Malware Analysis

Malware Analysis – aurora – b9a1dcbf263cf5f0e36856c9b198a606

January 10, 2023

Score: 10 MALWARE FAMILY: auroraTAGS:family:aurora, family:dcrat, family:djvu, family:icedid, family:redline, family:smokeloader, family:vidar, botnet:19, botnet:@2023@new, campaign:3131022508, backdoor, banker, discovery, infostealer, persistence, ransomware,...

Malware Analysis – djvu – 3028c71d9207be63be223889aa8a88ff

January 10, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 3028c71d9207be63be223889aa8a88ffSHA1: c2a29df6ce78b4d55e504dbf232e36af4bdae49aANALYSIS DATE: 2023-01-10T03:33:26ZTTPS: T1053, T1012, T1082, T1005,...

Malware Analysis – dcrat – 8bb59c5b3a4699c59c0acda7385af9ea

January 9, 2023

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealer, trojanMD5: 8bb59c5b3a4699c59c0acda7385af9eaSHA1:...

Malware Analysis – smokeloader – f5776eb12290fcd3f2288ae4d877d090

January 9, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: f5776eb12290fcd3f2288ae4d877d090SHA1: 9516cc9ff311ccec53653acb990e98356da2c001ANALYSIS DATE: 2023-01-09T09:11:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 9b1131057924c3a1841acbe107ee086e

January 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 9b1131057924c3a1841acbe107ee086eSHA1: 80539f9485c9e29733ca57a24b2c9b37fb4ac0acANALYSIS DATE: 2023-01-09T09:23:07ZTTPS: T1060, T1112, T1222, T1053,...

Malware Analysis – djvu – 5f979a8a2446ecc43b10dba94238edcc

January 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 5f979a8a2446ecc43b10dba94238edccSHA1: 407e927137549a9da50b58089be640682afe1474ANALYSIS DATE: 2023-01-09T10:32:53ZTTPS: T1012,...

Malware Analysis – banker – 6dce96266bfb1e4db3657021bdaea6a0

January 9, 2023

Score: 8 MALWARE FAMILY: bankerTAGS:banker, evasion, ransomwareMD5: 6dce96266bfb1e4db3657021bdaea6a0SHA1: 77781f078a3727c557b2a8800f2593d67d7aa529ANALYSIS DATE: 2023-01-09T10:34:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – e7278549bc6c6dac549f7d64530875cb

January 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: e7278549bc6c6dac549f7d64530875cbSHA1: 01df4b33ff01685105c10cac2d83041fda547194ANALYSIS DATE: 2023-01-09T10:20:18ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – – 6c1797c5a0b5d5d07fc74f474c9498d3

January 9, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: 6c1797c5a0b5d5d07fc74f474c9498d3SHA1: 69a884bbee18c8ebee0c329c14f58728c51c58f2ANALYSIS DATE: 2023-01-09T10:44:13ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – a361a0f3a8220185911ccf9aca4aaad4

January 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: a361a0f3a8220185911ccf9aca4aaad4SHA1: 322767f2549261cce0ccfd1a752b2bac9941ac4dANALYSIS DATE: 2023-01-09T10:48:37ZTTPS: T1222, T1005, T1081, T1012,...

Malware Analysis – aurora – 23646c9325387fa729732c7b88c72ad7

January 9, 2023

Score: 10 MALWARE FAMILY: auroraTAGS:family:aurora, family:dcrat, family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, infostealer, persistence, ransomware, rat, spyware, stealer, trojanMD5: 23646c9325387fa729732c7b88c72ad7SHA1:...

Malware Analysis – evasion – ad4c99e6d61c62723324f02e6cfee6d3

January 9, 2023

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: ad4c99e6d61c62723324f02e6cfee6d3SHA1: 189168db2318d45b5a35d2f1410a4dfdcb71c61aANALYSIS DATE: 2023-01-09T11:10:12ZTTPS: T1491, T1112, T1060, T1158 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – evasion – 99e3c49edfa0934419a87adb9a1d99dd

January 9, 2023

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 99e3c49edfa0934419a87adb9a1d99ddSHA1: 4c82fbdda744ce7ccf91e7f07b4ac2efffa68f19ANALYSIS DATE: 2023-01-09T11:08:36ZTTPS: T1060, T1112, T1491, T1158 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – djvu – bd1436b16af05a69f8b8d87c813af376

January 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: bd1436b16af05a69f8b8d87c813af376SHA1: 9c84a2b8f40cc92e0549877983f792efff96ee78ANALYSIS DATE: 2023-01-09T04:11:16ZTTPS: T1060, T1112, T1222, T1005,...

Malware Analysis – dcrat – 9e4e9a0d63d345bd24e6a974f751bd6b

January 9, 2023

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:19, botnet:@2023@new, backdoor, discovery, infostealer, persistence, ransomware, rat, spyware, stealer, trojanMD5:...

