Malware Analysis

Malware Analysis – azov – ee32cd429bf51adb85a95fd5af43919d

December 21, 2022

Score: 10 MALWARE FAMILY: azovTAGS:family:azov, persistence, ransomware, wiperMD5: ee32cd429bf51adb85a95fd5af43919dSHA1: 58a2ee84e32b24ca3918ee34cf87be1c79708438ANALYSIS DATE: 2022-12-21T05:26:53ZTTPS: T1060, T1112, T1012, T1120, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 2086be8d2ae73f57218e3d7d8b5a281c

December 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 2086be8d2ae73f57218e3d7d8b5a281cSHA1: 8d113362741f63f492a300bd758bb4ec418d0c18ANALYSIS DATE: 2022-12-21T03:50:48ZTTPS: T1222, T1053, T1005, T1081, T1012, T1082,...

Malware Analysis – persistence – e39422f1a4cb873d35500140cffdd061

December 21, 2022

Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: e39422f1a4cb873d35500140cffdd061SHA1: 85704350976e882af8ea439df6d237103e233f74ANALYSIS DATE: 2022-12-21T05:30:06ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – persistence – 2f33b9393d38762bd981dbede2389ca6

December 21, 2022

Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 2f33b9393d38762bd981dbede2389ca6SHA1: 9e398d63c5c1f6d42b08c60f7d29366b8d3df901ANALYSIS DATE: 2022-12-21T05:30:05ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – djvu – 5a8830c77d5640038b4ac92972f508fb

December 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 5a8830c77d5640038b4ac92972f508fbSHA1: ff7bd39b06a87adb62d5e616758aa457cc324a28ANALYSIS DATE: 2022-12-21T05:39:33ZTTPS: T1222, T1053, T1005, T1081, T1060, T1112,...

Malware Analysis – persistence – 34b7f6870d28447885d2ff2781645dd5

December 21, 2022

Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, upxMD5: 34b7f6870d28447885d2ff2781645dd5SHA1: d587ed39901accd9c71fe1fab25fe25d4a1f674cANALYSIS DATE: 2022-12-21T05:34:28ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – makop – 6a956731b3677dd9d4d18641d40532ab

December 20, 2022

Score: 10 MALWARE FAMILY: makopTAGS:family:makop, ransomware, spyware, stealerMD5: 6a956731b3677dd9d4d18641d40532abSHA1: 1994ee0b381c5528d5b5c01fb97a14b5ff81e5a5ANALYSIS DATE: 2022-12-20T17:44:04ZTTPS: T1059, T1107, T1490, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – play – 57bcb8cfad510109f7ddedf045e86a70

December 20, 2022

Score: 10 MALWARE FAMILY: playTAGS:family:play, ransomware, spyware, stealerMD5: 57bcb8cfad510109f7ddedf045e86a70SHA1: e6c381859f53d0c0db9fcd30fa601ecb935b93e0ANALYSIS DATE: 2022-12-20T15:47:27ZTTPS: T1005, T1081, T1012, T1120, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 98f766d73ebce6d6f50e096bf91de915

December 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 98f766d73ebce6d6f50e096bf91de915SHA1: 66995579b886ad37ca5b6a60251f40c756177dcaANALYSIS DATE: 2022-12-20T16:15:06ZTTPS: T1060, T1112, T1082, T1053, T1012, T1222,...

Malware Analysis – djvu – daf392649efbbfda72d564e792a21679

December 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: daf392649efbbfda72d564e792a21679SHA1: a8e8d94c5887ef837c812a51e528d3244493d98cANALYSIS DATE: 2022-12-20T16:49:37ZTTPS: T1222, T1082, T1005, T1081, T1012, T1060,...

Malware Analysis – djvu – a921630469b9a90ee06e2eb1162518d0

December 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: a921630469b9a90ee06e2eb1162518d0SHA1: 285f2fe0ccd5404066abd5aa2e2cdc35e8fcbd55ANALYSIS DATE: 2022-12-20T10:21:55ZTTPS: T1222, T1082, T1005, T1081, T1012, T1060,...

Malware Analysis – evasion – 39be65c8a26732e90364ad5c6f98986e

December 20, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 39be65c8a26732e90364ad5c6f98986eSHA1: 1d66f11969008d4d4fde5e896b9764d9192fb158ANALYSIS DATE: 2022-12-20T09:10:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – banker – 09edc47eee95bc8e6e70faf20da6c3fd

December 20, 2022

Score: 8 MALWARE FAMILY: bankerTAGS:banker, evasion, ransomwareMD5: 09edc47eee95bc8e6e70faf20da6c3fdSHA1: 5925a3b50d251718609a7bf8dbc8bcd8e6fe2fc5ANALYSIS DATE: 2022-12-20T11:33:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – 6c84cd55dc9d322cbac397f90f9a94d0

December 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 6c84cd55dc9d322cbac397f90f9a94d0SHA1: 7c39f89906feabc5d8218f5d627aa150052138b4ANALYSIS DATE: 2022-12-20T10:36:34ZTTPS: T1222, T1005, T1081, T1053, T1012, T1082,...

Malware Analysis – persistence – dc4ae2105938cb68c5b6988465e13da1

December 20, 2022

Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: dc4ae2105938cb68c5b6988465e13da1SHA1: 4bf9313e1b4f51df9b94cf73e36adb53f8c29ac0ANALYSIS DATE: 2022-12-20T10:31:05ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – ryuk – f62bb82db62dd6b80908dcd79ea51fb2

December 20, 2022

Score: 10 MALWARE FAMILY: ryukTAGS:family:ryuk, discovery, evasion, persistence, ransomwareMD5: f62bb82db62dd6b80908dcd79ea51fb2SHA1: e635ba1b935adf31ffd055d71884098567b3dd4fANALYSIS DATE: 2022-12-20T10:41:33ZTTPS: T1490, T1112, T1082, T1222, T1107, T1060 ScoreMeaningExample10Known...

