Malware Analysis

Malware Analysis – banker – 7dfb7a568fad88e7e92da2ce1ac71483

May 11, 2023

Score: 8 MALWARE FAMILY: bankerTAGS:banker, evasion, ransomwareMD5: 7dfb7a568fad88e7e92da2ce1ac71483SHA1: 993224c563be93bd613cc3d9fca4e08986771803ANALYSIS DATE: 2023-05-11T14:40:57ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – banker – 1678e81602a1666d602895bf7da04af4

May 11, 2023

Score: 8 MALWARE FAMILY: bankerTAGS:banker, evasion, ransomwareMD5: 1678e81602a1666d602895bf7da04af4SHA1: 37751af55695523307e6fa7aa077178596743dc1ANALYSIS DATE: 2023-05-11T14:40:52ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – ransomware – 8d9f3e223f8d5e350b87dc0908fee0a5

May 11, 2023

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 8d9f3e223f8d5e350b87dc0908fee0a5SHA1: 9fe3060e5cbe3a9ab6c3fb3dee40bd6cd385a6f6ANALYSIS DATE: 2023-05-11T15:57:37ZTTPS: T1012, T1120, T1082, T1491, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family...

Malware Analysis – avoslocker – c9f97820c06f85a39359d97489379925

May 11, 2023

Score: 10 MALWARE FAMILY: avoslockerTAGS:family:avoslocker, evasion, ransomwareMD5: c9f97820c06f85a39359d97489379925SHA1: 631206da423a9f5a5b973831e1c7efb84c8e493eANALYSIS DATE: 2023-05-11T15:49:17ZTTPS: T1490, T1491, T1112, T1107, T1012, T1120, T1082 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – 0efce9fcad0fe1f645c8d162f494ca25

May 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:ef32d425b907146eeb9090dbc9455ab1, discovery, persistence, ransomware, spyware, stealerMD5: 0efce9fcad0fe1f645c8d162f494ca25SHA1: a25395e0b993a88d776c3b44a923289f009d1aa7ANALYSIS DATE: 2023-05-11T15:44:55ZTTPS: T1053, T1012, T1082, T1222,...

Malware Analysis – discovery – b49fe89eedd01c5c4998902c6a988e2c

May 11, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, exploit, persistence, trojanMD5: b49fe89eedd01c5c4998902c6a988e2cSHA1: c0310946c0ad9346486a6c0eb33a8c73dfa63c01ANALYSIS DATE: 2023-05-11T15:55:20ZTTPS: T1012, T1082, T1057, T1004, T1112, T1088, T1089,...

Malware Analysis – amadey – 26c4da738b1017fd4364cfb611294427

May 11, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, botnet:pub1, botnet:sprg, backdoor, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 26c4da738b1017fd4364cfb611294427SHA1: 24794b4df7e39b7d181b6283eed85b1c906f4cfbANALYSIS DATE: 2023-05-11T16:34:18ZTTPS:...

Malware Analysis – ransomware – 0c0ebd73cacb79b19dfd95dc3a5019ee

May 11, 2023

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 0c0ebd73cacb79b19dfd95dc3a5019eeSHA1: ce62969554656e30765ee7eb27a51dd79367392aANALYSIS DATE: 2023-05-11T16:39:05ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 416ee1715553dfb39896195e1a2b8e98

May 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, botnet:pub1, botnet:sprg, backdoor, discovery, persistence, ransomware, trojanMD5: 416ee1715553dfb39896195e1a2b8e98SHA1: 77a1276c6f14df39f7180e1fceee567020fbac39ANALYSIS DATE: 2023-05-11T16:08:57ZTTPS: T1012, T1120, T1082,...

Malware Analysis – djvu – d21574363da46f66ea8a0316cce35a51

May 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:ef32d425b907146eeb9090dbc9455ab1, discovery, persistence, ransomware, spyware, stealerMD5: d21574363da46f66ea8a0316cce35a51SHA1: e95c85709d0469d512cc994d6615056dbe4eaa6dANALYSIS DATE: 2023-05-11T16:18:28ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – persistence – cd51e8717f5f983e60aaebd0346072e5

May 10, 2023

Score: 7 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: cd51e8717f5f983e60aaebd0346072e5SHA1: 3c12360fcb75d96e3ab9e56b37d3345921f63be6ANALYSIS DATE: 2023-05-10T15:33:26ZTTPS: T1491, T1112, T1060, T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family...

