Malware Analysis

Malware Analysis – evasion – 145c6884b6a10468427e955b1a03b94d

December 2, 2022

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 145c6884b6a10468427e955b1a03b94dSHA1: 84dadbb0715a9500e4b30ac4b2ba7426d2aac313ANALYSIS DATE: 2022-11-30T13:26:16ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – wannacry – f27d3943f18548c0f2d572d63e120493

December 2, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: f27d3943f18548c0f2d572d63e120493SHA1: f0c965e91bd85b2b551331011c705eb3cc125186ANALYSIS DATE: 2022-11-30T13:27:41ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – wannacry – 3e1f1ab7eb22b54d451f764377d869ab

December 2, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: 3e1f1ab7eb22b54d451f764377d869abSHA1: 0ef805454a7aeb92e5be18457fe430f22186fbc4ANALYSIS DATE: 2022-11-30T13:26:37ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – wannacry – 38a3377280ad3182ab1541c841add640

December 2, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: 38a3377280ad3182ab1541c841add640SHA1: 86b486bbcbeca9d821af505d2c0fde1c3a73ab2eANALYSIS DATE: 2022-11-30T13:38:45ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – wannacry – e84c448866510eda6067f0a05ec7fc9f

December 2, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: e84c448866510eda6067f0a05ec7fc9fSHA1: cc014fed744e1a0b60433d2560043e29c2bc20ceANALYSIS DATE: 2022-11-30T13:30:21ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – wannacry – 57037023aa242dd371925bd35e219cbf

December 2, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: 57037023aa242dd371925bd35e219cbfSHA1: 7635c9f426a7e7edb7882da5b3a617fc7258d82cANALYSIS DATE: 2022-11-30T13:44:29ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – wannacry – a21d4584249c8a967dfe46bfea9ef0a8

December 2, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: a21d4584249c8a967dfe46bfea9ef0a8SHA1: 1ce331c853b650fef398f1b7ae05f16430e6fa49ANALYSIS DATE: 2022-11-30T13:43:05ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – wannacry – ed7f40e4e7ba70381d580a5ce8247ea1

December 2, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: ed7f40e4e7ba70381d580a5ce8247ea1SHA1: ca4bacd7fc40b8ddcb6f5623b21614cac16bbd52ANALYSIS DATE: 2022-11-30T14:03:29ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – wannacry – 7bf0fb013eef78b55c39cbc62339e4a5

December 2, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: 7bf0fb013eef78b55c39cbc62339e4a5SHA1: 1fa5586c2884c5b5cc6bc99c7a2ce0e49b93d7d2ANALYSIS DATE: 2022-11-30T14:05:57ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – wannacry – 8f5f214c98f0287f8ef9ecc18e1fab41

December 2, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: 8f5f214c98f0287f8ef9ecc18e1fab41SHA1: 220239a1acde4883173708d67b28a1757617b30aANALYSIS DATE: 2022-11-30T14:07:06ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – wannacry – ed7cd9ddd0c1e1cf38f59e9e664d080f

December 2, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: ed7cd9ddd0c1e1cf38f59e9e664d080fSHA1: 6b09a1cb5f9f43bd961176c90ace84a3030aff04ANALYSIS DATE: 2022-11-30T13:50:05ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – evasion – 80a2944d792c27417c3b06c3183626dc

December 2, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 80a2944d792c27417c3b06c3183626dcSHA1: 9f76c8445c658720085784e1c38fb9616b5aa781ANALYSIS DATE: 2022-12-02T09:05:12ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – adware – eeeaf6060eb054b3cb226489772d16a1

December 2, 2022

Score: 10 MALWARE FAMILY: adwareTAGS:adware, bootkit, discovery, evasion, persistence, ransomware, spyware, stealer, trojanMD5: eeeaf6060eb054b3cb226489772d16a1SHA1: 31bd0c26984708b894e0f917a10264fdd74ecab9ANALYSIS DATE: 2022-12-02T08:33:48ZTTPS: T1012, T1082, T1060,...

Malware Analysis – djvu – 84e10f7f6ff7d48611fc44cc9d6cf2f4

December 2, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 84e10f7f6ff7d48611fc44cc9d6cf2f4SHA1: 7fd0d6f299baabc35efcaa83f7e7749d3a7297adANALYSIS DATE: 2022-12-02T10:07:32ZTTPS: T1130, T1112, T1060, T1222, T1082, T1012 ScoreMeaningExample10Known badA...

Malware Analysis – sodinokibi – a3749c66f65d247d8a6fae1be26d3ef9

December 2, 2022

Score: 10 MALWARE FAMILY: sodinokibiTAGS:family:sodinokibi, botnet:5, campaign:367, ransomwareMD5: a3749c66f65d247d8a6fae1be26d3ef9SHA1: c394464bba56e62ddfe2c9073932fb656fb78b6cANALYSIS DATE: 2022-12-02T09:48:15ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – ransomware – 09c09f6890098c4686b55b1af5a4494c

December 2, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 09c09f6890098c4686b55b1af5a4494cSHA1: e252aafe3a5de030f1ae49f86bd1e1b4743b7ddeANALYSIS DATE: 2022-12-02T11:29:22ZTTPS: T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – 4eba652fcb08f677765760fd3b9af02f

December 2, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 4eba652fcb08f677765760fd3b9af02fSHA1: e49b8d2a70975897d664e38ab55c970b07f734b3ANALYSIS DATE: 2022-12-02T10:25:57ZTTPS: T1060, T1112, T1222, T1082, T1012, T1130 ScoreMeaningExample10Known badA...

