Malware Analysis

Malware Analysis – djvu – a62132d1123af4e31d44171ab47046a9

December 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: a62132d1123af4e31d44171ab47046a9SHA1: 65344c174a79c30a4075455d106173ea2cefec3eANALYSIS DATE: 2022-12-07T11:13:13ZTTPS: T1060, T1112, T1222, T1082, T1012 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – d00508b99c98be2802ac83a02f316c3f

December 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: d00508b99c98be2802ac83a02f316c3fSHA1: d574649b203bd71556b11f212816f1b5baf23b0fANALYSIS DATE: 2022-12-07T11:26:06ZTTPS: T1005, T1081, T1012, T1222,...

Malware Analysis – djvu – dd2193abb2f82d60a7c2bf612c7ad6a0

December 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: dd2193abb2f82d60a7c2bf612c7ad6a0SHA1: 3e6de2aae3aefd649d267c4ee43f9b0bce0db667ANALYSIS DATE: 2022-12-07T11:26:06ZTTPS: T1060, T1112, T1130, T1222,...

Malware Analysis – blackbasta – 2ec0c42040440cddd1ff99ebe2b7d94f

December 7, 2022

Score: 10 MALWARE FAMILY: blackbastaTAGS:family:blackbasta, ransomwareMD5: 2ec0c42040440cddd1ff99ebe2b7d94fSHA1: bb1f269fc9c136d6caeda579482b2b8548795625ANALYSIS DATE: 2022-12-07T11:50:00ZTTPS: T1107, T1490, T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – 26f0227e22e82d1bb4b670a57a33f2e4

December 6, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, exploitMD5: 26f0227e22e82d1bb4b670a57a33f2e4SHA1: c6ce6febe356e5fcb0edfaf78f1d7f47d73c670eANALYSIS DATE: 2022-12-06T15:30:16ZTTPS: T1102, T1130, T1112, T1031, T1082, T1053, T1222, T1562, T1489...

Malware Analysis – ransomware – f8a7976ec2e40f8718d9cd41fe41bf3e

December 6, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: f8a7976ec2e40f8718d9cd41fe41bf3eSHA1: efcc65ef2b563266bc3b3e734f6afe127141f07dANALYSIS DATE: 2022-12-06T15:36:20ZTTPS: T1082, T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 6476681977308c791c3bb4ae92f92b53

December 6, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 6476681977308c791c3bb4ae92f92b53SHA1: 33ebb7c99eabf04b18ed0bab2bfee4b50f031750ANALYSIS DATE: 2022-12-06T15:51:34ZTTPS: T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – eca99585c0b8bbea7f34b26c9dcbbdc8

December 6, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: eca99585c0b8bbea7f34b26c9dcbbdc8SHA1: a2662b54492164063c60ba02c7e33c2ff08babfbANALYSIS DATE: 2022-12-06T16:18:28ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 3eec37f699a345275d8c76cb2c6757b3

December 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 3eec37f699a345275d8c76cb2c6757b3SHA1: 4ac02fa96bb5f0fdc57c180a05f3d4f587de71c0ANALYSIS DATE: 2022-12-06T16:40:12ZTTPS: T1222, T1060, T1112, T1082 ScoreMeaningExample10Known badA malware family...

Malware Analysis – ransomware – f18e1e56201d0ad2279565d85572561c

December 6, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: f18e1e56201d0ad2279565d85572561cSHA1: a43891053dfc110d15e4ad5fdba3f91d90774280ANALYSIS DATE: 2022-12-06T15:52:06ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – djvu – 2892caea283ee2c4526774b43d02ea3c

December 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 2892caea283ee2c4526774b43d02ea3cSHA1: 184928ccdc38470af7b4b8363a6796c85b4f27a8ANALYSIS DATE: 2022-12-06T09:37:01ZTTPS:...

Malware Analysis – djvu – 37693f504555f769a091f00c52f3eab4

December 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 37693f504555f769a091f00c52f3eab4SHA1: cb924b833880a6822bd9cfb30456d12c09a7ef41ANALYSIS DATE: 2022-12-06T09:17:24ZTTPS: T1082, T1012, T1005, T1081,...

Malware Analysis – persistence – d21c5963ef3b01b79b3364ee3836fd33

December 6, 2022

Score: 7 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: d21c5963ef3b01b79b3364ee3836fd33SHA1: 9703a569ea8cbd5f1b135ac8931ce64e67dc4f69ANALYSIS DATE: 2022-12-03T11:09:54ZTTPS: T1060, T1112, T1491, T1012, T1082 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – persistence – 172a3ab963d3e150845bd3b7d7047034

December 6, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 172a3ab963d3e150845bd3b7d7047034SHA1: c28b888ed5754ef5fa7876f1be66dd7675f54b76ANALYSIS DATE: 2022-12-03T11:40:51ZTTPS: T1060, T1112, T1004, T1491 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – b6e08a65972c4023436c14a359fe73af

December 6, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, upxMD5: b6e08a65972c4023436c14a359fe73afSHA1: 611847af498d29c8e2404fc7124c994c5f4085b1ANALYSIS DATE: 2022-12-03T10:15:36ZTTPS: T1082, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – evasion – 036dd9df87e9420f03b6c93e44fe6910

December 6, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 036dd9df87e9420f03b6c93e44fe6910SHA1: 5776cac2de5c46a98b645b12ba85d69b726f867cANALYSIS DATE: 2022-12-03T11:40:56ZTTPS: T1490, T1158, T1112, T1042, T1004, T1060, T1012, T1120, T1082,...

