Malware Analysis

Malware Analysis – neshta – 6aa9acfb386ff6673ed8bd77c459ea5b

December 19, 2022

Score: 10 MALWARE FAMILY: neshtaTAGS:family:neshta, family:phobos, evasion, persistence, ransomware, spyware, stealerMD5: 6aa9acfb386ff6673ed8bd77c459ea5bSHA1: 77e9926caeaf7bd23b832069384e1c02dd4ff78eANALYSIS DATE: 2022-12-19T17:18:03ZTTPS: T1490, T1059, T1107, T1005, T1081,...

Malware Analysis – djvu – 9206dd64291b57ef64ea8fc15cb77b62

December 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 9206dd64291b57ef64ea8fc15cb77b62SHA1: 5ca61612241c01ee04cfeebcff6cdb8ab35051e0ANALYSIS DATE: 2022-12-19T17:26:22ZTTPS: T1053, T1005, T1081, T1012, T1060, T1112,...

Malware Analysis – ransomware – 0ca54a12dfeb248b5c0c2400ec288266

December 19, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 0ca54a12dfeb248b5c0c2400ec288266SHA1: 9ef4d6cdc12fd7451dee17088de7adc85ffcc7caANALYSIS DATE: 2022-12-19T16:52:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 6512331eb3bda65b6ae1205d0633a1e1

December 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 6512331eb3bda65b6ae1205d0633a1e1SHA1: 5ffe12c70577d58db50393b83599c3227c877282ANALYSIS DATE: 2022-12-19T17:05:50ZTTPS: T1005, T1081, T1222, T1082, T1012, T1053,...

Malware Analysis – djvu – 4d0d3ce86f2f7edc9cf08d3393e516e3

December 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 4d0d3ce86f2f7edc9cf08d3393e516e3SHA1: c1dcb2c412f0512adcd8e287ca332435e0672818ANALYSIS DATE: 2022-12-19T17:30:57ZTTPS: T1222, T1082, T1053, T1130, T1112, T1060 ScoreMeaningExample10Known badA...

Malware Analysis – persistence – e27b637abe523503b19e6b57b95489ea

December 19, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: e27b637abe523503b19e6b57b95489eaSHA1: 875c3af49522b74045c7ac5cc7f07308e6091b02ANALYSIS DATE: 2022-12-19T17:46:04ZTTPS: T1060, T1112, T1082, T1012, T1120 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – evasion – fbb796cc4209793257bc08943e9bfa29

December 19, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: fbb796cc4209793257bc08943e9bfa29SHA1: 5200d89104d66cab7ee6418e1dc5eccc13bc5193ANALYSIS DATE: 2022-12-19T17:46:03ZTTPS: T1082, T1491, T1112, T1004, T1070, T1060, T1012, T1120, T1490...

Malware Analysis – djvu – 9228f870c82e0b331680b9fe90486722

December 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 9228f870c82e0b331680b9fe90486722SHA1: f91f48f62bff5b8291589ccc150c7e8339daf66eANALYSIS DATE: 2022-12-19T17:50:17ZTTPS: T1060, T1112, T1082, T1005, T1081, T1012,...

Malware Analysis – smokeloader – f2c597e9fa52dd47f91af87220519dac

December 19, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: f2c597e9fa52dd47f91af87220519dacSHA1: ac1f095102f466d2672a4c3f71ab4f5479d639d5ANALYSIS DATE: 2022-12-19T09:20:06ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – chaos – b89623caba31b7994735f4f5bf437fcd

December 19, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, persistence, ransomware, spyware, stealerMD5: b89623caba31b7994735f4f5bf437fcdSHA1: 12687458b19ec21ba567ac2bc974434a55855b64ANALYSIS DATE: 2022-12-19T09:27:10ZTTPS: T1490, T1059, T1107, T1005, T1081, T1060,...

Malware Analysis – evasion – f9e572211e62a06b45cff719e1dd20bd

December 19, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomware, trojanMD5: f9e572211e62a06b45cff719e1dd20bdSHA1: c08dd725ccb50eddae75e2eaba3c085384b5aba5ANALYSIS DATE: 2022-12-19T09:27:09ZTTPS: T1053, T1107, T1490, T1082, T1031, T1112, T1089, T1012, T1120...

