Malware Analysis

Malware Analysis – djvu – 8c5063d3ef8df921393f4fc163cc5e87

January 12, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 8c5063d3ef8df921393f4fc163cc5e87SHA1: ff5fb168cf01f2734c612ddcc354223780b5a6b6ANALYSIS DATE: 2023-01-12T11:09:11ZTTPS: T1005, T1081, T1060, T1112,...

Malware Analysis – smokeloader – b4be08f67e4b5fed600bf5558b119168

January 12, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: b4be08f67e4b5fed600bf5558b119168SHA1: 1085a0382315e70dcf742419ed281516d5c9bfd5ANALYSIS DATE: 2023-01-12T10:51:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – b4346008df789fb0b428f3088c3290f5

January 12, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: b4346008df789fb0b428f3088c3290f5SHA1: 186b35c2d08c9250b3a0124dcd43c178a44cc3a5ANALYSIS DATE: 2023-01-12T11:11:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – revengerat – ddfdcc11a3e4a5dd265442a5bcea9fcf

January 12, 2023

Score: 10 MALWARE FAMILY: revengeratTAGS:family:revengerat, family:xmrig, discovery, evasion, miner, persistence, ransomware, spyware, stealer, trojanMD5: ddfdcc11a3e4a5dd265442a5bcea9fcfSHA1: a98cf41fb793d5c23bef6baac5c5848233c6ff41ANALYSIS DATE: 2023-01-12T11:05:34ZTTPS: T1031, T1064,...

Malware Analysis – ransomware – 1f70c57bb5dc1b1a543d1cc25f670116

January 12, 2023

Score: 5 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 1f70c57bb5dc1b1a543d1cc25f670116SHA1: ec2abab65434280be81e47a72913406702b3477cANALYSIS DATE: 2023-01-12T03:54:18ZTTPS: T1012, T1082, T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – wannacry – 87234dff69f6c8edfaf828a5d491c886

January 12, 2023

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, persistence, ransomware, spyware, stealer, wormMD5: 87234dff69f6c8edfaf828a5d491c886SHA1: 69902f3c575191db8114aa34f99b27ceae3a9f72ANALYSIS DATE: 2023-01-12T03:28:31ZTTPS: T1158, T1082, T1060, T1112, T1222,...

Malware Analysis – discovery – 1562d7504b9669b96cbeeba59b3fb6b4

January 12, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, persistence, ransomwareMD5: 1562d7504b9669b96cbeeba59b3fb6b4SHA1: 2ad24300cbd690f939cf62d949734f24daf1a8d3ANALYSIS DATE: 2023-01-12T03:00:34ZTTPS: T1012, T1120, T1082, T1060, T1112, T1497, T1042 ScoreMeaningExample10Known...

Malware Analysis – amadey – 24450d22a44831b8d4e20e3eb99d9fb9

January 12, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:aurora, family:dcrat, family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, infostealer, persistence, ransomware, rat, spyware, stealer, trojanMD5:...

Malware Analysis – djvu – 7f89e30634f529406e25c94728138ac2

January 12, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 7f89e30634f529406e25c94728138ac2SHA1: 107e604b48c37e9c01768ed0a79b6204a12d496fANALYSIS DATE: 2023-01-12T04:00:36ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – djvu – 947fe80a2c26a998c18cafe4ac2c6fa9

January 12, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 947fe80a2c26a998c18cafe4ac2c6fa9SHA1: 7337ef39800091ea808fa9c1c074e37feb4b95ccANALYSIS DATE: 2023-01-12T05:54:51ZTTPS: T1060, T1112, T1053, T1005,...

Malware Analysis – aurora – dfc9518f5e0b145f1fa786628670863d

January 12, 2023

Score: 10 MALWARE FAMILY: auroraTAGS:family:aurora, family:blacknet, family:darkcomet, family:dcrat, family:djvu, family:redline, family:smokeloader, family:vidar, family:wannacry, botnet:19, backdoor, collection, discovery, infostealer, persistence, ransomware,...

Malware Analysis – discovery – a7798f8706cb8c4c347da090eb320de9

January 12, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: a7798f8706cb8c4c347da090eb320de9SHA1: 66a8b77a2ab4a5b4598f84895559edb0e44873daANALYSIS DATE: 2023-01-11T20:49:11ZTTPS: T1112, T1042, T1012, T1082, T1060 ScoreMeaningExample10Known badA malware family...

Malware Analysis – discovery – 1e262e85af7822f199da3f27c7f5d406

January 12, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 1e262e85af7822f199da3f27c7f5d406SHA1: 3b934e6d859308cc9af07a1b184ea90021ff7a36ANALYSIS DATE: 2023-01-11T23:05:24ZTTPS: T1112, T1012, T1082, T1060, T1042 ScoreMeaningExample10Known badA malware family...

Malware Analysis – amadey – b4be08f67e4b5fed600bf5558b119168

January 12, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:aurora, family:dcrat, family:djvu, family:icedid, family:smokeloader, family:vidar, botnet:19, campaign:3131022508, backdoor, banker, discovery, infostealer, loader, persistence, ransomware,...

Malware Analysis – evasion – 26b5b59d0c9ff7a575eced46612d8e25

January 12, 2023

Score: 5 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 26b5b59d0c9ff7a575eced46612d8e25SHA1: f28ecc9dda6c7c3848c2e20913b3bd39155004bdANALYSIS DATE: 2023-01-11T22:43:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – 793032b03418e42783b294836132e84e

January 12, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 793032b03418e42783b294836132e84eSHA1: a395aca39b0a1ce4b5af893f4014f1a96687f2bcANALYSIS DATE: 2023-01-11T22:44:58ZTTPS: T1053, T1005, T1081, T1060,...

