Malware Analysis

Malware Analysis – smokeloader – 79fe9ab1a7a010786684dfbb784b7837

December 23, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 79fe9ab1a7a010786684dfbb784b7837SHA1: 2d709acfb03604d76949053d42174e3d416ae515ANALYSIS DATE: 2022-12-22T21:31:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – b08b6219961caac74b033c88233c67f6

December 23, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: b08b6219961caac74b033c88233c67f6SHA1: f4d8c562f51537b57b7c25ff552c736c383c2d60ANALYSIS DATE: 2022-12-22T21:31:49ZTTPS: T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – ransomware – c09116efea795c3170634211222aa3c9

December 23, 2022

Score: 5 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: c09116efea795c3170634211222aa3c9SHA1: a3ceacdcb37a45bc6d36d84b28c2ed71492caef8ANALYSIS DATE: 2022-12-22T23:45:23ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – smokeloader – 2eb56154df927e0c5fcae69ed3c11990

December 23, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 2eb56154df927e0c5fcae69ed3c11990SHA1: fd16efabd12014a64c9d71f480618eded76fab59ANALYSIS DATE: 2022-12-22T23:01:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 9867a82df7697272a3dbfad12519aac6

December 23, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 9867a82df7697272a3dbfad12519aac6SHA1: 7027244a46aefbf80c7903f59ad019394d548f36ANALYSIS DATE: 2022-12-22T22:22:13ZTTPS: T1222, T1005, T1081, T1012, T1060, T1112,...

Malware Analysis – djvu – 329c38dfcf60d7e05c4e28d9da5fa426

December 23, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 329c38dfcf60d7e05c4e28d9da5fa426SHA1: cc02de6e3facb660a01b24c1c2633a55829b8cc2ANALYSIS DATE: 2022-12-22T23:08:10ZTTPS: T1082, T1053, T1005, T1081, T1012, T1060,...

Malware Analysis – djvu – 6829e5c7db6b9b4b942cb245aaf5caf2

December 22, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 6829e5c7db6b9b4b942cb245aaf5caf2SHA1: cd6c8dd535862b21106b9c4672c533ebc7c3e316ANALYSIS DATE: 2022-12-22T16:31:32ZTTPS: T1005, T1081, T1060, T1112, T1082, T1053,...

Malware Analysis – djvu – 8fb143c61b306a8605ba030dec05bc31

December 22, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 8fb143c61b306a8605ba030dec05bc31SHA1: cfabdbdea3dca7112e98c23b872194ffc250618cANALYSIS DATE: 2022-12-22T15:45:43ZTTPS: T1060, T1112, T1222, T1053, T1005, T1081,...

Malware Analysis – ransomware – 2fa6b5c7adb76fe7b9ad9a6bf17ce7e2

December 22, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 2fa6b5c7adb76fe7b9ad9a6bf17ce7e2SHA1: 4c512b3e8f20f432e5684bc81f7379593d5532a8ANALYSIS DATE: 2022-12-22T15:36:03ZTTPS: T1082, T1107, T1490, T1012, T1120 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 7c8e5d5ed26a22105a98021c6d7849c2

December 22, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 7c8e5d5ed26a22105a98021c6d7849c2SHA1: d7b8d6356827b4a7de1a473864809f1550261939ANALYSIS DATE: 2022-12-22T16:02:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 1b951b32fe6f11f04203879f898dfb51

December 22, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 1b951b32fe6f11f04203879f898dfb51SHA1: 76d1edc76d25af23179e4e91db76d6cd1bebada9ANALYSIS DATE: 2022-12-22T16:40:35ZTTPS: T1060, T1112, T1082, T1053, T1005, T1081,...

Malware Analysis – discovery – 4b3f6b3f81e483bc7a46701f74115f19

December 22, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 4b3f6b3f81e483bc7a46701f74115f19SHA1: 7f9e83399649258f444571cd94bb8168b65c4751ANALYSIS DATE: 2022-12-22T17:27:35ZTTPS: T1112, T1042, T1060, T1012, T1082 ScoreMeaningExample10Known badA malware family...

Malware Analysis – smokeloader – 4172507ce19f0477213417700007af68

December 22, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 4172507ce19f0477213417700007af68SHA1: 4521462ce2b21b6c9f4b600dcf74e292e7a85c46ANALYSIS DATE: 2022-12-22T17:02:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – – b08b6219961caac74b033c88233c67f6

December 22, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: b08b6219961caac74b033c88233c67f6SHA1: f4d8c562f51537b57b7c25ff552c736c383c2d60ANALYSIS DATE: 2022-12-22T16:46:49ZTTPS: T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – wannacry – 414a3594e4a822cfb97a4326e185f620

December 22, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: 414a3594e4a822cfb97a4326e185f620SHA1: 5f1e7bc375dd8093fa987af0771e72389dad473bANALYSIS DATE: 2022-12-22T09:00:08ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – wannacry – ae12bb54af31227017feffd9598a6f5e

December 22, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: ae12bb54af31227017feffd9598a6f5eSHA1: f597a1cc16d42b7f02e077696e067cd3030a06d9ANALYSIS DATE: 2022-12-22T09:04:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – ransomware – c9b3c61c718240516a1d3b3875d8e991