Malware Analysis – evasion – 3ab29a70acbd3b0d2c094e3ada484054

December 6, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 3ab29a70acbd3b0d2c094e3ada484054SHA1: 12d73c93755c765517f13de942817fd8d9952ec9ANALYSIS DATE: 2022-12-06T09:52:02ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – evasion – 040cb7a7191f01d4b6d2c57c936e6514

December 6, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 040cb7a7191f01d4b6d2c57c936e6514SHA1: dbf3e6ffe21d4c6a2a842d584f40f0b2253e4399ANALYSIS DATE: 2022-12-06T10:04:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – dcrat – c2b0008dd2da9de079e327b7bd4b0e7f

December 6, 2022

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealer, trojanMD5: c2b0008dd2da9de079e327b7bd4b0e7fSHA1:...

Malware Analysis – lockbit – 01f4a79d51b56f409edd387019d8b127

December 6, 2022

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, ransomwareMD5: 01f4a79d51b56f409edd387019d8b127SHA1: 7624780907ee6987ffb1fc97d8b8b7082b8d2bffANALYSIS DATE: 2022-12-06T10:23:49ZTTPS: T1491, T1112, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – b71dedbb78ea2dfe6fa072226d737438

December 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: b71dedbb78ea2dfe6fa072226d737438SHA1: f8df12dd2f96d719487115b7466697606c1340d0ANALYSIS DATE: 2022-12-06T10:26:57ZTTPS: T1222, T1053, T1005, T1081,...

Malware Analysis – dcrat – 04fc7ec17c6da18d7ecc84b5a7c9a2be

December 6, 2022

Malware Analysis – djvu – 4bc7d26b10e95174f4ccfc6c4e4a6566

December 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 4bc7d26b10e95174f4ccfc6c4e4a6566SHA1: 68019b72bd20aadb51bb19a72dd6d9cb97ec01ddANALYSIS DATE: 2022-12-06T10:37:30ZTTPS: T1012, T1222, T1053, T1005,...

Malware Analysis – evasion – c3236271644d34a1d002df30e0d51816

December 6, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: c3236271644d34a1d002df30e0d51816SHA1: bedce148afdb692bb913c741d1842bb3ad527687ANALYSIS DATE: 2022-12-06T11:43:45ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis

Malware Analysis – djvu – a62132d1123af4e31d44171ab47046a9

Malware Analysis – djvu – d00508b99c98be2802ac83a02f316c3f

Malware Analysis – djvu – dd2193abb2f82d60a7c2bf612c7ad6a0

Malware Analysis – blackbasta – 2ec0c42040440cddd1ff99ebe2b7d94f

Malware Analysis – discovery – 26f0227e22e82d1bb4b670a57a33f2e4

Malware Analysis – ransomware – f8a7976ec2e40f8718d9cd41fe41bf3e

Malware Analysis – ransomware – 6476681977308c791c3bb4ae92f92b53

Malware Analysis – ransomware – eca99585c0b8bbea7f34b26c9dcbbdc8

Malware Analysis – djvu – 3eec37f699a345275d8c76cb2c6757b3

Malware Analysis – ransomware – f18e1e56201d0ad2279565d85572561c

Malware Analysis – djvu – 2892caea283ee2c4526774b43d02ea3c

Malware Analysis – djvu – 37693f504555f769a091f00c52f3eab4

Malware Analysis – persistence – d21c5963ef3b01b79b3364ee3836fd33

Malware Analysis – persistence – 172a3ab963d3e150845bd3b7d7047034

Malware Analysis – discovery – b6e08a65972c4023436c14a359fe73af

Malware Analysis – evasion – 036dd9df87e9420f03b6c93e44fe6910

Malware Analysis – evasion – 3ab29a70acbd3b0d2c094e3ada484054

Malware Analysis – evasion – 040cb7a7191f01d4b6d2c57c936e6514

Malware Analysis – dcrat – c2b0008dd2da9de079e327b7bd4b0e7f

Malware Analysis – lockbit – 01f4a79d51b56f409edd387019d8b127

Malware Analysis – djvu – b71dedbb78ea2dfe6fa072226d737438

Malware Analysis – dcrat – 04fc7ec17c6da18d7ecc84b5a7c9a2be

Malware Analysis – djvu – 4bc7d26b10e95174f4ccfc6c4e4a6566

Malware Analysis – evasion – c3236271644d34a1d002df30e0d51816

[LYNX] – Ransomware Victim: communisis[.]com & paragon[.]world

Cobalt Strike Beacon Detected – 154[.]64[.]231[.]1:8443

Cobalt Strike Beacon Detected – 47[.]92[.]135[.]251:8443

Cobalt Strike Beacon Detected – 120[.]46[.]151[.]73:80

Cobalt Strike Beacon Detected – 51[.]79[.]214[.]246:443

You may have missed