Malware Analysis

Malware Analysis – smokeloader – 66827360ebaead210fe55107c62b5c3f

December 25, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 66827360ebaead210fe55107c62b5c3fSHA1: a9a2eb425b7f0e42427fa6f60247d74636903882ANALYSIS DATE: 2022-12-24T23:04:24ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – c80d0ef14b0c0ba82b8d5fac2c775bc1

December 25, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: c80d0ef14b0c0ba82b8d5fac2c775bc1SHA1: a1ea6465f2ec58208686477af9a844353ca25102ANALYSIS DATE: 2022-12-24T22:55:52ZTTPS: T1005, T1081, T1082, T1012, T1060, T1112,...

Malware Analysis – djvu – 670f34396c2c72ce78c9f7fb71269d45

December 25, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 670f34396c2c72ce78c9f7fb71269d45SHA1: c1c96154caa8c8404c67f3c09bf387482022b73dANALYSIS DATE: 2022-12-24T22:31:27ZTTPS: T1053, T1130, T1112, T1060, T1222, T1082 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – cf57116869243d9b7e0d33fdff8cdb4e

December 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: cf57116869243d9b7e0d33fdff8cdb4eSHA1: acc7a5670be1aa69ea50a1923835b9168ba1de57ANALYSIS DATE: 2022-12-24T15:00:56ZTTPS: T1005, T1081, T1082, T1053, T1012, T1060,...

Malware Analysis – djvu – c9082dd4d353a66f723ce022449e8497

December 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: c9082dd4d353a66f723ce022449e8497SHA1: 5fb2140e7d7fe8d515ba3080cef8c7ff65c036b6ANALYSIS DATE: 2022-12-24T15:14:30ZTTPS: T1130, T1112, T1060, T1222, T1082, T1053 ScoreMeaningExample10Known badA...

Malware Analysis – smokeloader – 145ec338f9f4b24892d9e47ec4c6ebb8

December 24, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 145ec338f9f4b24892d9e47ec4c6ebb8SHA1: 616cd450c21c4e2deed4cc6d399673f4b1f8ec8fANALYSIS DATE: 2022-12-24T15:02:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 40a52f7a1940e97bc0478c6ecc4a8ca5

December 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 40a52f7a1940e97bc0478c6ecc4a8ca5SHA1: a771a071ea6cb463aecb248043da65a0314f3ee6ANALYSIS DATE: 2022-12-24T15:23:43ZTTPS: T1060, T1112, T1012, T1082, T1005, T1081,...

Malware Analysis – smokeloader – feb6ef74a675c75b0802efff03d7e74f

December 24, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: feb6ef74a675c75b0802efff03d7e74fSHA1: 92f081429b79c97da030e0df2b10da269807e366ANALYSIS DATE: 2022-12-24T15:31:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 7287cf7bf4b15a0bc270a8118a927ce0

December 24, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 7287cf7bf4b15a0bc270a8118a927ce0SHA1: 7516b1bcf4edfa074800a65314e801f01da7ba16ANALYSIS DATE: 2022-12-24T16:32:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 3f351e8cc3561b5cd0ed1c25daef7eeb

December 24, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 3f351e8cc3561b5cd0ed1c25daef7eebSHA1: 1995184c3a23a5d722c0ae4516fa9cd81702e2abANALYSIS DATE: 2022-12-24T15:45:01ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – eternity – 45e4485a5ca1845bddd704822f5dfabb

December 24, 2022

Score: 10 MALWARE FAMILY: eternityTAGS:family:eternity, evasion, ransomwareMD5: 45e4485a5ca1845bddd704822f5dfabbSHA1: 6239167355c534a1c86073b738f998d95cb81b42ANALYSIS DATE: 2022-12-24T17:04:49ZTTPS: T1082, T1053, T1012, T1018 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – djvu – 77ee4427946d7f5dbed308448c45d399

December 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 77ee4427946d7f5dbed308448c45d399SHA1: a1d206b38ec8dad5af63384f0568cb6c6e56f48fANALYSIS DATE: 2022-12-24T17:28:03ZTTPS: T1222, T1012, T1005, T1081, T1082, T1060,...

Malware Analysis – djvu – 44080d162de67a9110817d62eacc222b

December 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 44080d162de67a9110817d62eacc222bSHA1: a5c04985805c04c3930bceeadc0ddb55a430ddf6ANALYSIS DATE: 2022-12-24T17:40:06ZTTPS: T1082, T1005, T1081, T1012, T1060, T1112,...

Malware Analysis – smokeloader – d3bffde4fa0e12abcbe5ecc10630f9ff

December 24, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: d3bffde4fa0e12abcbe5ecc10630f9ffSHA1: f36d4d840fe1cd3edab3148bdc89bfc7dcb243acANALYSIS DATE: 2022-12-24T17:34:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 647a46b2dfca464acac5fb0dc474c8a3

December 24, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 647a46b2dfca464acac5fb0dc474c8a3SHA1: b6e2894d8d071d3faff7cf227ff2f665e86518eaANALYSIS DATE: 2022-12-24T09:03:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 5df72ca427104352637a5ef056030e3b

December 24, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 5df72ca427104352637a5ef056030e3bSHA1: 626e79a6af439050ef99af38bc275d2116ee4e7aANALYSIS DATE: 2022-12-24T09:31:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 7d1c36a7f705e7ad6facd4e9621ee8b5

December 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 7d1c36a7f705e7ad6facd4e9621ee8b5SHA1: 848673dc5523002d241ee660ad3e592f4f52c652ANALYSIS DATE: 2022-12-24T09:13:30ZTTPS: T1012, T1082, T1005, T1081, T1060, T1112,...