Malware Analysis – phobos – 9d698f5fb023c21b0629273b0ef42594

December 19, 2022

Score: 10 MALWARE FAMILY: phobosTAGS:family:phobos, evasion, persistence, ransomware, spyware, stealerMD5: 9d698f5fb023c21b0629273b0ef42594SHA1: 76ba11bfc956c6c68b8d34731f6573e308d6771bANALYSIS DATE: 2022-12-19T09:27:10ZTTPS: T1490, T1059, T1107, T1031, T1005, T1081,...

Malware Analysis – chaos – 79c1db9230bdd5766b516156f84c89a9

December 19, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, persistence, ransomware, spyware, stealerMD5: 79c1db9230bdd5766b516156f84c89a9SHA1: 82ac99d111262b7440fbb47824214d4efd033c8cANALYSIS DATE: 2022-12-19T09:27:10ZTTPS: T1490, T1059, T1107, T1491, T1112, T1082,...

Malware Analysis – phobos – c103ec06780900e31e8f2b7eef87367c

December 19, 2022

Score: 10 MALWARE FAMILY: phobosTAGS:family:phobos, evasion, persistence, ransomware, spyware, stealerMD5: c103ec06780900e31e8f2b7eef87367cSHA1: b154ab6d401c53e43e7fafa757e96cf0a86a044fANALYSIS DATE: 2022-12-19T09:27:11ZTTPS: T1490, T1059, T1107, T1005, T1081, T1112,...

Malware Analysis – evasion – d079c0fa48fce0e934ba91eb9aaa1371

December 19, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: d079c0fa48fce0e934ba91eb9aaa1371SHA1: b83fbd591c980e6f76b417f12cbbe98757156483ANALYSIS DATE: 2022-12-19T09:27:11ZTTPS: T1107, T1490, T1031, T1082, T1060, T1112, T1053, T1089,...

Malware Analysis – phobos – 578244d3c1afbe8009f04bbc9eb54076

December 19, 2022

Score: 10 MALWARE FAMILY: phobosTAGS:family:phobos, evasion, persistence, ransomware, spyware, stealerMD5: 578244d3c1afbe8009f04bbc9eb54076SHA1: 83c1841f67d81d90aec1217766721bbb6856973eANALYSIS DATE: 2022-12-19T09:27:11ZTTPS: T1490, T1059, T1107, T1112, T1060, T1082,...

Malware Analysis – chaos – be7f1f1945fb7f3b6fa92e38cc466619

December 19, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, persistence, ransomware, spyware, stealerMD5: be7f1f1945fb7f3b6fa92e38cc466619SHA1: 7cffcbbbadaebd23ffecba0d40dc0290ba528603ANALYSIS DATE: 2022-12-19T09:27:10ZTTPS: T1490, T1059, T1107, T1491, T1112, T1082,...

Malware Analysis – evasion – cb1ba70812eda56152bd1e2186acabe9

December 19, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: cb1ba70812eda56152bd1e2186acabe9SHA1: 0416d3296a3e4ad7b3746d01f79c13f1166a6a3fANALYSIS DATE: 2022-12-19T09:27:11ZTTPS: T1107, T1490, T1082, T1112, T1031, T1562, T1489, T1012, T1120,...

Malware Analysis – djvu – c4c212e00c54bd667019ed5709b8724d

December 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: c4c212e00c54bd667019ed5709b8724dSHA1: 22974e6a95ec64e983c78bba8c3850586aa34619ANALYSIS DATE: 2022-12-19T11:05:05ZTTPS: T1012, T1082, T1053, T1060, T1112, T1222,...

