Malware Analysis

Malware Analysis – amadey – 1a15aa18ae8129dfcfe983f75b2b1b17

December 25, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:eternity, family:redline, botnet:trud, botnet:upppppp555555, collection, discovery, evasion, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: 1a15aa18ae8129dfcfe983f75b2b1b17SHA1: 7debeced715b48e2de1d9905b56b84bc2148b5c4ANALYSIS...

Malware Analysis – amadey – 033f1c8d781800f686ef0666280c1bae

December 25, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:redline, botnet:trud, botnet:upppppp555555, collection, discovery, infostealer, persistence, spyware, stealer, trojanMD5: 033f1c8d781800f686ef0666280c1baeSHA1: fe5495be3a1464eb5cbd78b5193c2a45d49beb28ANALYSIS DATE: 2022-12-25T17:33:03ZTTPS: T1082,...

Malware Analysis – amadey – 999d8ae721958772b0b61d72b3ea20b9

December 25, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:dcrat, family:djvu, family:redline, family:smokeloader, botnet:rocketssss, botnet:upppppp555555, backdoor, brand:microsoft, collection, discovery, infostealer, persistence, phishing, ransomware, rat,...

Malware Analysis – djvu – fb9d2488001ea8c7ea768c22cea0c865

December 25, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: fb9d2488001ea8c7ea768c22cea0c865SHA1: 01b09dc4646464ad6eb50d9c567492bc97613bb9ANALYSIS DATE: 2022-12-25T17:12:28ZTTPS: T1005, T1081, T1012, T1082, T1060, T1112,...

Malware Analysis – djvu – 7b96061b71c234da6fdb208fbab96b83

December 25, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 7b96061b71c234da6fdb208fbab96b83SHA1: bd6a7d267b183da41e2983ebf2dae768775b43dfANALYSIS DATE: 2022-12-25T17:48:22ZTTPS: T1060, T1112, T1222, T1082, T1005, T1081,...

Malware Analysis – amadey – 3313c4807243ab6363f117606b508dc0

December 25, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, botnet:mario23_10, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: 3313c4807243ab6363f117606b508dc0SHA1: d9656c20ef55f12036ccc3524964e89b25d27ac9ANALYSIS...

Malware Analysis – orcus – 6261253f359ef789149e07490c078700

December 25, 2022

Score: 10 MALWARE FAMILY: orcusTAGS:family:orcus, discovery, persistence, ransomware, rat, spyware, stealerMD5: 6261253f359ef789149e07490c078700SHA1: f7131dbd7fa8a645865e651c7a697d51efa52a73ANALYSIS DATE: 2022-12-25T08:39:52ZTTPS: T1012, T1120, T1082, T1112, T1042,...

Malware Analysis – amadey – cf2fd271aeaecf04b61219f48d59b774

December 25, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: cf2fd271aeaecf04b61219f48d59b774SHA1: d7ebfeae7801392c2ca900c0572a675359759067ANALYSIS DATE: 2022-12-25T11:48:16ZTTPS: T1012,...

Malware Analysis – djvu – 79763fbb5ac3ef82b51193d28c32b6a6

December 25, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 79763fbb5ac3ef82b51193d28c32b6a6SHA1: 88dc47b65b432e06a0056a070f08ab191b3c8990ANALYSIS DATE: 2022-12-25T10:26:04ZTTPS: T1130, T1112, T1060, T1222, T1082, T1053 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – 05778645b4fac7d10e26c0e960806afb

December 25, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 05778645b4fac7d10e26c0e960806afbSHA1: f9dafaa24102c513b7ad66262f87456794c9a042ANALYSIS DATE: 2022-12-25T11:35:09ZTTPS: T1005, T1081, T1060, T1112, T1222, T1082,...

Malware Analysis – smokeloader – 0832c102331af5307c561a5dba7380a5

December 25, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 0832c102331af5307c561a5dba7380a5SHA1: e5ad2eecf7dab71f9d55a28e9594d78d10dbfbbfANALYSIS DATE: 2022-12-25T09:32:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – d95589c8fbd49a9f0dc47886e4b99cf6

December 25, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: d95589c8fbd49a9f0dc47886e4b99cf6SHA1: 25a60d20480a868c2acb271b452bd07b6c54d8a2ANALYSIS DATE: 2022-12-25T03:01:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 7c24e7b69fb12ad039f3b7396dd6fd32

December 25, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 7c24e7b69fb12ad039f3b7396dd6fd32SHA1: 3f68285a80953248f7fa6fe7b9db41ac9907e45eANALYSIS DATE: 2022-12-25T03:48:08ZTTPS: T1012, T1082, T1053, T1005, T1081, T1222,...

Malware Analysis – djvu – dae8500aae0d729e44c90ece88c5f346

December 25, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: dae8500aae0d729e44c90ece88c5f346SHA1: 09859eb420cd3aa9e7dc71e97201f0f38df7e4ccANALYSIS DATE: 2022-12-25T05:32:07ZTTPS: T1060, T1112, T1005, T1081, T1222, T1082,...

