Malware Analysis

Malware Analysis – smokeloader – 5dd6eaf0ad64284a1c5b2777adee3339

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 5dd6eaf0ad64284a1c5b2777adee3339SHA1: 2eb973333d9e6342d9e68796e2bc88c8efcde750ANALYSIS DATE: 2023-05-01T16:47:02ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – fabb956f14621c3088e1f31642be016a

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: fabb956f14621c3088e1f31642be016aSHA1: d07d919ce2c986b35e89b2652a710afc38d98c8eANALYSIS DATE: 2023-05-01T16:48:12ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – c2b7325eee7f24ca9437681955c771cb

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: c2b7325eee7f24ca9437681955c771cbSHA1: 07a462b7358cba34df5dc288be3dfb7a5f25ad7cANALYSIS DATE: 2023-05-01T16:46:54ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 47d48d432cffa139836800a6f9f2a831

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 47d48d432cffa139836800a6f9f2a831SHA1: 97ae5229d682afd84ae00b5707ce7e9c32a5bf73ANALYSIS DATE: 2023-05-01T16:47:42ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 0093b1c267fabf6fb6746173e37d5618

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 0093b1c267fabf6fb6746173e37d5618SHA1: 0ffecd65935898c1df2848b69dd404fe0a3e4340ANALYSIS DATE: 2023-05-01T16:50:17ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – f627126e4b34348c4decede20abd8a45

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: f627126e4b34348c4decede20abd8a45SHA1: 7f626e6c710ca4f1e6d44dd0b3d6d83763bbda2fANALYSIS DATE: 2023-05-01T16:50:21ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – f1d07de2ea686b9e275f9e1202a9d70e

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:31c7719b5ee962fbde376b75e771360d, discovery, persistence, ransomware, stealerMD5: f1d07de2ea686b9e275f9e1202a9d70eSHA1: 6f9bee9f26d7068fe175fd50407f0774cb134d46ANALYSIS DATE: 2023-05-01T16:49:53ZTTPS: T1060, T1112, T1222, T1082, T1130,...

Malware Analysis – djvu – 567e821bf25e1fffe2cf2baf499a906e

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:31c7719b5ee962fbde376b75e771360d, discovery, persistence, ransomware, spyware, stealerMD5: 567e821bf25e1fffe2cf2baf499a906eSHA1: 167e3f1a91edea7b9cde6673ba6e59ba420bdf81ANALYSIS DATE: 2023-05-01T16:49:34ZTTPS: T1060, T1112, T1005, T1081,...

Malware Analysis – djvu – 327e918914d2646a044d4909210b5e3b

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:31c7719b5ee962fbde376b75e771360d, discovery, persistence, ransomware, spyware, stealerMD5: 327e918914d2646a044d4909210b5e3bSHA1: 2f06777afd68a161063e722f8ef3c734a89a62adANALYSIS DATE: 2023-05-01T16:50:33ZTTPS: T1012, T1130, T1112, T1222,...

Malware Analysis – smokeloader – cb021251a6cf6317a61b976f0a285a89

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: cb021251a6cf6317a61b976f0a285a89SHA1: 4395ccfca60b9655afb1a0f10fd541f32baa6ca3ANALYSIS DATE: 2023-05-01T16:50:35ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – e7dd31558f3ec42979da15a0a6874501

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: e7dd31558f3ec42979da15a0a6874501SHA1: 07d8a7bf505e33743bc9f62f36d961cc458831b3ANALYSIS DATE: 2023-05-01T16:51:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 2bb706aa99db28a1c9fc6b095c558465

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 2bb706aa99db28a1c9fc6b095c558465SHA1: 277e71f887cf275fe4acad441c3844cbebc5f145ANALYSIS DATE: 2023-05-01T16:51:57ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 9c49179d156496dc2b99bf8ed5876789

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 9c49179d156496dc2b99bf8ed5876789SHA1: 9f51a8023bddeff9d7ab20af4e7c985a7abd0110ANALYSIS DATE: 2023-05-01T16:54:57ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 73abac8d02cd9984171486a69429a979

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 73abac8d02cd9984171486a69429a979SHA1: 6245dd3415191c82b5ec806d97a45e59d0839f15ANALYSIS DATE: 2023-05-01T16:54:01ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – a1da1859f9fd41cb5addd7aa54b7bd95

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: a1da1859f9fd41cb5addd7aa54b7bd95SHA1: acf882b67c88af902b0fea5302253a09fd805015ANALYSIS DATE: 2023-05-01T16:56:00ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – d074e45136284664a6d7e79096fa7f67

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:31c7719b5ee962fbde376b75e771360d, discovery, persistence, ransomware, spyware, stealerMD5: d074e45136284664a6d7e79096fa7f67SHA1: 9c77c0ee554e7ec9701c39fe99b90820f7b9a809ANALYSIS DATE: 2023-05-01T16:53:55ZTTPS: T1222, T1005, T1081, T1082,...