December 22, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: c9b3c61c718240516a1d3b3875d8e991SHA1: 7c42c65934ffe2ae0d54a8828b04102997866fd4ANALYSIS DATE: 2022-12-22T09:22:13ZTTPS: T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – wannacry – bdbe7281ce07de64716c546fcc643136

December 22, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: bdbe7281ce07de64716c546fcc643136SHA1: 190cfdbe55603d7cb3dab330d036f5b233b8b900ANALYSIS DATE: 2022-12-22T09:01:05ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – wannacry – 98df58e71b5202e49ba6f9e6e43ef6ef

December 22, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: 98df58e71b5202e49ba6f9e6e43ef6efSHA1: 7ee6e1082c30108ae631c6193878195c1abe7112ANALYSIS DATE: 2022-12-22T09:03:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – smokeloader – a7a9d22a53682de59e66e3b00e253974

December 22, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: a7a9d22a53682de59e66e3b00e253974SHA1: bba5a75a1d4a92b91ae27de131dfa04e49ee9d98ANALYSIS DATE: 2022-12-22T09:31:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – upx – d9e180e9bc352d84a932a83d7c5e2e81

December 22, 2022

Score: 8 MALWARE FAMILY: upxTAGS:upxMD5: d9e180e9bc352d84a932a83d7c5e2e81SHA1: 937d13557efb15faea5ca5ab04ba9a23d1461b8fANALYSIS DATE: 2022-12-22T10:24:13ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 6d31cc9b3e37871d35eb45c8a5103f92

December 22, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 6d31cc9b3e37871d35eb45c8a5103f92SHA1: 1fcc7d965db0f4585604be00cad66d8c22d5978fANALYSIS DATE: 2022-12-22T10:11:29ZTTPS: T1222, T1053, T1012, T1082, T1060, T1112,...

Malware Analysis – persistence – c6925c9e1c8afc7dc6b0fdcce9e2d525

December 22, 2022

Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, upxMD5: c6925c9e1c8afc7dc6b0fdcce9e2d525SHA1: eec111ed02645456f2a4acb1eb4e74fa5ad5e614ANALYSIS DATE: 2022-12-22T09:22:30ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – smokeloader – 88d7dc05b7794c43d3139459c59887c3

December 22, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 88d7dc05b7794c43d3139459c59887c3SHA1: 22394c449abe2646eb9ad38ad21c535b24c88049ANALYSIS DATE: 2022-12-22T10:33:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis

Malware Analysis – smokeloader – 79fe9ab1a7a010786684dfbb784b7837

Malware Analysis – ransomware – b08b6219961caac74b033c88233c67f6

Malware Analysis – ransomware – c09116efea795c3170634211222aa3c9

Malware Analysis – smokeloader – 2eb56154df927e0c5fcae69ed3c11990

Malware Analysis – djvu – 9867a82df7697272a3dbfad12519aac6

Malware Analysis – djvu – 329c38dfcf60d7e05c4e28d9da5fa426

Malware Analysis – djvu – 6829e5c7db6b9b4b942cb245aaf5caf2

Malware Analysis – djvu – 8fb143c61b306a8605ba030dec05bc31

Malware Analysis – ransomware – 2fa6b5c7adb76fe7b9ad9a6bf17ce7e2

Malware Analysis – smokeloader – 7c8e5d5ed26a22105a98021c6d7849c2

Malware Analysis – djvu – 1b951b32fe6f11f04203879f898dfb51

Malware Analysis – discovery – 4b3f6b3f81e483bc7a46701f74115f19

Malware Analysis – smokeloader – 4172507ce19f0477213417700007af68

Malware Analysis – – b08b6219961caac74b033c88233c67f6

Malware Analysis – wannacry – 414a3594e4a822cfb97a4326e185f620

Malware Analysis – wannacry – ae12bb54af31227017feffd9598a6f5e

Malware Analysis – ransomware – c9b3c61c718240516a1d3b3875d8e991

Malware Analysis – wannacry – bdbe7281ce07de64716c546fcc643136

Malware Analysis – wannacry – 98df58e71b5202e49ba6f9e6e43ef6ef

Malware Analysis – smokeloader – a7a9d22a53682de59e66e3b00e253974

Malware Analysis – upx – d9e180e9bc352d84a932a83d7c5e2e81

Malware Analysis – djvu – 6d31cc9b3e37871d35eb45c8a5103f92

Malware Analysis – persistence – c6925c9e1c8afc7dc6b0fdcce9e2d525

Malware Analysis – smokeloader – 88d7dc05b7794c43d3139459c59887c3

[LYNX] – Ransomware Victim: Conad (conad[.]lan)

[RANSOMHUB] – Ransomware Victim: healthcarewithinreach[.]org

[LYNX] – Ransomware Victim: Delap & Waller

HackerOne Bug Bounty Disclosure: waf-bypass-and-java-script-incomplete-handling-of-unicode-characters-might-leads-to-dom-xss-clubbable

[FUNKSEC] – Ransomware Victim: kuzstu-nf[.]ru

You may have missed