Malware Analysis

Malware Analysis – – 26140638e7b26263ccb6060488bd66db

December 22, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 26140638e7b26263ccb6060488bd66dbSHA1: e9ffb621ae7b601c3a0e567bd8fc0c97bed71497ANALYSIS DATE: 2022-12-22T11:15:41ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 43d1e65899d0b271d1fba91b5790903c

December 22, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 43d1e65899d0b271d1fba91b5790903cSHA1: 76f798556f63316fb401b44a83209da04c7f76ffANALYSIS DATE: 2022-12-22T10:45:50ZTTPS: T1005, T1081, T1012, T1060, T1112, T1082,...

Malware Analysis – amadey – 2b79f0afb2dc42c780798c703991a6b7

December 22, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, botnet:mario23_10, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: 2b79f0afb2dc42c780798c703991a6b7SHA1: 98c46412d503e36d2178066a3ce2b24f49c280a1ANALYSIS...

Malware Analysis – evasion – 0ada88218b67a313a4f5ab0062fbc4e6

December 22, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 0ada88218b67a313a4f5ab0062fbc4e6SHA1: 15dfcef932d666fdc7501bcee357ec2aabfcfdeeANALYSIS DATE: 2022-12-21T22:21:20ZTTPS: T1004, T1112, T1107, T1490, T1082, T1088, T1089, T1491...

Malware Analysis – persistence – 155717a88626227ad8d01c821dbf71ab

December 22, 2022

Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, upxMD5: 155717a88626227ad8d01c821dbf71abSHA1: 4622f32d8c97d5a457f4e9ad58aa153acd8cbfacANALYSIS DATE: 2022-12-21T23:20:54ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – 3ca3558a8b09fb85c4ad02c9c23ccee0

December 22, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 3ca3558a8b09fb85c4ad02c9c23ccee0SHA1: c9646bc7543a3f42d471510d48324b806b07c6f6ANALYSIS DATE: 2022-12-21T22:34:34ZTTPS: T1012, T1005, T1081, T1222, T1053, T1082,...

Malware Analysis – persistence – 54919e1bd37c6431b3b1b8b6d53aabfe

December 22, 2022

Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 54919e1bd37c6431b3b1b8b6d53aabfeSHA1: c2327bab84fa0d55cc23ee5006c83f0a6dc53e4cANALYSIS DATE: 2022-12-21T22:31:04ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – djvu – 2b2f148a884ecb4e1d0e2e785d3906c0

December 22, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 2b2f148a884ecb4e1d0e2e785d3906c0SHA1: b01445b11ebadf9e8cc7f6d56aad2c262806bfe8ANALYSIS DATE: 2022-12-21T23:55:03ZTTPS: T1005, T1081, T1012, T1082, T1053, T1060,...

Malware Analysis – evasion – fd9170ec42a74eb94ad7e4d23fc793ba

December 21, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: fd9170ec42a74eb94ad7e4d23fc793baSHA1: a541035a5fdc235e19d71fa42dc53f02c9a5b379ANALYSIS DATE: 2022-12-21T16:34:21ZTTPS: T1102, T1004, T1112, T1088, T1089, T1491, T1082, T1012...

Malware Analysis – djvu – 5bb7092fb1f0adf06c2ab31aab04ae33

December 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 5bb7092fb1f0adf06c2ab31aab04ae33SHA1: a44f5a01b2786183c9d5f7f282ade30736a35254ANALYSIS DATE: 2022-12-21T16:56:06ZTTPS: T1130, T1112, T1060, T1222, T1082, T1053 ScoreMeaningExample10Known badA...