Malware Analysis – smokeloader – 1f7308929f958490d974fec76ba9a034

May 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 1f7308929f958490d974fec76ba9a034SHA1: 4ef6421abdfa1597a9327f33f583db0eb50a023eANALYSIS DATE: 2023-05-01T16:56:00ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – 6701914a2c4841d13fe2a54d41c4db91

May 1, 2023

Score: 6 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 6701914a2c4841d13fe2a54d41c4db91SHA1: da791e60740457d8cdc5961125ae8b24c39f0ca9ANALYSIS DATE: 2023-05-01T17:17:02ZTTPS: T1102 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – amadey – 4eceae8ae4132c8606c3da47e6cacf3f

May 1, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:1616034f091df9fd0229bc38dd17597f, botnet:266fa5b6a98cacaae8ec6c3e85a8a075, botnet:31c7719b5ee962fbde376b75e771360d, botnet:pub1, backdoor, discovery, evasion, persistence, ransomware, spyware, stealer, trojanMD5:...

Malware Analysis – djvu – 2af635966063f2104e61c7e7dc2b5184

May 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:31c7719b5ee962fbde376b75e771360d, discovery, persistence, ransomware, spyware, stealerMD5: 2af635966063f2104e61c7e7dc2b5184SHA1: b857a11e0ffd7e39597e63df141f3ff09d822c04ANALYSIS DATE: 2023-05-01T16:56:35ZTTPS: T1060, T1112, T1082, T1053,...

Malware Analysis – ransomware – ba619bc7920ba0650482c133ccea5c5c

April 30, 2023

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: ba619bc7920ba0650482c133ccea5c5cSHA1: cd8fb4ccba1004f8590d0a3560ce55269a5622c1ANALYSIS DATE: 2023-04-30T16:09:52ZTTPS: T1082, T1012, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – e1c8709a50dea0c5375707bc0f35704f

April 30, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, spyware, stealerMD5: e1c8709a50dea0c5375707bc0f35704fSHA1: 8fcc189ac74ec1062c5fded765d14bbac321e42fANALYSIS DATE: 2023-04-30T16:13:45ZTTPS: T1222, T1053, T1012, T1005,...

Malware Analysis – ransomware – f221915cf579c55a805c1a109d079bba

April 30, 2023

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomware, upxMD5: f221915cf579c55a805c1a109d079bbaSHA1: 62e631a90d1ad721aa67e1328fb00e446f0be69eANALYSIS DATE: 2023-04-30T15:54:04ZTTPS: T1491, T1112, T1012, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – amadey – edf83adc1b164b2f076bf78ca19524f7

April 30, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:icedid, family:smokeloader, family:vidar, family:xmrig, botnet:1616034f091df9fd0229bc38dd17597f, botnet:5cb879265de0011bfc7588d5d251aee6, botnet:pub1, botnet:sprg, campaign:252847557, backdoor, banker, discovery, evasion, loader,...

Malware Analysis

Malware Analysis – smokeloader – 5dd6eaf0ad64284a1c5b2777adee3339

Malware Analysis – smokeloader – fabb956f14621c3088e1f31642be016a

Malware Analysis – smokeloader – c2b7325eee7f24ca9437681955c771cb

Malware Analysis – smokeloader – 47d48d432cffa139836800a6f9f2a831

Malware Analysis – smokeloader – 0093b1c267fabf6fb6746173e37d5618

Malware Analysis – smokeloader – f627126e4b34348c4decede20abd8a45

Malware Analysis – djvu – f1d07de2ea686b9e275f9e1202a9d70e

Malware Analysis – djvu – 567e821bf25e1fffe2cf2baf499a906e

Malware Analysis – djvu – 327e918914d2646a044d4909210b5e3b

Malware Analysis – smokeloader – cb021251a6cf6317a61b976f0a285a89

Malware Analysis – smokeloader – e7dd31558f3ec42979da15a0a6874501

Malware Analysis – smokeloader – 2bb706aa99db28a1c9fc6b095c558465

Malware Analysis – smokeloader – 9c49179d156496dc2b99bf8ed5876789

Malware Analysis – smokeloader – 73abac8d02cd9984171486a69429a979

Malware Analysis – smokeloader – a1da1859f9fd41cb5addd7aa54b7bd95

Malware Analysis – djvu – d074e45136284664a6d7e79096fa7f67

Malware Analysis – smokeloader – 1f7308929f958490d974fec76ba9a034

Malware Analysis – evasion – 6701914a2c4841d13fe2a54d41c4db91

Malware Analysis – amadey – 4eceae8ae4132c8606c3da47e6cacf3f

Malware Analysis – djvu – 2af635966063f2104e61c7e7dc2b5184

Malware Analysis – ransomware – ba619bc7920ba0650482c133ccea5c5c

Malware Analysis – djvu – e1c8709a50dea0c5375707bc0f35704f

Malware Analysis – ransomware – f221915cf579c55a805c1a109d079bba

Malware Analysis – amadey – edf83adc1b164b2f076bf78ca19524f7

[KILLSEC] – Ransomware Victim: Wendy Wu Tours

[HUNTERS] – Ransomware Victim: Tata Technologies

[QILIN] – Ransomware Victim: rockhillwc[.]com

[RANSOMHUB] – Ransomware Victim: goencon[.]com

[QILIN] – Ransomware Victim: peruzzi[.]com

You may have missed