Malware Analysis – evasion – 6e07363bcb0d53ab35788ca6355d4c9a

December 24, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: 6e07363bcb0d53ab35788ca6355d4c9aSHA1: ff83f33d03f91f14896b6075f4c868b46ac192feANALYSIS DATE: 2022-12-24T09:28:23ZTTPS: T1031, T1053, T1107, T1490, T1112, T1088,...

Malware Analysis – bootkit – 3701dc535fb395d6a1fb557a3aeec5e9

December 24, 2022

Score: 10 MALWARE FAMILY: bootkitTAGS:bootkit, discovery, evasion, persistence, ransomware, spyware, stealer, trojanMD5: 3701dc535fb395d6a1fb557a3aeec5e9SHA1: ef517659229ddc6ecfc02481c3953ac9322dae35ANALYSIS DATE: 2022-12-24T09:47:02ZTTPS: T1060, T1112, T1012, T1082,...

Malware Analysis – smokeloader – 6febc6df81ab3b8f32c13a2dbe232676

December 24, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 6febc6df81ab3b8f32c13a2dbe232676SHA1: 50fec1c2b794a2663bfe0c1d189391e56c4061b5ANALYSIS DATE: 2022-12-24T10:33:08ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 4a9bff8242e34c49b4ac9380686ff219

December 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 4a9bff8242e34c49b4ac9380686ff219SHA1: 7d65d6a5ca3ef29cb4052a515b981e9e59f483fbANALYSIS DATE: 2022-12-24T10:27:18ZTTPS: T1053, T1005, T1081, T1012, T1082, T1222,...

Malware Analysis – djvu – ae54ef9519196ced8a45354ab938551f

December 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: ae54ef9519196ced8a45354ab938551fSHA1: 27d50e391bb3da764dd365fe53fbf538179b4d5cANALYSIS DATE: 2022-12-24T10:10:06ZTTPS: T1012, T1222, T1082, T1053, T1005, T1081,...

Malware Analysis – smokeloader – 53d8cc9b0d19488282cd39f464dddfc5

December 24, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 53d8cc9b0d19488282cd39f464dddfc5SHA1: 29faa33dc825038db12e1a883bb0f1fd3a946571ANALYSIS DATE: 2022-12-24T10:02:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 74315c762fbc50c9e128e4736af6451e

December 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 74315c762fbc50c9e128e4736af6451eSHA1: 9676acee4631cba43064fcbcc07d2e5e145ec9a5ANALYSIS DATE: 2022-12-24T11:15:19ZTTPS: T1053, T1060, T1112, T1222, T1082, T1130 ScoreMeaningExample10Known badA...

Malware Analysis

Malware Analysis – smokeloader – 66827360ebaead210fe55107c62b5c3f

Malware Analysis – djvu – c80d0ef14b0c0ba82b8d5fac2c775bc1

Malware Analysis – djvu – 670f34396c2c72ce78c9f7fb71269d45

Malware Analysis – djvu – cf57116869243d9b7e0d33fdff8cdb4e

Malware Analysis – djvu – c9082dd4d353a66f723ce022449e8497

Malware Analysis – smokeloader – 145ec338f9f4b24892d9e47ec4c6ebb8

Malware Analysis – djvu – 40a52f7a1940e97bc0478c6ecc4a8ca5

Malware Analysis – smokeloader – feb6ef74a675c75b0802efff03d7e74f

Malware Analysis – smokeloader – 7287cf7bf4b15a0bc270a8118a927ce0

Malware Analysis – smokeloader – 3f351e8cc3561b5cd0ed1c25daef7eeb

Malware Analysis – eternity – 45e4485a5ca1845bddd704822f5dfabb

Malware Analysis – djvu – 77ee4427946d7f5dbed308448c45d399

Malware Analysis – djvu – 44080d162de67a9110817d62eacc222b

Malware Analysis – smokeloader – d3bffde4fa0e12abcbe5ecc10630f9ff

Malware Analysis – smokeloader – 647a46b2dfca464acac5fb0dc474c8a3

Malware Analysis – smokeloader – 5df72ca427104352637a5ef056030e3b

Malware Analysis – djvu – 7d1c36a7f705e7ad6facd4e9621ee8b5

Malware Analysis – evasion – 6e07363bcb0d53ab35788ca6355d4c9a

Malware Analysis – bootkit – 3701dc535fb395d6a1fb557a3aeec5e9

Malware Analysis – smokeloader – 6febc6df81ab3b8f32c13a2dbe232676

Malware Analysis – djvu – 4a9bff8242e34c49b4ac9380686ff219

Malware Analysis – djvu – ae54ef9519196ced8a45354ab938551f

Malware Analysis – smokeloader – 53d8cc9b0d19488282cd39f464dddfc5

Malware Analysis – djvu – 74315c762fbc50c9e128e4736af6451e

[RANSOMHUB] – Ransomware Victim: mi[.]edu

[LOCKBIT3] – Ransomware Victim: telering[.]de

[FUNKSEC] – Ransomware Victim: zapopan[.]gob[.]mx

[FUNKSEC] – Ransomware Victim: linxe[.]com

Cobalt Strike Beacon Detected – 110[.]42[.]252[.]7:443

You may have missed