Malware Analysis – smokeloader – c6c8211f6d8201310b934f270a93ab64

December 25, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: c6c8211f6d8201310b934f270a93ab64SHA1: 070c740d75269c32e1819a21615721ff8ff0b832ANALYSIS DATE: 2022-12-25T05:02:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 6dd6384670baa5423c76f1bbde4235c9

December 25, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 6dd6384670baa5423c76f1bbde4235c9SHA1: 3ca565f27bc7a6d87eab5c5e1df038944789401fANALYSIS DATE: 2022-12-25T04:03:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 2909f77128b92348349a8c124048ed79

December 25, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 2909f77128b92348349a8c124048ed79SHA1: fdffc675fabeea6f7b2a53bc66b5b8150922eaa2ANALYSIS DATE: 2022-12-24T21:16:38ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 311c3aac0ea507e2e10ff88fccb56c0a

December 25, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 311c3aac0ea507e2e10ff88fccb56c0aSHA1: 553d0012c5b15f670894be85c308bf9ea4bf53f0ANALYSIS DATE: 2022-12-24T21:31:09ZTTPS: T1053, T1130, T1112, T1060, T1222, T1082 ScoreMeaningExample10Known badA...

Malware Analysis – amadey – 1cd8b593c078ed11ca602da358452c48

December 25, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, botnet:mario23_10, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: 1cd8b593c078ed11ca602da358452c48SHA1: 801efb1fdb58c0d8e64bff1f191246532f173176ANALYSIS...

Malware Analysis – amadey – 15f57d45fe2a1e8da248cf9b3723d775

December 25, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:eternity, family:redline, family:smokeloader, family:socelars, botnet:post, botnet:trud, backdoor, collection, discovery, evasion, infostealer, persistence, ransomware, spyware, stealer,...

Malware Analysis – djvu – d258b0f01d011726b8fb5dc5ede50eab

December 25, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: d258b0f01d011726b8fb5dc5ede50eabSHA1: d0f1ce0d3dd44ccc69634665813e53fd8034d9e2ANALYSIS DATE: 2022-12-24T21:48:20ZTTPS: T1005, T1081, T1012, T1082, T1060, T1112,...

Malware Analysis – smokeloader – b14dca575e3ba081aadd6ebbeffb3db4

December 25, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: b14dca575e3ba081aadd6ebbeffb3db4SHA1: 7e71f886666693dc7fd9e55630ea4704575eb761ANALYSIS DATE: 2022-12-24T21:32:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 5cf0ffae39e55db6477398473d6d94e8

December 25, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 5cf0ffae39e55db6477398473d6d94e8SHA1: 2022554ca4ffe865932d173e25fabcdf53e98bf5ANALYSIS DATE: 2022-12-24T22:31:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – amadey – c85fc2a2b01780ebaa4c8a194a6d1274

December 25, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, botnet:mario23_10, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: c85fc2a2b01780ebaa4c8a194a6d1274SHA1: d09b86ed2bdc3c86919c7d67da8bb2c79cc71a0dANALYSIS DATE: 2022-12-24T23:00:28ZTTPS:...

Malware Analysis

Malware Analysis – amadey – 1a15aa18ae8129dfcfe983f75b2b1b17

Malware Analysis – amadey – 033f1c8d781800f686ef0666280c1bae

Malware Analysis – amadey – 999d8ae721958772b0b61d72b3ea20b9

Malware Analysis – djvu – fb9d2488001ea8c7ea768c22cea0c865

Malware Analysis – djvu – 7b96061b71c234da6fdb208fbab96b83

Malware Analysis – amadey – 3313c4807243ab6363f117606b508dc0

Malware Analysis – orcus – 6261253f359ef789149e07490c078700

Malware Analysis – amadey – cf2fd271aeaecf04b61219f48d59b774

Malware Analysis – djvu – 79763fbb5ac3ef82b51193d28c32b6a6

Malware Analysis – djvu – 05778645b4fac7d10e26c0e960806afb

Malware Analysis – smokeloader – 0832c102331af5307c561a5dba7380a5

Malware Analysis – smokeloader – d95589c8fbd49a9f0dc47886e4b99cf6

Malware Analysis – djvu – 7c24e7b69fb12ad039f3b7396dd6fd32

Malware Analysis – djvu – dae8500aae0d729e44c90ece88c5f346

Malware Analysis – smokeloader – c6c8211f6d8201310b934f270a93ab64

Malware Analysis – smokeloader – 6dd6384670baa5423c76f1bbde4235c9

Malware Analysis – smokeloader – 2909f77128b92348349a8c124048ed79

Malware Analysis – djvu – 311c3aac0ea507e2e10ff88fccb56c0a

Malware Analysis – amadey – 1cd8b593c078ed11ca602da358452c48

Malware Analysis – amadey – 15f57d45fe2a1e8da248cf9b3723d775

Malware Analysis – djvu – d258b0f01d011726b8fb5dc5ede50eab

Malware Analysis – smokeloader – b14dca575e3ba081aadd6ebbeffb3db4

Malware Analysis – smokeloader – 5cf0ffae39e55db6477398473d6d94e8

Malware Analysis – amadey – c85fc2a2b01780ebaa4c8a194a6d1274

[RANSOMHUB] – Ransomware Victim: mi[.]edu

[LOCKBIT3] – Ransomware Victim: telering[.]de

[FUNKSEC] – Ransomware Victim: zapopan[.]gob[.]mx

[FUNKSEC] – Ransomware Victim: linxe[.]com

Cobalt Strike Beacon Detected – 110[.]42[.]252[.]7:443

You may have missed