Malware Analysis

Malware Analysis – evasion – e43320002eb47ce45a5092c9fdb9c7d2

January 11, 2023

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: e43320002eb47ce45a5092c9fdb9c7d2SHA1: faede3fe537f629eb592d4ec7793fff2e2ee37abANALYSIS DATE: 2023-01-10T21:45:37ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – evasion – bc6bf8643541163f1736566a6a9e6011

January 11, 2023

Score: 6 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: bc6bf8643541163f1736566a6a9e6011SHA1: cc7f21a3779f904d0c5fe0c2c44fc7fb8d2de728ANALYSIS DATE: 2023-01-10T22:17:01ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – evasion – b40a2374b51d487190fe535bb651aa3a

January 11, 2023

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: b40a2374b51d487190fe535bb651aa3aSHA1: 23213f8f9ee58c3166101af2869783c90dfdff14ANALYSIS DATE: 2023-01-10T21:53:08ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – ransomware – 15165436db5835fc6ecda43762014f75

January 11, 2023

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 15165436db5835fc6ecda43762014f75SHA1: 5c972fe82e246daca2c18b5da6f4e521e56c96a2ANALYSIS DATE: 2023-01-10T22:09:38ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – evasion – 5f69049eee4cd4263041956448b9ee95

January 11, 2023

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 5f69049eee4cd4263041956448b9ee95SHA1: e2f3a6f94375f30f9a6a155c3cb07493cff90799ANALYSIS DATE: 2023-01-10T22:22:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – aurora – 263e8add132946de46d9bf90aa19c401

January 11, 2023

Score: 10 MALWARE FAMILY: auroraTAGS:family:aurora, family:dcrat, family:djvu, family:icedid, family:smokeloader, family:vidar, botnet:19, campaign:3131022508, backdoor, banker, discovery, infostealer, loader, persistence, ransomware, rat,...

Malware Analysis – djvu – 920842b983c4051efa27387e1edfeb6b

January 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 920842b983c4051efa27387e1edfeb6bSHA1: 114105f6680c70344a80486e11b9479117f08613ANALYSIS DATE: 2023-01-10T23:47:26ZTTPS: T1060, T1112, T1222, T1082,...

Malware Analysis – djvu – a28ca46bc8462e2738fcba85c35f412c

January 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: a28ca46bc8462e2738fcba85c35f412cSHA1: 437642d731df5b1558ee4228df5c47eb819e2ac7ANALYSIS DATE: 2023-01-10T23:51:09ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – discovery – fc872ec9e926bc8212f6014f997cf672

January 11, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, ransomwareMD5: fc872ec9e926bc8212f6014f997cf672SHA1: 190663eb496c54db43f303d1e91d8e974b580875ANALYSIS DATE: 2023-01-10T23:25:27ZTTPS: T1082, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – discovery – 7914601e5d46afc17f0b59e5140500bb

January 10, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, persistence, ransomware, trojanMD5: 7914601e5d46afc17f0b59e5140500bbSHA1: 3e3c8f0cbc4d56b00253d25c363aab444dda9b8bANALYSIS DATE: 2023-01-10T15:08:26ZTTPS: T1060, T1112, T1031, T1089, T1088, T1082, T1012,...

Malware Analysis – aurora – 07bae8213b9bedfe2f9f37df0db94bbd

January 10, 2023

Malware Analysis – evasion – 94ad269abb292332a4967e912ae34488

January 10, 2023

Score: 6 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 94ad269abb292332a4967e912ae34488SHA1: 0218c55d7317c2139d63f59f4fd5dafa72916e18ANALYSIS DATE: 2023-01-10T15:26:23ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – agent_smith – f7f87cd8579db367e27f73d9cc10ccde

January 10, 2023

Score: 10 MALWARE FAMILY: agent_smithTAGS:family:agent_smith, adware, evasion, ransomwareMD5: f7f87cd8579db367e27f73d9cc10ccdeSHA1: 89480a760efbadf9d23487eeb14cccfd76e72f29ANALYSIS DATE: 2023-01-10T15:31:05ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – evasion – 0cbe1902f52443edfee4e72a42f18514

January 10, 2023

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 0cbe1902f52443edfee4e72a42f18514SHA1: a52908360308b367ea0eb5628045453723cc8a1fANALYSIS DATE: 2023-01-10T15:43:42ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – 4b1df5dec5ccce753ef98c988f97e066

January 10, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 4b1df5dec5ccce753ef98c988f97e066SHA1: 8aab3d3e48a21a6570f3b00b77b7fe5a73b2c0ebANALYSIS DATE: 2023-01-10T15:40:42ZTTPS: T1012, T1082, T1053, T1005,...