Malware Analysis – lockbit – a8e0d56f8c67f1f7b6e592c12d87acab

January 11, 2023

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, ransomwareMD5: a8e0d56f8c67f1f7b6e592c12d87acabSHA1: ed555f0162ea6ec5b8b8bada743cfc628d376274ANALYSIS DATE: 2023-01-11T09:07:12ZTTPS: T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – aurora – a750f4f224ae7af1c886b39d1c5800d4

January 11, 2023

Score: 10 MALWARE FAMILY: auroraTAGS:family:aurora, family:dcrat, family:djvu, family:icedid, family:smokeloader, family:vidar, botnet:19, campaign:3131022508, backdoor, banker, discovery, infostealer, loader, persistence, ransomware, rat,...

Malware Analysis – smokeloader – 70d0f4ca40cba87f64e1d482c2eb7167

January 11, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 70d0f4ca40cba87f64e1d482c2eb7167SHA1: 2b375e2d01a2bcc809cb5f3adb94d7b2cbd05470ANALYSIS DATE: 2023-01-11T09:31:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – xmrig – f91a4f2fe37f1008f8f2b0d597dbd5fa

January 11, 2023

Score: 10 MALWARE FAMILY: xmrigTAGS:family:xmrig, discovery, evasion, exploit, minerMD5: f91a4f2fe37f1008f8f2b0d597dbd5faSHA1: 3293698ca35076659fbaaac4868ba57afc3e560dANALYSIS DATE: 2023-01-11T09:23:30ZTTPS: T1031, T1562, T1489, T1222, T1082, T1102, T1112...

Malware Analysis – wannacry – 5c7fb0927db37372da25f270708103a2

January 11, 2023

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, persistence, ransomware, spyware, stealer, wormMD5: 5c7fb0927db37372da25f270708103a2SHA1: 120ed9279d85cbfa56e5b7779ffa7162074f7a29ANALYSIS DATE: 2023-01-11T09:07:49ZTTPS: T1107, T1490, T1082, T1005, T1081, T1060,...

Malware Analysis – djvu – f0fa800da38d447e5ec5488cf0533783

January 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: f0fa800da38d447e5ec5488cf0533783SHA1: a18b649c13257ece20693771eda98eeb436d4248ANALYSIS DATE: 2023-01-11T10:20:44ZTTPS: T1082, T1053, T1012, T1060,...

Malware Analysis – discovery – 5a9d7261ca6fb48b5df18e3e5dcd12e4

January 11, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, persistence, ransomwareMD5: 5a9d7261ca6fb48b5df18e3e5dcd12e4SHA1: c5e5601e995437ff625939876c7cf5a30d8e29eaANALYSIS DATE: 2023-01-11T10:18:25ZTTPS: T1012, T1497, T1082, T1112, T1042, T1060 ScoreMeaningExample10Known badA...

Malware Analysis – wannacry – 3e1358176d57982beb922f2902a37fad

January 11, 2023

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, bootkit, persistence, ransomware, wormMD5: 3e1358176d57982beb922f2902a37fadSHA1: db139653e9dd7c669efdfddd69c991b72dcb428bANALYSIS DATE: 2023-01-11T10:21:05ZTTPS: T1012, T1082, T1060, T1112, T1067, T1491 ScoreMeaningExample10Known...

Malware Analysis

Malware Analysis – djvu – 8c5063d3ef8df921393f4fc163cc5e87

Malware Analysis – smokeloader – b4be08f67e4b5fed600bf5558b119168

Malware Analysis – smokeloader – b4346008df789fb0b428f3088c3290f5

Malware Analysis – revengerat – ddfdcc11a3e4a5dd265442a5bcea9fcf

Malware Analysis – ransomware – 1f70c57bb5dc1b1a543d1cc25f670116

Malware Analysis – wannacry – 87234dff69f6c8edfaf828a5d491c886

Malware Analysis – discovery – 1562d7504b9669b96cbeeba59b3fb6b4

Malware Analysis – amadey – 24450d22a44831b8d4e20e3eb99d9fb9

Malware Analysis – djvu – 7f89e30634f529406e25c94728138ac2

Malware Analysis – djvu – 947fe80a2c26a998c18cafe4ac2c6fa9

Malware Analysis – aurora – dfc9518f5e0b145f1fa786628670863d

Malware Analysis – discovery – a7798f8706cb8c4c347da090eb320de9

Malware Analysis – discovery – 1e262e85af7822f199da3f27c7f5d406

Malware Analysis – amadey – b4be08f67e4b5fed600bf5558b119168

Malware Analysis – evasion – 26b5b59d0c9ff7a575eced46612d8e25

Malware Analysis – djvu – 793032b03418e42783b294836132e84e

Malware Analysis – lockbit – a8e0d56f8c67f1f7b6e592c12d87acab

Malware Analysis – aurora – a750f4f224ae7af1c886b39d1c5800d4

Malware Analysis – smokeloader – 70d0f4ca40cba87f64e1d482c2eb7167

Malware Analysis – xmrig – f91a4f2fe37f1008f8f2b0d597dbd5fa

Malware Analysis – wannacry – 5c7fb0927db37372da25f270708103a2

Malware Analysis – djvu – f0fa800da38d447e5ec5488cf0533783

Malware Analysis – discovery – 5a9d7261ca6fb48b5df18e3e5dcd12e4

Malware Analysis – wannacry – 3e1358176d57982beb922f2902a37fad

Cobalt Strike Beacon Detected – 82[.]156[.]0[.]140:443

Cobalt Strike Beacon Detected – 8[.]135[.]237[.]16:2222

Cobalt Strike Beacon Detected – 87[.]120[.]115[.]8:7777

Cobalt Strike Beacon Detected – 3[.]76[.]191[.]166:80

CVE Alert: CVE-2024-42172

You may have missed