Malware Analysis

Malware Analysis – ransomware – fa2bac4ec3b4956d76019d84f32f742a

December 26, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: fa2bac4ec3b4956d76019d84f32f742aSHA1: de74a1b4d3f5b554da4c9f18f1dbda7b36bb50c8ANALYSIS DATE: 2022-12-26T11:07:03ZTTPS: T1005, T1081, T1491, T1112, T1107, T1490, T1130 ScoreMeaningExample10Known badA...

Malware Analysis – wannacry – da5eee93accd46fe8755b93a19ada407

December 26, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: da5eee93accd46fe8755b93a19ada407SHA1: b85e778ccd3ce4248633c5954abefdd8816b5ac0ANALYSIS DATE: 2022-12-26T11:19:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – wannacry – 6e72ad805b4322612b9c9c7673a45635

December 26, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: 6e72ad805b4322612b9c9c7673a45635SHA1: e3727e0d38ee247b654441df50aa1acdd328eb32ANALYSIS DATE: 2022-12-26T11:22:05ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – dcrat – 11def98517c93e2a955df827ed88a3a2

December 26, 2022

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, infostealer, rat, spyware, stealerMD5: 11def98517c93e2a955df827ed88a3a2SHA1: 12d175a93a7b161bd8d4d6b489e95f15e34ad283ANALYSIS DATE: 2022-12-25T20:57:58ZTTPS: T1005, T1081, T1082, T1053, T1130, T1112 ScoreMeaningExample10Known...

Malware Analysis – djvu – 011233d5915f5be50e2230f34741359a

December 26, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 011233d5915f5be50e2230f34741359aSHA1: da8a2eee26fc9eef7bfdb96a3e6888e55ae11e25ANALYSIS DATE: 2022-12-25T21:33:43ZTTPS: T1082, T1053, T1130, T1112, T1060, T1222 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – e6c155f10839a589cbbd3cd0b56bd8de

December 26, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: e6c155f10839a589cbbd3cd0b56bd8deSHA1: 5d2e4b74764ca85fead3b6e555657f2b609da3b4ANALYSIS DATE: 2022-12-25T21:07:21ZTTPS: T1053, T1130, T1112, T1060, T1222, T1082 ScoreMeaningExample10Known badA...

Malware Analysis – amadey – c8c9b5a1191f94ad982039badaa0ca50

December 26, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: c8c9b5a1191f94ad982039badaa0ca50SHA1: b6402f9450b32a5c1a1721195062e9e03c8ba504ANALYSIS DATE: 2022-12-25T21:31:18ZTTPS: T1222,...

Malware Analysis – eternity – b4865c2d9f23b7df972ab8a65e5e94b6

December 26, 2022

Score: 10 MALWARE FAMILY: eternityTAGS:family:eternity, evasion, ransomwareMD5: b4865c2d9f23b7df972ab8a65e5e94b6SHA1: bc3ecb00be5d812b72062be75ce7840bf1a5d9b3ANALYSIS DATE: 2022-12-25T21:32:27ZTTPS: T1082, T1012, T1018, T1053 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – djvu – 6d931e465782a502fbdada661a16eebd

December 26, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 6d931e465782a502fbdada661a16eebdSHA1: 5dbeafc4ddf81321c5da8f32c80f6ad3c62c0247ANALYSIS DATE: 2022-12-25T22:18:59ZTTPS: T1060, T1112, T1222, T1012, T1082, T1005,...

Malware Analysis – djvu – 6127455acbf104c83d6cc50815fc2316

December 26, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 6127455acbf104c83d6cc50815fc2316SHA1: bca79f179b418b30f77a0c91c86c108213350461ANALYSIS DATE: 2022-12-25T21:37:27ZTTPS: T1222, T1053, T1005, T1081, T1012, T1082,...

Malware Analysis – djvu – f882c7d3c006924ed8bf740054023408

December 26, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: f882c7d3c006924ed8bf740054023408SHA1: 58628fadce724d96810028bef9fb530cea4e0d9dANALYSIS DATE: 2022-12-25T22:27:25ZTTPS: T1053, T1130, T1112, T1060, T1222, T1082 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – ade885da982e26adc6b611ee6c226af0

December 26, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: ade885da982e26adc6b611ee6c226af0SHA1: bc3772b05a374d5710fccfc819639ecbb1376facANALYSIS DATE: 2022-12-25T21:51:02ZTTPS: T1130, T1112, T1060, T1222, T1082, T1053 ScoreMeaningExample10Known badA...

Malware Analysis – amadey – d28df046a6e01beabd8b3e07848b0a43

December 26, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: d28df046a6e01beabd8b3e07848b0a43SHA1: 9db28ba915eb8e28e4714bf87b8b824a88741f1aANALYSIS DATE: 2022-12-25T23:33:59ZTTPS: T1012,...

Malware Analysis – djvu – decbd978afb892a6f27b6699f836c4cc

December 26, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: decbd978afb892a6f27b6699f836c4ccSHA1: 884ba14ea35d330117d33fbccdae5facdc13e0eeANALYSIS DATE: 2022-12-25T23:30:58ZTTPS: T1060, T1112, T1222, T1012, T1005, T1081,...

Malware Analysis – amadey – ae6fa6373d4c7b484b67811f50dff0f5

December 26, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, backdoor, discovery, persistence, ransomware, spyware, stealer, trojanMD5: ae6fa6373d4c7b484b67811f50dff0f5SHA1: 882bc23172d9b693a9cf3cc3fa4792df747ce125ANALYSIS DATE: 2022-12-25T23:04:55ZTTPS: T1012, T1082,...

