malware Analysis – smokeloader – 0093b1c267fabf6fb6746173e37d5618

Malware Analysis – smokeloader – cb021251a6cf6317a61b976f0a285a89

Malware Analysis – djvu – 327e918914d2646a044d4909210b5e3b

Malware Analysis – smokeloader – 2bb706aa99db28a1c9fc6b095c558465

[APT73] – Ransomware Victim: betclic[.]com

[LYNX] – Ransomware Victim: Lowe Engineers

HackerOne Bug Bounty Disclosure: netrc-and-redirect-credential-leak-nyymi

[LYNX] – Ransomware Victim: Woodport Doors

[FUNKSEC] – Ransomware Victim: barilga[.]gov[.]mn

You may have missed