Malware Analysis

Malware Analysis – – 6953d6e1a2d8df8e0d2e76263e8b3115

December 1, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 6953d6e1a2d8df8e0d2e76263e8b3115SHA1: 7c281b3f1f1340db2a76ec34adb0a3d16f2789a7ANALYSIS DATE: 2022-12-01T17:32:06ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – 6934b39e90dddfa77024c63cf37986b0

December 1, 2022

Score: 6 MALWARE FAMILY: TAGS:MD5: 6934b39e90dddfa77024c63cf37986b0SHA1: c2978367c3f92614a6b0d36399713cf6a9021a0cANALYSIS DATE: 2022-11-29T17:16:48ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – adware – 86c8fbb939f986e0d01e7c175b645be1

December 1, 2022

Score: 10 MALWARE FAMILY: adwareTAGS:adware, bootkit, discovery, evasion, persistence, ransomware, spyware, stealer, trojan, upxMD5: 86c8fbb939f986e0d01e7c175b645be1SHA1: 362f9ac4249dce17ca231f4ba1e37f24d65b11baANALYSIS DATE: 2022-12-01T02:48:04ZTTPS: T1012, T1082,...

Malware Analysis – djvu – cf71bc7cbcd455475e601421ae0a09f6

December 1, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, stealerMD5: cf71bc7cbcd455475e601421ae0a09f6SHA1: 7de15815b0885340bb5a45887fb98a8b225b1633ANALYSIS DATE: 2022-12-01T03:45:12ZTTPS: T1012, T1082, T1053, T1060, T1112,...

Malware Analysis – ransomware – 13d8c2f2cdf5f6208c3e999621019304

December 1, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 13d8c2f2cdf5f6208c3e999621019304SHA1: fc8930cd264393552727a457efbbea67e60e49e5ANALYSIS DATE: 2022-12-01T02:57:27ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – amadey – 2aa5a97e05b33840caa2671eb6b0f40f

December 1, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 2aa5a97e05b33840caa2671eb6b0f40fSHA1: e9294c855702b3eee45423b736f4c1ef1d21503aANALYSIS DATE:...

Malware Analysis – amadey – 76f38fc85049a7037d7b56a72a7ab6cb

December 1, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:dcrat, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealer, trojanMD5:...

Malware Analysis – djvu – d7d034eb4e18d62df6bad28b02b70091

December 1, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: d7d034eb4e18d62df6bad28b02b70091SHA1: 0d9031c92147ea4a1f3642f2054506aadef285eaANALYSIS DATE: 2022-12-01T05:24:26ZTTPS: T1222, T1060, T1112, T1012,...

Malware Analysis – djvu – 951763ed72bd6ef3dbfb949301dbf918

December 1, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, backdoor, ransomware, spyware, stealer, trojanMD5: 951763ed72bd6ef3dbfb949301dbf918SHA1: bfa478fdd1eb243a9ee4c665f5e409878f62f420ANALYSIS DATE: 2022-12-01T05:31:18ZTTPS: T1012, T1120, T1082, T1005, T1081...

Malware Analysis – ransomware – 1dc43a6cca06ebf436d3e38943e7e7c5

December 1, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 1dc43a6cca06ebf436d3e38943e7e7c5SHA1: ef3ff881253a909e92eea56a71e434070f6ce7e9ANALYSIS DATE: 2022-12-01T05:53:16ZTTPS: T1102 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – – 9011870a33ddb12f8934f9061de6f42c

December 1, 2022

Score: 7 MALWARE FAMILY: TAGS:MD5: 9011870a33ddb12f8934f9061de6f42cSHA1: f4ed234105177810353926f58f748be67c2be4edANALYSIS DATE: 2022-12-01T05:46:07ZTTPS: T1112, T1012, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – blackbasta – ac625552601c190656dcb8cf4c21cd1d

December 1, 2022

Score: 10 MALWARE FAMILY: blackbastaTAGS:family:blackbasta, ransomwareMD5: ac625552601c190656dcb8cf4c21cd1dSHA1: acad7a91c2812a0652d62f252774454c217666e9ANALYSIS DATE: 2022-11-30T22:38:00ZTTPS: T1107, T1490, T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – amadey – 795e5e08e60da5d2446eef36e474668f

December 1, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 795e5e08e60da5d2446eef36e474668fSHA1: 6783dd6bba712949574a02a9559fa533a88cc772ANALYSIS DATE:...