Malware Analysis – amadey – a01994ddeb320bdc37b7616d508d437d

May 10, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:ef32d425b907146eeb9090dbc9455ab1, botnet:pub1, botnet:sprg, backdoor, discovery, evasion, ransomware, stealer, trojanMD5: a01994ddeb320bdc37b7616d508d437dSHA1: 9b41ae28bac9a6ef7329aafad1017c2d476d6822ANALYSIS DATE:...

Malware Analysis – neshta – 80d2cfccef17caa46226147c1b0648e6

May 10, 2023

Score: 10 MALWARE FAMILY: neshtaTAGS:family:neshta, family:wannacry, discovery, persistence, ransomware, spyware, stealer, wormMD5: 80d2cfccef17caa46226147c1b0648e6SHA1: 4540c60c99594ebd49e0ede7d2070b00f5fb021bANALYSIS DATE: 2023-05-10T16:59:31ZTTPS: T1107, T1490, T1222, T1112,...

Malware Analysis – amadey – f20c04dd9a5a3fb76d8686910deaedda

May 10, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:ef32d425b907146eeb9090dbc9455ab1, botnet:pub1, botnet:sprg, backdoor, discovery, ransomware, stealer, trojanMD5: f20c04dd9a5a3fb76d8686910deaeddaSHA1: 11ca428d2502cbaead96a6ce028ea8cb66ee454eANALYSIS DATE: 2023-05-10T17:04:28ZTTPS:...

Malware Analysis – evasion – e2c4c4dd8c6a357eca164955a8fe040c

May 10, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: e2c4c4dd8c6a357eca164955a8fe040cSHA1: f4114815bce62efbc78c79f9a83ccf74a4ea075cANALYSIS DATE: 2023-05-10T16:56:48ZTTPS: T1088, T1089, T1112, T1491, T1012, T1082, T1060 ScoreMeaningExample10Known...

Malware Analysis – djvu – b8f9b92fa79c97f3461c5a4dc0286a1e

May 10, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:ef32d425b907146eeb9090dbc9455ab1, discovery, persistence, ransomware, spyware, stealerMD5: b8f9b92fa79c97f3461c5a4dc0286a1eSHA1: 0842f2af0d958b043ad2a63396b80e4fe6303732ANALYSIS DATE: 2023-05-10T15:35:38ZTTPS: T1005, T1081, T1060, T1112,...

Malware Analysis – djvu – 5805707bb7e896ee387f8fc1807cdd6e

May 10, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:ef32d425b907146eeb9090dbc9455ab1, discovery, persistence, ransomware, spyware, stealerMD5: 5805707bb7e896ee387f8fc1807cdd6eSHA1: 1c4b1a51b50fb077f1e044de77d324a900b8805eANALYSIS DATE: 2023-05-10T17:41:30ZTTPS: T1012, T1082, T1222, T1005,...

Malware Analysis – bootkit – b49fe89eedd01c5c4998902c6a988e2c

May 10, 2023

Score: 8 MALWARE FAMILY: bootkitTAGS:bootkit, discovery, exploit, persistenceMD5: b49fe89eedd01c5c4998902c6a988e2cSHA1: c0310946c0ad9346486a6c0eb33a8c73dfa63c01ANALYSIS DATE: 2023-05-10T17:33:44ZTTPS: T1012, T1082, T1067, T1222, T1102 ScoreMeaningExample10Known badA malware...

Malware Analysis – discovery – 8543002b027116786aaa52089b558cc0

May 10, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, exploit, persistence, ransomware, trojanMD5: 8543002b027116786aaa52089b558cc0SHA1: 541a0fd4a8d6821e193e57e304e7dc87fa6daadaANALYSIS DATE: 2023-05-10T17:35:04ZTTPS: T1088, T1089, T1112, T1012, T1082, T1120,...

