Malware Analysis

Malware Analysis – ransomware – daade2e0cfa7edb952c8de1b2fadb701

December 2, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: daade2e0cfa7edb952c8de1b2fadb701SHA1: c9701e17f9ea02548060306cd3c48cbfa0e43121ANALYSIS DATE: 2022-12-02T04:06:00ZTTPS: T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – d45513c2e1be1a29339c921168c8cd19

December 2, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: d45513c2e1be1a29339c921168c8cd19SHA1: 4b8bb78467ad97740cc6cbb7dd4a3022cdfda951ANALYSIS DATE: 2022-12-02T04:32:39ZTTPS: T1060, T1112, T1012, T1082,...

Malware Analysis – blackcat – 3e52a1ec6462ec78ca39a22af21a7f28

December 2, 2022

Score: 10 MALWARE FAMILY: blackcatTAGS:family:blackcat, ransomwareMD5: 3e52a1ec6462ec78ca39a22af21a7f28SHA1: bac0a8d5199c70b27888eb12e501697a4d268b8fANALYSIS DATE: 2022-12-02T04:25:39ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – amadey – 5d68f1c394a5b45caa31567eb295da8a

December 2, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:dcrat, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:1148, botnet:517, botnet:lege, backdoor, collection, discovery, infostealer, persistence, ransomware, rat,...

Malware Analysis – amadey – 280610964b3447e00cf87e7a2116db06

December 2, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:dcrat, family:djvu, family:smokeloader, family:vidar, botnet:1148, botnet:517, backdoor, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealer,...

Malware Analysis – djvu – d8d71a967f8cd0c1bcaf41f63e702a61

December 2, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: d8d71a967f8cd0c1bcaf41f63e702a61SHA1: 668d793a13b3ad46c92faeae7e850d5167c62fc5ANALYSIS DATE: 2022-12-01T23:52:08ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – djvu – 22498c1dce9fa5e8a02c9bb39c4329b4

December 2, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 22498c1dce9fa5e8a02c9bb39c4329b4SHA1: 02a5a0fe6d09669e2f525d89ca38c77d6a362188ANALYSIS DATE: 2022-12-01T22:30:09ZTTPS: T1005, T1081, T1012, T1222,...

Malware Analysis – evasion – b91e11a7755a47d91fd3595900bf19eb

December 1, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: b91e11a7755a47d91fd3595900bf19ebSHA1: 4638226e9cad1ab5d2379999433834f547cb2b6cANALYSIS DATE: 2022-11-30T02:02:41ZTTPS: T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – c41b65a6fd126476b33cd275cda7c842

December 1, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: c41b65a6fd126476b33cd275cda7c842SHA1: b22360d30d999df2ab08212ce9e37bc9754f8cb4ANALYSIS DATE: 2022-12-01T15:06:54ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – ransomware – dc9a9081109f9e5a66b81a3692648c0b

December 1, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: dc9a9081109f9e5a66b81a3692648c0bSHA1: 048f240ad00f8318a63a332d043ea1c85f73ba91ANALYSIS DATE: 2022-12-01T15:28:36ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – ransomware – b864e48610688b0139d84bcd63fd2878

December 1, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: b864e48610688b0139d84bcd63fd2878SHA1: 204daf52fa7099561dfbcf50758475cb79036ce5ANALYSIS DATE: 2022-12-01T15:31:21ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – amadey – d9e5a4ebf3b74e879d0acb16c43ed6de

December 1, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:dcrat, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealer, trojanMD5:...

Malware Analysis – redline – 60c672bf83f9ee919034423f7c9385f6

December 1, 2022

Score: 10 MALWARE FAMILY: redlineTAGS:family:redline, family:smokeloader, botnet:r102, backdoor, collection, infostealer, ransomware, trojanMD5: 60c672bf83f9ee919034423f7c9385f6SHA1: 4a262fce23796b58a08f7e953f33faf726ed1790ANALYSIS DATE: 2022-12-01T15:34:51ZTTPS: T1012, T1120, T1082, T1114...

Malware Analysis – amadey – 3326681ef0261f9d4ae5251d0c0c3c6b

December 1, 2022

Malware Analysis – ransomware – 4ec86f1eb7f05d34af99885f733c3c5b

December 1, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 4ec86f1eb7f05d34af99885f733c3c5bSHA1: 0d7cdf3d9349911b7922760f697a7bafc745cd18ANALYSIS DATE: 2022-12-01T16:31:03ZTTPS: T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – f272230670f1b845fdbf007fac1ff9ca

December 1, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: f272230670f1b845fdbf007fac1ff9caSHA1: 09cee6add03d57f94ef2394547b44b9db43cb8b1ANALYSIS DATE: 2022-12-01T16:30:15ZTTPS: T1005, T1081, T1012, T1060,...