Malware Analysis – blackbasta – 998022b70d83c6de68e5bdf94e0f8d71

December 1, 2022

Score: 10 MALWARE FAMILY: blackbastaTAGS:family:blackbasta, ransomwareMD5: 998022b70d83c6de68e5bdf94e0f8d71SHA1: b87a947f3e85701fcdadd733e9b055a65a3b1308ANALYSIS DATE: 2022-11-30T22:47:38ZTTPS: T1107, T1490, T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – blackbasta – 3f400f30415941348af21d515a2fc6a3

December 1, 2022

Score: 10 MALWARE FAMILY: blackbastaTAGS:family:blackbasta, evasion, ransomwareMD5: 3f400f30415941348af21d515a2fc6a3SHA1: bd0bf9c987288ca434221d7d81c54a47e913600aANALYSIS DATE: 2022-11-30T21:06:57ZTTPS: T1490, T1107, T1491, T1112, T1082 ScoreMeaningExample10Known badA malware family...

Malware Analysis – blackbasta – eff424376edca5680b90ea9fedad163d

December 1, 2022

Score: 10 MALWARE FAMILY: blackbastaTAGS:family:blackbasta, evasion, ransomwareMD5: eff424376edca5680b90ea9fedad163dSHA1: 3c13c1e54d2d7991c1c3452ae89888a8e7a47763ANALYSIS DATE: 2022-11-30T23:14:05ZTTPS: T1490, T1107, T1491, T1112, T1082 ScoreMeaningExample10Known badA malware family...

Malware Analysis – djvu – 9f86d39cef8f2d55ee153628c599f125

December 1, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, stealerMD5: 9f86d39cef8f2d55ee153628c599f125SHA1: ffcca079744b576dec190e17f8a96f6283875729ANALYSIS DATE: 2022-11-30T22:54:30ZTTPS: T1060, T1112, T1222, T1082, T1012,...

Malware Analysis – blackbasta – a2086f41bc06adc69517bc0d9c07bf6e

December 1, 2022

Score: 10 MALWARE FAMILY: blackbastaTAGS:family:blackbasta, ransomware, upxMD5: a2086f41bc06adc69517bc0d9c07bf6eSHA1: 1d30388c1235da56a2f17d645f0a66ead7b59159ANALYSIS DATE: 2022-11-30T23:19:25ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – blackbasta – 267d5c3137d313ce1a86c2f255a835e6

December 1, 2022

Score: 10 MALWARE FAMILY: blackbastaTAGS:family:blackbasta, ransomware, spyware, stealerMD5: 267d5c3137d313ce1a86c2f255a835e6SHA1: c7a37c0edeffd23777cca44f9b49076be1bd43e6ANALYSIS DATE: 2022-11-30T23:08:46ZTTPS: T1491, T1112, T1005, T1081 ScoreMeaningExample10Known badA malware family...

Malware Analysis – blackbasta – adb3cf03e9be744107e61bd7de4c26bd

December 1, 2022

Score: 10 MALWARE FAMILY: blackbastaTAGS:family:blackbasta, ransomwareMD5: adb3cf03e9be744107e61bd7de4c26bdSHA1: cc7ea6bb6787df664adb69022546c42f5f409653ANALYSIS DATE: 2022-11-30T23:37:05ZTTPS: T1107, T1490, T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 7349fec1e2af4aee2a5548a8ed226641

December 1, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 7349fec1e2af4aee2a5548a8ed226641SHA1: bd74b4df28c8f147e1d36808419b6607a67e37d5ANALYSIS DATE: 2022-11-30T23:31:03ZTTPS: T1082, T1053, T1012, T1060,...