Malware Analysis – amadey – df551c1f4b32c3c1bba785c23297b62c

December 2, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: df551c1f4b32c3c1bba785c23297b62cSHA1: f522481eb37575d29c62a5dae2c7c9c9412356c6ANALYSIS DATE:...

Malware Analysis – amadey – c05a5e1f0fe1ada0824c6ed62d7c1014

December 2, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: c05a5e1f0fe1ada0824c6ed62d7c1014SHA1: 6cd88375eb41aa2bf5628fe64585df698c24a5bbANALYSIS DATE:...

Malware Analysis – globeimposter – d0c67160c740f62c25b0558e9563a824

December 2, 2022

Score: 10 MALWARE FAMILY: globeimposterTAGS:family:globeimposter, persistence, ransomware, spyware, stealerMD5: d0c67160c740f62c25b0558e9563a824SHA1: 5b6515fb1d1e8581d4f70b03e25053051621656fANALYSIS DATE: 2022-12-02T03:36:30ZTTPS: T1005, T1081, T1060, T1112 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – 197a5d55e3602be8fbafdad373021886

December 2, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 197a5d55e3602be8fbafdad373021886SHA1: ff8321ebff95c3706847696c1515974db64ddec9ANALYSIS DATE: 2022-11-30T09:51:43ZTTPS: T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – dcrat – fd16369ea0ae1958caa9cd09fc114704

December 2, 2022

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealer, trojanMD5: fd16369ea0ae1958caa9cd09fc114704SHA1:...

Malware Analysis – persistence – a735ff10e359539181c1eca593091ee6

December 2, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: a735ff10e359539181c1eca593091ee6SHA1: 8a977618d315bfacb16afbe883e04f427311cefbANALYSIS DATE: 2022-12-02T03:36:25ZTTPS: T1012, T1082, T1120, T1060, T1112 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – djvu – d45513c2e1be1a29339c921168c8cd19

December 2, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: d45513c2e1be1a29339c921168c8cd19SHA1: 4b8bb78467ad97740cc6cbb7dd4a3022cdfda951ANALYSIS DATE: 2022-12-02T04:32:39ZTTPS: T1060, T1112, T1012, T1082,...

Malware Analysis

Malware Analysis – evasion – 145c6884b6a10468427e955b1a03b94d

Malware Analysis – wannacry – f27d3943f18548c0f2d572d63e120493

Malware Analysis – wannacry – 3e1f1ab7eb22b54d451f764377d869ab

Malware Analysis – wannacry – 38a3377280ad3182ab1541c841add640

Malware Analysis – wannacry – e84c448866510eda6067f0a05ec7fc9f

Malware Analysis – wannacry – 57037023aa242dd371925bd35e219cbf

Malware Analysis – wannacry – a21d4584249c8a967dfe46bfea9ef0a8

Malware Analysis – wannacry – ed7f40e4e7ba70381d580a5ce8247ea1

Malware Analysis – wannacry – 7bf0fb013eef78b55c39cbc62339e4a5

Malware Analysis – wannacry – 8f5f214c98f0287f8ef9ecc18e1fab41

Malware Analysis – wannacry – ed7cd9ddd0c1e1cf38f59e9e664d080f

Malware Analysis – evasion – 80a2944d792c27417c3b06c3183626dc

Malware Analysis – adware – eeeaf6060eb054b3cb226489772d16a1

Malware Analysis – djvu – 84e10f7f6ff7d48611fc44cc9d6cf2f4

Malware Analysis – sodinokibi – a3749c66f65d247d8a6fae1be26d3ef9

Malware Analysis – ransomware – 09c09f6890098c4686b55b1af5a4494c

Malware Analysis – djvu – 4eba652fcb08f677765760fd3b9af02f

Malware Analysis – amadey – df551c1f4b32c3c1bba785c23297b62c

Malware Analysis – amadey – c05a5e1f0fe1ada0824c6ed62d7c1014

Malware Analysis – globeimposter – d0c67160c740f62c25b0558e9563a824

Malware Analysis – evasion – 197a5d55e3602be8fbafdad373021886

Malware Analysis – dcrat – fd16369ea0ae1958caa9cd09fc114704

Malware Analysis – persistence – a735ff10e359539181c1eca593091ee6

Malware Analysis – djvu – d45513c2e1be1a29339c921168c8cd19

[KAIROS] – Ransomware Victim: combinedpoolandspa[.]com

[RANSOMHUB] – Ransomware Victim: AKConstructors[.]com

CISA: CISA Releases Microsoft Expanded Cloud Logs Implementation Playbook

CVE Alert: CVE-2024-48854

CVE Alert: CVE-2024-48856

You may have missed