Malware Analysis – djvu – e4ac9588fd75fe70172873b5ca0ab847

December 1, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: e4ac9588fd75fe70172873b5ca0ab847SHA1: ba249917c721ed68b568a359a2d54f176fd943beANALYSIS DATE: 2022-12-01T15:51:04ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – globeimposter – 190517d80c4edcef8a6c2b0a017941b0

December 1, 2022

Score: 10 MALWARE FAMILY: globeimposterTAGS:family:globeimposter, persistence, ransomwareMD5: 190517d80c4edcef8a6c2b0a017941b0SHA1: 2e03f910b3f9183657c3ec00735aa5b1f03080bbANALYSIS DATE: 2022-12-01T17:06:07ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – amadey – 59bf7bfb890e96702cfc4f3e9dbfa617

December 1, 2022

Malware Analysis – persistence – 29250c34e78857b17ee2576f68757d01

December 1, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 29250c34e78857b17ee2576f68757d01SHA1: 41c9109b13d129447ffdf273f78c8fee6096ff81ANALYSIS DATE: 2022-12-01T17:02:07ZTTPS: T1012, T1120, T1082, T1060, T1112 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – globeimposter – fac0564b69ab03050cf82098f98317e1

December 1, 2022

Score: 10 MALWARE FAMILY: globeimposterTAGS:family:globeimposter, persistence, ransomwareMD5: fac0564b69ab03050cf82098f98317e1SHA1: 01d6d9b1acd7c97ddf53fe704bfdd7a587f8884fANALYSIS DATE: 2022-12-01T17:06:08ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – medusalocker – 5b780f32105ff92593db7b30ea2ac9ed

December 1, 2022

Score: 10 MALWARE FAMILY: medusalockerTAGS:family:medusalocker, evasion, ransomware, trojanMD5: 5b780f32105ff92593db7b30ea2ac9edSHA1: 6054922a051ce8d25d5d39565a9ad23575b7fe7fANALYSIS DATE: 2022-12-01T17:38:03ZTTPS: T1082, T1112, T1107, T1490, T1088, T1089, T1012, T1120...

Malware Analysis – dcrat – 8d1b8e717d89bdf80df3fe855c4ff19c

December 1, 2022

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealer, trojanMD5: 8d1b8e717d89bdf80df3fe855c4ff19cSHA1:...

Malware Analysis – discovery – 3b7fca0e31846825a61766dad02a8823

December 1, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 3b7fca0e31846825a61766dad02a8823SHA1: a7d768e4be6c6361c8d11ae8110e3d4826728f4fANALYSIS DATE: 2022-12-01T17:18:11ZTTPS: T1082, T1112, T1042, T1060, T1012 ScoreMeaningExample10Known badA malware family...

Malware Analysis

Malware Analysis – ransomware – daade2e0cfa7edb952c8de1b2fadb701

Malware Analysis – djvu – d45513c2e1be1a29339c921168c8cd19

Malware Analysis – blackcat – 3e52a1ec6462ec78ca39a22af21a7f28

Malware Analysis – amadey – 5d68f1c394a5b45caa31567eb295da8a

Malware Analysis – amadey – 280610964b3447e00cf87e7a2116db06

Malware Analysis – djvu – d8d71a967f8cd0c1bcaf41f63e702a61

Malware Analysis – djvu – 22498c1dce9fa5e8a02c9bb39c4329b4

Malware Analysis – evasion – b91e11a7755a47d91fd3595900bf19eb

Malware Analysis – djvu – c41b65a6fd126476b33cd275cda7c842

Malware Analysis – ransomware – dc9a9081109f9e5a66b81a3692648c0b

Malware Analysis – ransomware – b864e48610688b0139d84bcd63fd2878

Malware Analysis – amadey – d9e5a4ebf3b74e879d0acb16c43ed6de

Malware Analysis – redline – 60c672bf83f9ee919034423f7c9385f6

Malware Analysis – amadey – 3326681ef0261f9d4ae5251d0c0c3c6b

Malware Analysis – ransomware – 4ec86f1eb7f05d34af99885f733c3c5b

Malware Analysis – djvu – f272230670f1b845fdbf007fac1ff9ca

Malware Analysis – djvu – e4ac9588fd75fe70172873b5ca0ab847

Malware Analysis – globeimposter – 190517d80c4edcef8a6c2b0a017941b0

Malware Analysis – amadey – 59bf7bfb890e96702cfc4f3e9dbfa617

Malware Analysis – persistence – 29250c34e78857b17ee2576f68757d01

Malware Analysis – globeimposter – fac0564b69ab03050cf82098f98317e1

Malware Analysis – medusalocker – 5b780f32105ff92593db7b30ea2ac9ed

Malware Analysis – dcrat – 8d1b8e717d89bdf80df3fe855c4ff19c

Malware Analysis – discovery – 3b7fca0e31846825a61766dad02a8823

[KAIROS] – Ransomware Victim: combinedpoolandspa[.]com

[RANSOMHUB] – Ransomware Victim: AKConstructors[.]com

CISA: CISA Releases Microsoft Expanded Cloud Logs Implementation Playbook

CVE Alert: CVE-2024-48854

CVE Alert: CVE-2024-48856

You may have missed