Malware Analysis

Malware Analysis – evasion – 0d11e3db3bfdf788d51666e3374cba05

January 13, 2023

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 0d11e3db3bfdf788d51666e3374cba05SHA1: a20e2ca578289c6b32d74698f356242e7564dca1ANALYSIS DATE: 2023-01-13T10:23:22ZTTPS: T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – dharma – b178705190001fcb012000eed9ba33d2

January 13, 2023

Score: 10 MALWARE FAMILY: dharmaTAGS:family:dharma, persistence, ransomware, spyware, stealerMD5: b178705190001fcb012000eed9ba33d2SHA1: db6d85f58ad3e6ebb62d92be1dbe7741023a1e7bANALYSIS DATE: 2023-01-13T11:07:24ZTTPS: T1005, T1081, T1060, T1112, T1107, T1490, T1082...

Malware Analysis – dharma – a6de0d47bb017e59aefec6f4b00c2157

January 13, 2023

Score: 10 MALWARE FAMILY: dharmaTAGS:family:dharma, persistence, ransomware, spyware, stealerMD5: a6de0d47bb017e59aefec6f4b00c2157SHA1: a71fe7dc24be53aac39771bcddaa4654fca2a26aANALYSIS DATE: 2023-01-13T10:57:53ZTTPS: T1005, T1081, T1112, T1060, T1107, T1490, T1082...

Malware Analysis – dharma – 9220abc8a4ead7e58bc51c54d1c8343b

January 13, 2023

Score: 10 MALWARE FAMILY: dharmaTAGS:family:dharma, persistence, ransomware, spyware, stealerMD5: 9220abc8a4ead7e58bc51c54d1c8343bSHA1: 9a9c96e8d20137c0fc05e47a51f4b05383c9b08dANALYSIS DATE: 2023-01-13T10:49:17ZTTPS: T1060, T1112, T1107, T1490, T1082, T1005, T1081...

Malware Analysis – dharma – b51dc59f86a48c129a128e04b7444c94

January 13, 2023

Score: 10 MALWARE FAMILY: dharmaTAGS:family:dharma, persistence, ransomware, spyware, stealerMD5: b51dc59f86a48c129a128e04b7444c94SHA1: a243e2ccfad5f60e505e631626cd72fb0e535907ANALYSIS DATE: 2023-01-13T11:02:01ZTTPS: T1060, T1112, T1107, T1490, T1005, T1081, T1082...

Malware Analysis – glupteba – 35dc42a422a763d61cdf19cee9b5f48a

January 13, 2023

Score: 10 MALWARE FAMILY: gluptebaTAGS:family:glupteba, family:redline, botnet:bharat, discovery, dropper, evasion, infostealer, loader, persistence, ransomware, trojan, vmprotectMD5: 35dc42a422a763d61cdf19cee9b5f48aSHA1: b2f51efcd7dc3f8a10d0362890c392757596222aANALYSIS DATE: 2023-01-12T21:04:56ZTTPS:...

Malware Analysis – quasar – 214bb6347cffeb07969a31d0cc01c0c9

January 13, 2023

Score: 10 MALWARE FAMILY: quasarTAGS:family:quasar, evasion, persistence, ransomware, spyware, trojanMD5: 214bb6347cffeb07969a31d0cc01c0c9SHA1: a473b46a2a03a9b36925175ddc2598810a1bf3a5ANALYSIS DATE: 2023-01-12T21:54:40ZTTPS: T1082, T1112, T1060, T1130, T1102, T1107,...

Malware Analysis – sodinokibi – 8a7c7ef298134fbb1dc660e3ce11897e

January 13, 2023

Score: 10 MALWARE FAMILY: sodinokibiTAGS:family:sodinokibi, botnet:5, campaign:367, ransomware, spyware, stealerMD5: 8a7c7ef298134fbb1dc660e3ce11897eSHA1: 759324cde77d121bea646bb5b14a10cb6e90cf70ANALYSIS DATE: 2023-01-12T20:44:42ZTTPS: T1107, T1490, T1491, T1112, T1130, T1012,...