Malware Analysis – blackbasta – fe8dae06d4b9165c6be675e184bfaca9

December 1, 2022

Score: 10 MALWARE FAMILY: blackbastaTAGS:family:blackbasta, ransomwareMD5: fe8dae06d4b9165c6be675e184bfaca9SHA1: 5244f99411acdf30ca6832b2e6352afdd68c88f3ANALYSIS DATE: 2022-11-30T23:43:11ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – blackbasta – f05dac112cd3174c385d10158b6080fb

December 1, 2022

Score: 10 MALWARE FAMILY: blackbastaTAGS:family:blackbasta, ransomwareMD5: f05dac112cd3174c385d10158b6080fbSHA1: 579b245a6609903d804f957083b9e0b2ed145f5aANALYSIS DATE: 2022-11-30T23:49:27ZTTPS: T1107, T1490, T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – 3e55f3f5c1b95a60a127ff835216c973

November 30, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 3e55f3f5c1b95a60a127ff835216c973SHA1: 7391def32cf4fd471d747168374283fcfc94ebb4ANALYSIS DATE: 2022-11-29T09:54:55ZTTPS: T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis

Malware Analysis – – 6953d6e1a2d8df8e0d2e76263e8b3115

Malware Analysis – – 6934b39e90dddfa77024c63cf37986b0

Malware Analysis – adware – 86c8fbb939f986e0d01e7c175b645be1

Malware Analysis – djvu – cf71bc7cbcd455475e601421ae0a09f6

Malware Analysis – ransomware – 13d8c2f2cdf5f6208c3e999621019304

Malware Analysis – amadey – 2aa5a97e05b33840caa2671eb6b0f40f

Malware Analysis – amadey – 76f38fc85049a7037d7b56a72a7ab6cb

Malware Analysis – djvu – d7d034eb4e18d62df6bad28b02b70091

Malware Analysis – djvu – 951763ed72bd6ef3dbfb949301dbf918

Malware Analysis – ransomware – 1dc43a6cca06ebf436d3e38943e7e7c5

Malware Analysis – – 9011870a33ddb12f8934f9061de6f42c

Malware Analysis – blackbasta – ac625552601c190656dcb8cf4c21cd1d

Malware Analysis – amadey – 795e5e08e60da5d2446eef36e474668f

Malware Analysis – blackbasta – 998022b70d83c6de68e5bdf94e0f8d71

Malware Analysis – blackbasta – 3f400f30415941348af21d515a2fc6a3

Malware Analysis – blackbasta – eff424376edca5680b90ea9fedad163d

Malware Analysis – djvu – 9f86d39cef8f2d55ee153628c599f125

Malware Analysis – blackbasta – a2086f41bc06adc69517bc0d9c07bf6e

Malware Analysis – blackbasta – 267d5c3137d313ce1a86c2f255a835e6

Malware Analysis – blackbasta – adb3cf03e9be744107e61bd7de4c26bd

Malware Analysis – djvu – 7349fec1e2af4aee2a5548a8ed226641

Malware Analysis – blackbasta – fe8dae06d4b9165c6be675e184bfaca9

Malware Analysis – blackbasta – f05dac112cd3174c385d10158b6080fb

Malware Analysis – evasion – 3e55f3f5c1b95a60a127ff835216c973

[KAIROS] – Ransomware Victim: combinedpoolandspa[.]com

[RANSOMHUB] – Ransomware Victim: AKConstructors[.]com

CISA: CISA Releases Microsoft Expanded Cloud Logs Implementation Playbook

CVE Alert: CVE-2024-48854

CVE Alert: CVE-2024-48856

You may have missed