Malware Analysis – dcrat – eb93bb98b4e0d01353c5706cd04decc7

December 26, 2022

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, discovery, evasion, exploit, infostealer, persistence, rat, trojanMD5: eb93bb98b4e0d01353c5706cd04decc7SHA1: 1ab3a1414e2c2681c32c19f11e837720241d4511ANALYSIS DATE: 2022-12-25T23:14:30ZTTPS: T1053, T1060, T1112, T1004,...

Malware Analysis – djvu – 6b363376a842d4622aab168749b56e06

December 25, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 6b363376a842d4622aab168749b56e06SHA1: c060a576e0aa41d8854846438c9d4d15b2ebd201ANALYSIS DATE: 2022-12-25T15:05:51ZTTPS: T1082, T1053, T1130, T1112, T1060, T1222 ScoreMeaningExample10Known badA...

Malware Analysis – amadey – 0fc689590ea1401800c2bf2e9dba05b8

December 25, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 0fc689590ea1401800c2bf2e9dba05b8SHA1: f39bdeb0b532161f7a3c427a0c2dca1c57f234a1ANALYSIS DATE: 2022-12-25T16:06:17ZTTPS: T1222,...

Malware Analysis – djvu – fc83c3d6765a19bad4b98d25d999bbac

December 25, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: fc83c3d6765a19bad4b98d25d999bbacSHA1: 4e46236df5816bcbbcc22da5cd3fdd0302aab228ANALYSIS DATE: 2022-12-25T17:00:05ZTTPS: T1012, T1222, T1005, T1081, T1082, T1053,...

Malware Analysis – amadey – 129a8da914ebc1e3b73dd61a51f39129

December 25, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:dcrat, family:djvu, family:smokeloader, backdoor, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealer, trojanMD5: 129a8da914ebc1e3b73dd61a51f39129SHA1: 71fb39b940654f3c988c0fad929074315921387dANALYSIS...

Malware Analysis – smokeloader – 1947b12fce9748b5283230f1c10c4761

December 25, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 1947b12fce9748b5283230f1c10c4761SHA1: 10924809069e4abcf3930bd8aad1437a1a1817f7ANALYSIS DATE: 2022-12-25T15:08:39ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 3621b7eb0ed318b4e3a4aa5e329dbd21

December 25, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 3621b7eb0ed318b4e3a4aa5e329dbd21SHA1: 86f9061fd47f7df0b20d74b209d6c7f870117f93ANALYSIS DATE: 2022-12-25T17:04:18ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 210833411dfb3d09154f4e18ae7b61ed

December 25, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 210833411dfb3d09154f4e18ae7b61edSHA1: bf6f34517db7a00446b2258b22bf8adf986493a0ANALYSIS DATE: 2022-12-25T17:02:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – c3fadd562016e4a7c25fbbf4f47f27b4

December 25, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: c3fadd562016e4a7c25fbbf4f47f27b4SHA1: 563dd3f0192c941c6c8069dfdca84fc0cb6fe133ANALYSIS DATE: 2022-12-25T17:01:08ZTTPS: T1053, T1130, T1112, T1060, T1222, T1082 ScoreMeaningExample10Known badA...

Malware Analysis

Malware Analysis – ransomware – fa2bac4ec3b4956d76019d84f32f742a

Malware Analysis – wannacry – da5eee93accd46fe8755b93a19ada407

Malware Analysis – wannacry – 6e72ad805b4322612b9c9c7673a45635

Malware Analysis – dcrat – 11def98517c93e2a955df827ed88a3a2

Malware Analysis – djvu – 011233d5915f5be50e2230f34741359a

Malware Analysis – djvu – e6c155f10839a589cbbd3cd0b56bd8de

Malware Analysis – amadey – c8c9b5a1191f94ad982039badaa0ca50

Malware Analysis – eternity – b4865c2d9f23b7df972ab8a65e5e94b6

Malware Analysis – djvu – 6d931e465782a502fbdada661a16eebd

Malware Analysis – djvu – 6127455acbf104c83d6cc50815fc2316

Malware Analysis – djvu – f882c7d3c006924ed8bf740054023408

Malware Analysis – djvu – ade885da982e26adc6b611ee6c226af0

Malware Analysis – amadey – d28df046a6e01beabd8b3e07848b0a43

Malware Analysis – djvu – decbd978afb892a6f27b6699f836c4cc

Malware Analysis – amadey – ae6fa6373d4c7b484b67811f50dff0f5

Malware Analysis – dcrat – eb93bb98b4e0d01353c5706cd04decc7

Malware Analysis – djvu – 6b363376a842d4622aab168749b56e06

Malware Analysis – amadey – 0fc689590ea1401800c2bf2e9dba05b8

Malware Analysis – djvu – fc83c3d6765a19bad4b98d25d999bbac

Malware Analysis – amadey – 129a8da914ebc1e3b73dd61a51f39129

Malware Analysis – smokeloader – 1947b12fce9748b5283230f1c10c4761

Malware Analysis – smokeloader – 3621b7eb0ed318b4e3a4aa5e329dbd21

Malware Analysis – smokeloader – 210833411dfb3d09154f4e18ae7b61ed

Malware Analysis – djvu – c3fadd562016e4a7c25fbbf4f47f27b4

[RANSOMHUB] – Ransomware Victim: mi[.]edu

[LOCKBIT3] – Ransomware Victim: telering[.]de

[FUNKSEC] – Ransomware Victim: zapopan[.]gob[.]mx

[FUNKSEC] – Ransomware Victim: linxe[.]com

Cobalt Strike Beacon Detected – 110[.]42[.]252[.]7:443

You may have missed