Malware Analysis – amadey – a324ed7b304360cc9ed41e619478b953

January 13, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:socelars, family:vidar, botnet:19, botnet:494, backdoor, discovery, persistence, ransomware, stealer, trojan, vmprotectMD5: a324ed7b304360cc9ed41e619478b953SHA1: 7e9094fb9c32ad70bc9cb9df3202d5b068e1f415ANALYSIS...

Malware Analysis – djvu – 0b9f0bf3d076c5e133d61c2453261034

January 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 0b9f0bf3d076c5e133d61c2453261034SHA1: fc850da7eaf11a0884eccdd2a354e6da8dca7df4ANALYSIS DATE: 2023-01-12T22:26:14ZTTPS: T1005, T1081, T1060, T1112,...

Malware Analysis – djvu – 3e71c7e166194c5ee25021452f4133ea

January 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 3e71c7e166194c5ee25021452f4133eaSHA1: e89e8e017c5de78c0c468e1d6363c1854ffd4ec9ANALYSIS DATE: 2023-01-12T23:34:43ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – evasion – 23d173a46e32cbafcce943108f6ce5f2

January 13, 2023

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 23d173a46e32cbafcce943108f6ce5f2SHA1: 0d764bf3eb47f4b3e597b0f6d6e28e504d018c63ANALYSIS DATE: 2023-01-12T22:36:43ZTTPS: T1490, T1107 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – ransomware – 4031d34c9039c51a0d9e34bab0eafab7

January 13, 2023

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 4031d34c9039c51a0d9e34bab0eafab7SHA1: 58bddccf9dfda1b46361a1503c456cb7e1de0a4eANALYSIS DATE: 2023-01-12T23:37:58ZTTPS: T1005, T1081, T1012, T1082 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – amadey – 57dc07b0383a9d5aafe5ab318acd7eb7

January 13, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:socelars, family:vidar, botnet:19, botnet:494, backdoor, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 57dc07b0383a9d5aafe5ab318acd7eb7SHA1:...

Malware Analysis – evasion – 9ee884d1d2f17ef13b510a032114bb6a

January 13, 2023

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 9ee884d1d2f17ef13b510a032114bb6aSHA1: 26b0bf7ec28ac885326075aa57ef598c16e47dc9ANALYSIS DATE: 2023-01-12T23:40:50ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – globeimposter – c99e32fb49a2671a6136535c6537c4d7

January 13, 2023

Score: 10 MALWARE FAMILY: globeimposterTAGS:family:globeimposter, persistence, ransomware, spyware, stealerMD5: c99e32fb49a2671a6136535c6537c4d7SHA1: ada9bcb3da63e7b989b279fb6c3bc9fe7ff7b41fANALYSIS DATE: 2023-01-12T23:37:11ZTTPS: T1112, T1107, T1490, T1158, T1060, T1082, T1005,...

Malware Analysis – evasion – fefd16276a420a89681e28fffefd0b4a

January 12, 2023

Score: 6 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: fefd16276a420a89681e28fffefd0b4aSHA1: 7cb58f1143acd578a4085d36d1462b0465e64f6aANALYSIS DATE: 2023-01-12T09:12:11ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – smokeloader – 7a806996e4de228c9b3e60b9de5c4640

January 12, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 7a806996e4de228c9b3e60b9de5c4640SHA1: 8ba775b47660510c4ba37b45ef7407cec9f9cb46ANALYSIS DATE: 2023-01-12T09:56:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – 1e288142a45ebe7244ab899798cea643

January 12, 2023

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 1e288142a45ebe7244ab899798cea643SHA1: 078295d1cda8319ed69f64b5443e4d89705d8523ANALYSIS DATE: 2023-01-12T09:04:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – e2f5aa85d03fb41ad591e198090eb8e8

January 12, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: e2f5aa85d03fb41ad591e198090eb8e8SHA1: 58834f285e6e8d58444cb6b766216508757c3e0aANALYSIS DATE: 2023-01-12T09:41:51ZTTPS: T1060, T1112, T1082, T1005,...