Malware Analysis – discovery – b8d382c628ffa7269a7b0e5491dc7747

January 10, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: b8d382c628ffa7269a7b0e5491dc7747SHA1: 4982678f5314995a82d5865a9a024b0eaab94968ANALYSIS DATE: 2023-01-10T15:47:02ZTTPS: T1082, T1060, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – 6f589fff14eee89414f85db1c9645bc2

January 10, 2023

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 6f589fff14eee89414f85db1c9645bc2SHA1: 89ac66fa8603039a71a0db9949b87e98df9d9e0cANALYSIS DATE: 2023-01-10T16:04:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – evasion – d3c434ebded1f388346f59b2095fda9d

January 10, 2023

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: d3c434ebded1f388346f59b2095fda9dSHA1: cd1729ccc527be0ddcfe775559010231ab13cb50ANALYSIS DATE: 2023-01-10T16:12:02ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – 226c4d76864ef44497cd415d72a8b5b4

January 10, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 226c4d76864ef44497cd415d72a8b5b4SHA1: 2e968a4ea6b40e0461b955662b120041dcfb295cANALYSIS DATE: 2023-01-10T16:31:20ZTTPS: T1060, T1112, T1005, T1081,...

Malware Analysis – aurora – 7e804426447118137a1febc094e22d25

January 10, 2023

Malware Analysis – discovery – ec8284a8af78a184d3b3a8248bde7fb9

January 10, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, ransomwareMD5: ec8284a8af78a184d3b3a8248bde7fb9SHA1: 982e3e1788426ee1a22eaaa97b9f843468b48fd5ANALYSIS DATE: 2023-01-10T16:19:29ZTTPS: T1012, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – smokeloader – 2efacf2c68013a4fb5cdf8783306df0b

January 10, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 2efacf2c68013a4fb5cdf8783306df0bSHA1: c84baadfd99d7d64ff8df25849c67be71ce0fc82ANALYSIS DATE: 2023-01-10T03:10:55ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – dfa606df6650fa08f70c4ab17aa58e0b

January 10, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: dfa606df6650fa08f70c4ab17aa58e0bSHA1: b3f22c9ab2bfb620727561596241aece5c62ed64ANALYSIS DATE: 2023-01-10T05:35:05ZTTPS: T1060, T1112, T1082, T1053,...

Malware Analysis – aurora – 6ce1e8a07ad32a3b3c75ecb9e815f9b6

January 10, 2023

Malware Analysis

Malware Analysis – evasion – e43320002eb47ce45a5092c9fdb9c7d2

Malware Analysis – evasion – bc6bf8643541163f1736566a6a9e6011

Malware Analysis – evasion – b40a2374b51d487190fe535bb651aa3a

Malware Analysis – ransomware – 15165436db5835fc6ecda43762014f75

Malware Analysis – evasion – 5f69049eee4cd4263041956448b9ee95

Malware Analysis – aurora – 263e8add132946de46d9bf90aa19c401

Malware Analysis – djvu – 920842b983c4051efa27387e1edfeb6b

Malware Analysis – djvu – a28ca46bc8462e2738fcba85c35f412c

Malware Analysis – discovery – fc872ec9e926bc8212f6014f997cf672

Malware Analysis – discovery – 7914601e5d46afc17f0b59e5140500bb

Malware Analysis – aurora – 07bae8213b9bedfe2f9f37df0db94bbd

Malware Analysis – evasion – 94ad269abb292332a4967e912ae34488

Malware Analysis – agent_smith – f7f87cd8579db367e27f73d9cc10ccde

Malware Analysis – evasion – 0cbe1902f52443edfee4e72a42f18514

Malware Analysis – djvu – 4b1df5dec5ccce753ef98c988f97e066

Malware Analysis – discovery – b8d382c628ffa7269a7b0e5491dc7747

Malware Analysis – evasion – 6f589fff14eee89414f85db1c9645bc2

Malware Analysis – evasion – d3c434ebded1f388346f59b2095fda9d

Malware Analysis – djvu – 226c4d76864ef44497cd415d72a8b5b4

Malware Analysis – aurora – 7e804426447118137a1febc094e22d25

Malware Analysis – discovery – ec8284a8af78a184d3b3a8248bde7fb9

Malware Analysis – smokeloader – 2efacf2c68013a4fb5cdf8783306df0b

Malware Analysis – djvu – dfa606df6650fa08f70c4ab17aa58e0b

Malware Analysis – aurora – 6ce1e8a07ad32a3b3c75ecb9e815f9b6

[FUNKSEC] – Ransomware Victim: wissenhive[.]com

[FUNKSEC] – Ransomware Victim: Now you can also visit Funksec on Clearnet funksec[.]top

Cobalt Strike Beacon Detected – 82[.]156[.]0[.]140:443

Cobalt Strike Beacon Detected – 8[.]135[.]237[.]16:2222

Cobalt Strike Beacon Detected – 87[.]120[.]115[.]8:7777

You may have missed