Malware Analysis – smokeloader – 0af68ab2edffc49632fd170dc3c97127

January 9, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 0af68ab2edffc49632fd170dc3c97127SHA1: fd585f3813b61a70a5f102c2208b212b2f324873ANALYSIS DATE: 2023-01-09T04:26:02ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 0d8206f8fbd4cad4c14fbc48e1ecec79

January 9, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 0d8206f8fbd4cad4c14fbc48e1ecec79SHA1: 446cf441f1280e16a10a6a7cc48e59aec15d98b3ANALYSIS DATE: 2023-01-09T05:16:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – ca487f76d723527db20f804d50c39eaa

January 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: ca487f76d723527db20f804d50c39eaaSHA1: 3fd3ba30bc77020a5e3bebf8c9d34a0834ad54b7ANALYSIS DATE: 2023-01-09T05:44:15ZTTPS: T1005, T1081, T1012, T1222,...

Malware Analysis – djvu – c1d43aa7d4455f59a66ff383f5736931

January 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojanMD5: c1d43aa7d4455f59a66ff383f5736931SHA1: a654ea0183d33c617cc58123a66b345a6b6bf62aANALYSIS DATE: 2023-01-09T04:50:28ZTTPS: T1012,...

Malware Analysis – djvu – 04a8fd3346eabeb3fefa118206f9aa1b

January 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 04a8fd3346eabeb3fefa118206f9aa1bSHA1: 92d3b89a5a9e53867c028a9a4569af7bd884663bANALYSIS DATE: 2023-01-08T22:42:47ZTTPS: T1222, T1012, T1082, T1005,...

Malware Analysis – djvu – 1de29ef9bed38c0a81a30a09369d8f7f

January 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 1de29ef9bed38c0a81a30a09369d8f7fSHA1: 52f41573d0ce0e4ea96380b0f23c1c5dea872c76ANALYSIS DATE: 2023-01-08T21:54:46ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – dcrat – 4b63df4f727bc68412c39ae8cecd54fe

January 9, 2023

Malware Analysis – djvu – fe53c14f50ee7a0582d62715fd824056

January 8, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:19, botnet:@2023@new, backdoor, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: fe53c14f50ee7a0582d62715fd824056SHA1: d844915b144b559295936cc8fe12232b925da893ANALYSIS...

Malware Analysis – djvu – c4dd2d3cd811e87ae1ceaa1b9718f4a1

January 8, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojanMD5: c4dd2d3cd811e87ae1ceaa1b9718f4a1SHA1: c469300e4e6b78f84cf3cbbd6095c840c031df8fANALYSIS DATE: 2023-01-08T09:39:32ZTTPS: T1112,...

Malware Analysis

Malware Analysis – aurora – b9a1dcbf263cf5f0e36856c9b198a606

Malware Analysis – djvu – 3028c71d9207be63be223889aa8a88ff

Malware Analysis – dcrat – 8bb59c5b3a4699c59c0acda7385af9ea

Malware Analysis – smokeloader – f5776eb12290fcd3f2288ae4d877d090

Malware Analysis – djvu – 9b1131057924c3a1841acbe107ee086e

Malware Analysis – djvu – 5f979a8a2446ecc43b10dba94238edcc

Malware Analysis – banker – 6dce96266bfb1e4db3657021bdaea6a0

Malware Analysis – djvu – e7278549bc6c6dac549f7d64530875cb

Malware Analysis – – 6c1797c5a0b5d5d07fc74f474c9498d3

Malware Analysis – djvu – a361a0f3a8220185911ccf9aca4aaad4

Malware Analysis – aurora – 23646c9325387fa729732c7b88c72ad7

Malware Analysis – evasion – ad4c99e6d61c62723324f02e6cfee6d3

Malware Analysis – evasion – 99e3c49edfa0934419a87adb9a1d99dd

Malware Analysis – djvu – bd1436b16af05a69f8b8d87c813af376

Malware Analysis – dcrat – 9e4e9a0d63d345bd24e6a974f751bd6b

Malware Analysis – smokeloader – 0af68ab2edffc49632fd170dc3c97127

Malware Analysis – smokeloader – 0d8206f8fbd4cad4c14fbc48e1ecec79

Malware Analysis – djvu – ca487f76d723527db20f804d50c39eaa

Malware Analysis – djvu – c1d43aa7d4455f59a66ff383f5736931

Malware Analysis – djvu – 04a8fd3346eabeb3fefa118206f9aa1b

Malware Analysis – djvu – 1de29ef9bed38c0a81a30a09369d8f7f

Malware Analysis – dcrat – 4b63df4f727bc68412c39ae8cecd54fe

Malware Analysis – djvu – fe53c14f50ee7a0582d62715fd824056

Malware Analysis – djvu – c4dd2d3cd811e87ae1ceaa1b9718f4a1

[FUNKSEC] – Ransomware Victim: wissenhive[.]com

[FUNKSEC] – Ransomware Victim: Now you can also visit Funksec on Clearnet funksec[.]top

Cobalt Strike Beacon Detected – 82[.]156[.]0[.]140:443

Cobalt Strike Beacon Detected – 8[.]135[.]237[.]16:2222

Cobalt Strike Beacon Detected – 87[.]120[.]115[.]8:7777

You may have missed