Malware Analysis – djvu – 556bc8de79990e475f7131028e98ea2f

December 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 556bc8de79990e475f7131028e98ea2fSHA1: b3c27bb39c09ce4c60cf379e36801e11c155b16dANALYSIS DATE: 2022-12-19T23:36:54ZTTPS: T1060, T1112, T1222, T1053, T1005, T1081,...

Malware Analysis – ryuk – 154b73d0a7aa19df12364a78b235f29f

December 20, 2022

Score: 10 MALWARE FAMILY: ryukTAGS:family:ryuk, discovery, evasion, ransomwareMD5: 154b73d0a7aa19df12364a78b235f29fSHA1: 5e39ad8cd8f05d29b7587a876c318be5c0511dccANALYSIS DATE: 2022-12-19T22:04:54ZTTPS: T1490, T1059, T1107, T1222, T1053, T1158, T1012, T1120,...

Malware Analysis – venus – f62590e838b1d13960abb6b363e03ed9

December 20, 2022

Score: 10 MALWARE FAMILY: venusTAGS:family:venus, evasion, persistence, ransomwareMD5: f62590e838b1d13960abb6b363e03ed9SHA1: 66f706a7d39038964471e0a009a76e0f978fb075ANALYSIS DATE: 2022-12-19T21:53:03ZTTPS: T1060, T1112, T1031, T1082, T1018, T1012, T1120 ScoreMeaningExample10Known...

Malware Analysis – djvu – 932e1fdc587695a02489692332c32522

December 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 932e1fdc587695a02489692332c32522SHA1: a47ec9890ca5e3cf0f030c0deb117a9cabd1ffeaANALYSIS DATE: 2022-12-19T21:52:51ZTTPS: T1082, T1012, T1053, T1005, T1081, T1060,...

Malware Analysis – djvu – 2e7c9cc96fafadb85f03fe0e0d70dbe8

December 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 2e7c9cc96fafadb85f03fe0e0d70dbe8SHA1: cc1aca4021dc1d383b4b2bd55db789b08911e750ANALYSIS DATE: 2022-12-19T16:43:35ZTTPS: T1222, T1082, T1053, T1130, T1112, T1060 ScoreMeaningExample10Known badA...

Malware Analysis – smokeloader – 048c5750cce12e02e62aa2f2b961629d

December 19, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 048c5750cce12e02e62aa2f2b961629dSHA1: f3ada2cb30bb9425ceab9ebc7e862f632c2e1629ANALYSIS DATE: 2022-12-19T15:53:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – 620a33b990761a4802b82b6ce657620a

December 19, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 620a33b990761a4802b82b6ce657620aSHA1: 605b2d0c16e0a903118012e5dfc05165114cf816ANALYSIS DATE: 2022-12-19T16:29:34ZTTPS: T1012, T1082, T1060 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – f9f07daa6ac03183f15c467ac8458946

December 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: f9f07daa6ac03183f15c467ac8458946SHA1: ad43ea762aab0e8da955e58dabd42d7d840ffcbdANALYSIS DATE: 2022-12-19T15:01:38ZTTPS: T1005, T1081, T1222, T1082, T1012, T1053,...

Malware Analysis

Malware Analysis – azov – ee32cd429bf51adb85a95fd5af43919d

Malware Analysis – djvu – 2086be8d2ae73f57218e3d7d8b5a281c

Malware Analysis – persistence – e39422f1a4cb873d35500140cffdd061

Malware Analysis – persistence – 2f33b9393d38762bd981dbede2389ca6

Malware Analysis – djvu – 5a8830c77d5640038b4ac92972f508fb

Malware Analysis – persistence – 34b7f6870d28447885d2ff2781645dd5

Malware Analysis – makop – 6a956731b3677dd9d4d18641d40532ab

Malware Analysis – play – 57bcb8cfad510109f7ddedf045e86a70

Malware Analysis – djvu – 98f766d73ebce6d6f50e096bf91de915

Malware Analysis – djvu – daf392649efbbfda72d564e792a21679

Malware Analysis – djvu – a921630469b9a90ee06e2eb1162518d0

Malware Analysis – evasion – 39be65c8a26732e90364ad5c6f98986e

Malware Analysis – banker – 09edc47eee95bc8e6e70faf20da6c3fd

Malware Analysis – djvu – 6c84cd55dc9d322cbac397f90f9a94d0

Malware Analysis – persistence – dc4ae2105938cb68c5b6988465e13da1

Malware Analysis – ryuk – f62bb82db62dd6b80908dcd79ea51fb2

Malware Analysis – djvu – 556bc8de79990e475f7131028e98ea2f

Malware Analysis – ryuk – 154b73d0a7aa19df12364a78b235f29f

Malware Analysis – venus – f62590e838b1d13960abb6b363e03ed9

Malware Analysis – djvu – 932e1fdc587695a02489692332c32522

Malware Analysis – djvu – 2e7c9cc96fafadb85f03fe0e0d70dbe8

Malware Analysis – smokeloader – 048c5750cce12e02e62aa2f2b961629d

Malware Analysis – discovery – 620a33b990761a4802b82b6ce657620a

Malware Analysis – djvu – f9f07daa6ac03183f15c467ac8458946

Cobalt Strike Beacon Detected – 157[.]230[.]12[.]133:443

Cobalt Strike Beacon Detected – 157[.]230[.]12[.]133:80

Cobalt Strike Beacon Detected – 47[.]115[.]37[.]217:10010

Cobalt Strike Beacon Detected – 193[.]122[.]74[.]238:443

CVE Alert: CVE-2024-47796

You may have missed