Malware Analysis – ransomware – 432ef25107f4c29775ecc469699d02fb

December 19, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 432ef25107f4c29775ecc469699d02fbSHA1: c74dc4765adcf729367068b4570ca3ea1bba7e0dANALYSIS DATE: 2022-12-19T10:39:33ZTTPS: T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – 3d9531b21a5f0bbe636ebf64b03a31ef

December 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 3d9531b21a5f0bbe636ebf64b03a31efSHA1: 52fc6c5274ef4d649873f075eb9d0b9d7af7772eANALYSIS DATE: 2022-12-19T10:27:33ZTTPS: T1082, T1053, T1005, T1081, T1012, T1060,...

Malware Analysis – djvu – 0c246c9724d37db8e1e388eb7b67b4d6

December 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 0c246c9724d37db8e1e388eb7b67b4d6SHA1: 53ef66867056199d75cdf1b093e9662b9032aaafANALYSIS DATE: 2022-12-19T04:02:03ZTTPS: T1222, T1053, T1005, T1081, T1012, T1060,...

Malware Analysis – djvu – 116ebb1279a72d75e1913df07145b5f6

December 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 116ebb1279a72d75e1913df07145b5f6SHA1: 56d17ed186a8469a032d9041298a7239549930cbANALYSIS DATE: 2022-12-19T04:12:15ZTTPS: T1130, T1112, T1060, T1222, T1082, T1053 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – cc51027fe809014366bdb0d51177353a

December 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: cc51027fe809014366bdb0d51177353aSHA1: 320ac83c8b3caad29abb48e6aa04a962a7ba1e15ANALYSIS DATE: 2022-12-19T04:34:54ZTTPS: T1130, T1112, T1060, T1222, T1082, T1053 ScoreMeaningExample10Known badA...

Malware Analysis

Malware Analysis – neshta – 6aa9acfb386ff6673ed8bd77c459ea5b

Malware Analysis – djvu – 9206dd64291b57ef64ea8fc15cb77b62

Malware Analysis – ransomware – 0ca54a12dfeb248b5c0c2400ec288266

Malware Analysis – djvu – 6512331eb3bda65b6ae1205d0633a1e1

Malware Analysis – djvu – 4d0d3ce86f2f7edc9cf08d3393e516e3

Malware Analysis – persistence – e27b637abe523503b19e6b57b95489ea

Malware Analysis – evasion – fbb796cc4209793257bc08943e9bfa29

Malware Analysis – djvu – 9228f870c82e0b331680b9fe90486722

Malware Analysis – smokeloader – f2c597e9fa52dd47f91af87220519dac

Malware Analysis – chaos – b89623caba31b7994735f4f5bf437fcd

Malware Analysis – evasion – f9e572211e62a06b45cff719e1dd20bd

Malware Analysis – phobos – 9d698f5fb023c21b0629273b0ef42594

Malware Analysis – chaos – 79c1db9230bdd5766b516156f84c89a9

Malware Analysis – phobos – c103ec06780900e31e8f2b7eef87367c

Malware Analysis – evasion – d079c0fa48fce0e934ba91eb9aaa1371

Malware Analysis – phobos – 578244d3c1afbe8009f04bbc9eb54076

Malware Analysis – chaos – be7f1f1945fb7f3b6fa92e38cc466619

Malware Analysis – evasion – cb1ba70812eda56152bd1e2186acabe9

Malware Analysis – djvu – c4c212e00c54bd667019ed5709b8724d

Malware Analysis – ransomware – 432ef25107f4c29775ecc469699d02fb

Malware Analysis – djvu – 3d9531b21a5f0bbe636ebf64b03a31ef

Malware Analysis – djvu – 0c246c9724d37db8e1e388eb7b67b4d6

Malware Analysis – djvu – 116ebb1279a72d75e1913df07145b5f6

Malware Analysis – djvu – cc51027fe809014366bdb0d51177353a

Cobalt Strike Beacon Detected – 157[.]230[.]12[.]133:443

Cobalt Strike Beacon Detected – 157[.]230[.]12[.]133:80

Cobalt Strike Beacon Detected – 47[.]115[.]37[.]217:10010

Cobalt Strike Beacon Detected – 193[.]122[.]74[.]238:443

CVE Alert: CVE-2024-47796

You may have missed