Malware Analysis – discovery – cf2a00cda850b570f0aa6266b9a5463e

May 10, 2023

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, evasion, persistence, ransomwareMD5: cf2a00cda850b570f0aa6266b9a5463eSHA1: ab9eb170448c95eccb65bf0665ac9739021200b6ANALYSIS DATE: 2023-05-10T17:16:14ZTTPS: T1012, T1082, T1120, T1060, T1112, T1102, T1491 ScoreMeaningExample10Known...

Malware Analysis – smokeloader – 6fb66bb5fb50e8eaa954ef4c2e7d35fe

May 9, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 6fb66bb5fb50e8eaa954ef4c2e7d35feSHA1: 725926939e8a895a37c0d2dad7637e115031816fANALYSIS DATE: 2023-05-09T15:50:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – f37ee31206675324ab26cebda09ce213

May 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: f37ee31206675324ab26cebda09ce213SHA1: be85524d255bd79ec89f94e8d5680a95ae609ea4ANALYSIS DATE: 2023-05-09T15:23:14ZTTPS: T1053, T1060, T1112, T1222, T1082, T1012 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – 712a61ae2ddf17f0e35543284b38ecb5

May 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 712a61ae2ddf17f0e35543284b38ecb5SHA1: ec7f3c7187b940993ee0ee3a5e6ecdb5c2f46248ANALYSIS DATE: 2023-05-09T15:10:10ZTTPS: T1053, T1060, T1112, T1222, T1082, T1012 ScoreMeaningExample10Known badA...

Malware Analysis – – b75fe8539b7dc28190a501e879a05a9d

May 9, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: b75fe8539b7dc28190a501e879a05a9dSHA1: a2f1d03ac8c2c3c33c0f77e8882572cac188b762ANALYSIS DATE: 2023-05-09T17:34:11ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis

Malware Analysis – banker – 7dfb7a568fad88e7e92da2ce1ac71483

Malware Analysis – banker – 1678e81602a1666d602895bf7da04af4

Malware Analysis – ransomware – 8d9f3e223f8d5e350b87dc0908fee0a5

Malware Analysis – avoslocker – c9f97820c06f85a39359d97489379925

Malware Analysis – djvu – 0efce9fcad0fe1f645c8d162f494ca25

Malware Analysis – discovery – b49fe89eedd01c5c4998902c6a988e2c

Malware Analysis – amadey – 26c4da738b1017fd4364cfb611294427

Malware Analysis – ransomware – 0c0ebd73cacb79b19dfd95dc3a5019ee

Malware Analysis – djvu – 416ee1715553dfb39896195e1a2b8e98

Malware Analysis – djvu – d21574363da46f66ea8a0316cce35a51

Malware Analysis – persistence – cd51e8717f5f983e60aaebd0346072e5

Malware Analysis – amadey – a01994ddeb320bdc37b7616d508d437d

Malware Analysis – neshta – 80d2cfccef17caa46226147c1b0648e6

Malware Analysis – amadey – f20c04dd9a5a3fb76d8686910deaedda

Malware Analysis – evasion – e2c4c4dd8c6a357eca164955a8fe040c

Malware Analysis – djvu – b8f9b92fa79c97f3461c5a4dc0286a1e

Malware Analysis – djvu – 5805707bb7e896ee387f8fc1807cdd6e

Malware Analysis – bootkit – b49fe89eedd01c5c4998902c6a988e2c

Malware Analysis – discovery – 8543002b027116786aaa52089b558cc0

Malware Analysis – discovery – cf2a00cda850b570f0aa6266b9a5463e

Malware Analysis – smokeloader – 6fb66bb5fb50e8eaa954ef4c2e7d35fe

Malware Analysis – djvu – f37ee31206675324ab26cebda09ce213

Malware Analysis – djvu – 712a61ae2ddf17f0e35543284b38ecb5

Malware Analysis – – b75fe8539b7dc28190a501e879a05a9d

Cobalt Strike Beacon Detected – 117[.]50[.]163[.]22:8080

Cobalt Strike Beacon Detected – 93[.]179[.]101[.]17:80

Cobalt Strike Beacon Detected – 123[.]57[.]230[.]183:443

Cobalt Strike Beacon Detected – 101[.]133[.]224[.]88:443

Cobalt Strike Beacon Detected – 47[.]109[.]58[.]47:80

You may have missed