Malware Analysis – persistence – 83a31d74585bfebeadfdc651acad3159

December 21, 2022

Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 83a31d74585bfebeadfdc651acad3159SHA1: 927908c24c7b9fb067400040b6672898d2618443ANALYSIS DATE: 2022-12-21T17:44:07ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – persistence – 62212183c9d54195239f18d9c42e7407

December 21, 2022

Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, upxMD5: 62212183c9d54195239f18d9c42e7407SHA1: dee3dcb4795a6318f06d80ef110ce04fbc5f3bbaANALYSIS DATE: 2022-12-21T17:56:05ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – b3f5d8a881bf8c1c0431cb6b9747918f

December 21, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: b3f5d8a881bf8c1c0431cb6b9747918fSHA1: 7c2b61a227133ce76c2b2fa95945c82647cfb5fcANALYSIS DATE: 2022-12-21T17:48:05ZTTPS: T1082, T1107, T1490, T1012, T1120 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 1c1aa12967b3ed3043ad16c1f8d6b54f

December 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 1c1aa12967b3ed3043ad16c1f8d6b54fSHA1: dba7f6324ef35a521e136230a5f2b9686c7b2150ANALYSIS DATE: 2022-12-21T17:51:07ZTTPS: T1222, T1082, T1053, T1130, T1112, T1060 ScoreMeaningExample10Known badA...

Malware Analysis – persistence – 7fc1d33734cbae90767ee85c6afee623

December 21, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 7fc1d33734cbae90767ee85c6afee623SHA1: e00adfff94436788d5d77b55967b6ec0b79052b5ANALYSIS DATE: 2022-12-21T09:33:00ZTTPS: T1107, T1490, T1060, T1112, T1130, T1005, T1081, T1491...

Malware Analysis – evasion – fe3779bf7474628cfa2f81fffa20debc

December 21, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: fe3779bf7474628cfa2f81fffa20debcSHA1: 0174c851e3519fcb0e615763447a7e34b34abbeaANALYSIS DATE: 2022-12-21T09:24:02ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – neshta – a5be3dec76f0d6a6c94dae71f9280754

December 21, 2022

Score: 10 MALWARE FAMILY: neshtaTAGS:family:neshta, persistence, ransomware, spyware, stealer, upxMD5: a5be3dec76f0d6a6c94dae71f9280754SHA1: 0f69eba986bc00a49823a07343b845c1331afeabANALYSIS DATE: 2022-12-21T10:19:15ZTTPS: T1112, T1042, T1491, T1005, T1081, T1082...

Malware Analysis – discovery – 193cbda4598fe61c69b538416fb78aa1

December 21, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, exploit, persistenceMD5: 193cbda4598fe61c69b538416fb78aa1SHA1: 7f8546a917732a4daf146b818fdb7c14b25df3baANALYSIS DATE: 2022-12-21T10:19:28ZTTPS: T1222, T1004, T1112, T1082 ScoreMeaningExample10Known badA malware family...

Malware Analysis – mafiaware666 – 2ef92f8ab2b6820d6eb559167676c1f4

December 21, 2022

Score: 10 MALWARE FAMILY: mafiaware666TAGS:family:mafiaware666, ransomwareMD5: 2ef92f8ab2b6820d6eb559167676c1f4SHA1: 628121779da83ae14822129da6c14b2bfbb2f7d1ANALYSIS DATE: 2022-12-21T10:20:12ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – discovery – 54b7902f04e0f2f073352e5cd8f460f0

December 21, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, evasion, exploitMD5: 54b7902f04e0f2f073352e5cd8f460f0SHA1: cd794b02eaa48fd22a79427bb663ad01a8463323ANALYSIS DATE: 2022-12-21T10:16:47ZTTPS: T1082, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – f3c08764e6566a1fbf375b339f7560f9

December 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: f3c08764e6566a1fbf375b339f7560f9SHA1: ed1f5cd00a2773a0666d79e538bf3e00d85ed4adANALYSIS DATE: 2022-12-21T11:19:32ZTTPS: T1005, T1081, T1060, T1112, T1012, T1082,...