Malware Analysis – discovery – f69d9c918a8ad06c71d7f0f26ccfee12

January 12, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: f69d9c918a8ad06c71d7f0f26ccfee12SHA1: b3a7db5d394149862db9ae23682a745b1cdea128ANALYSIS DATE: 2023-01-12T10:19:25ZTTPS: T1012, T1120, T1082, T1060, T1112 ScoreMeaningExample10Known badA malware family...

Malware Analysis – darkcomet – 19c677bb8cda5703f42c143bb4251e6a

January 12, 2023

Score: 10 MALWARE FAMILY: darkcometTAGS:family:darkcomet, family:njrat, family:xmrig, discovery, evasion, miner, persistence, ransomware, rat, spyware, stealer, trojan, upxMD5: 19c677bb8cda5703f42c143bb4251e6aSHA1: ad85336a7304a4e58b2a4f5c40b02f578aa00923ANALYSIS DATE:...

Malware Analysis – ransomware – e87af2137d80d0bc082fe0f103f47166

January 12, 2023

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: e87af2137d80d0bc082fe0f103f47166SHA1: 101f67e9078e4774bb38da6775f08a3cafd20843ANALYSIS DATE: 2023-01-12T10:09:47ZTTPS: T1012, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – aurora – 997678fdecbe60806da2112650e431ec

January 12, 2023

Score: 10 MALWARE FAMILY: auroraTAGS:family:aurora, family:dcrat, family:djvu, family:purecrypter, family:smokeloader, family:vidar, botnet:19, backdoor, collection, discovery, infostealer, loader, persistence, ransomware, rat, spyware,...

Malware Analysis

Malware Analysis – evasion – 0d11e3db3bfdf788d51666e3374cba05

Malware Analysis – dharma – b178705190001fcb012000eed9ba33d2

Malware Analysis – dharma – a6de0d47bb017e59aefec6f4b00c2157

Malware Analysis – dharma – 9220abc8a4ead7e58bc51c54d1c8343b

Malware Analysis – dharma – b51dc59f86a48c129a128e04b7444c94

Malware Analysis – glupteba – 35dc42a422a763d61cdf19cee9b5f48a

Malware Analysis – quasar – 214bb6347cffeb07969a31d0cc01c0c9

Malware Analysis – sodinokibi – 8a7c7ef298134fbb1dc660e3ce11897e

Malware Analysis – amadey – a324ed7b304360cc9ed41e619478b953

Malware Analysis – djvu – 0b9f0bf3d076c5e133d61c2453261034

Malware Analysis – djvu – 3e71c7e166194c5ee25021452f4133ea

Malware Analysis – evasion – 23d173a46e32cbafcce943108f6ce5f2

Malware Analysis – ransomware – 4031d34c9039c51a0d9e34bab0eafab7

Malware Analysis – amadey – 57dc07b0383a9d5aafe5ab318acd7eb7

Malware Analysis – evasion – 9ee884d1d2f17ef13b510a032114bb6a

Malware Analysis – globeimposter – c99e32fb49a2671a6136535c6537c4d7

Malware Analysis – evasion – fefd16276a420a89681e28fffefd0b4a

Malware Analysis – smokeloader – 7a806996e4de228c9b3e60b9de5c4640

Malware Analysis – evasion – 1e288142a45ebe7244ab899798cea643

Malware Analysis – djvu – e2f5aa85d03fb41ad591e198090eb8e8

Malware Analysis – discovery – f69d9c918a8ad06c71d7f0f26ccfee12

Malware Analysis – darkcomet – 19c677bb8cda5703f42c143bb4251e6a

Malware Analysis – ransomware – e87af2137d80d0bc082fe0f103f47166

Malware Analysis – aurora – 997678fdecbe60806da2112650e431ec

Cobalt Strike Beacon Detected – 82[.]156[.]0[.]140:443

Cobalt Strike Beacon Detected – 8[.]135[.]237[.]16:2222

Cobalt Strike Beacon Detected – 87[.]120[.]115[.]8:7777

Cobalt Strike Beacon Detected – 3[.]76[.]191[.]166:80

CVE Alert: CVE-2024-42172

You may have missed