Malware Analysis – djvu – ceb30f3c9d50ea45824f0359c91837c8

December 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: ceb30f3c9d50ea45824f0359c91837c8SHA1: 5666d338d62810c792333be7218e13ce6cd1771cANALYSIS DATE: 2022-12-21T10:22:39ZTTPS: T1053, T1005, T1081, T1060, T1112, T1082,...

Malware Analysis – djvu – 189322ec83e2260f2d52038bf33051a2

December 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 189322ec83e2260f2d52038bf33051a2SHA1: 14f3eef459c9ab8e36e3ebb8d2a29f24efa67d92ANALYSIS DATE: 2022-12-21T10:53:34ZTTPS: T1082, T1012, T1060, T1112, T1222, T1053,...

Malware Analysis – mespinoza – 4dc8cae2cfff6ac862aea48b014937bb

December 21, 2022

Score: 10 MALWARE FAMILY: mespinozaTAGS:family:mespinoza, ransomware, spyware, stealerMD5: 4dc8cae2cfff6ac862aea48b014937bbSHA1: 80486ca4caa5cb4ce42885dcd66d7a1b4a27d5ceANALYSIS DATE: 2022-12-21T10:49:31ZTTPS: T1112, T1012, T1486, T1082, T1005, T1081 ScoreMeaningExample10Known badA...

Malware Analysis

Malware Analysis – – 26140638e7b26263ccb6060488bd66db

Malware Analysis – djvu – 43d1e65899d0b271d1fba91b5790903c

Malware Analysis – amadey – 2b79f0afb2dc42c780798c703991a6b7

Malware Analysis – evasion – 0ada88218b67a313a4f5ab0062fbc4e6

Malware Analysis – persistence – 155717a88626227ad8d01c821dbf71ab

Malware Analysis – djvu – 3ca3558a8b09fb85c4ad02c9c23ccee0

Malware Analysis – persistence – 54919e1bd37c6431b3b1b8b6d53aabfe

Malware Analysis – djvu – 2b2f148a884ecb4e1d0e2e785d3906c0

Malware Analysis – evasion – fd9170ec42a74eb94ad7e4d23fc793ba

Malware Analysis – djvu – 5bb7092fb1f0adf06c2ab31aab04ae33

Malware Analysis – persistence – 83a31d74585bfebeadfdc651acad3159

Malware Analysis – persistence – 62212183c9d54195239f18d9c42e7407

Malware Analysis – ransomware – b3f5d8a881bf8c1c0431cb6b9747918f

Malware Analysis – djvu – 1c1aa12967b3ed3043ad16c1f8d6b54f

Malware Analysis – persistence – 7fc1d33734cbae90767ee85c6afee623

Malware Analysis – evasion – fe3779bf7474628cfa2f81fffa20debc

Malware Analysis – neshta – a5be3dec76f0d6a6c94dae71f9280754

Malware Analysis – discovery – 193cbda4598fe61c69b538416fb78aa1

Malware Analysis – mafiaware666 – 2ef92f8ab2b6820d6eb559167676c1f4

Malware Analysis – discovery – 54b7902f04e0f2f073352e5cd8f460f0

Malware Analysis – djvu – f3c08764e6566a1fbf375b339f7560f9

Malware Analysis – djvu – ceb30f3c9d50ea45824f0359c91837c8

Malware Analysis – djvu – 189322ec83e2260f2d52038bf33051a2

Malware Analysis – mespinoza – 4dc8cae2cfff6ac862aea48b014937bb

HackerOne Bug Bounty Disclosure: waf-bypass-and-java-script-incomplete-handling-of-unicode-characters-might-leads-to-dom-xss-clubbable

[FUNKSEC] – Ransomware Victim: kuzstu-nf[.]ru

[FUNKSEC] – Ransomware Victim: mymobileforms app

CISA: CISA and US and International Partners Publish Guidance on Priority Considerations in Product Selection for OT Owners and Operators

[RANSOMHUB] – Ransomware Victim: mi[.]edu

You may have missed