Malware Analysis

Malware Analysis – djvu – 6739446b547d4fcb92d882afbb29b27b

November 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 6739446b547d4fcb92d882afbb29b27bSHA1: d773a4c4a29bf927124cfa6a43f35af87c619ab7ANALYSIS DATE: 2022-11-21T17:00:37ZTTPS: T1053, T1222, T1005, T1081,...

Malware Analysis – evasion – 1162ee821f5b1dd6c1a44be48d0f9b00

November 21, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 1162ee821f5b1dd6c1a44be48d0f9b00SHA1: b62df88337d258505a8ff11297a78faabcf5861fANALYSIS DATE: 2022-11-21T17:23:29ZTTPS: T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – persistence – 1ce76c8db971b1444b6856f26990e450

November 21, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 1ce76c8db971b1444b6856f26990e450SHA1: 062dd92f8bcf5136e8dc5c6da0ec8fc9d75c57acANALYSIS DATE: 2022-11-21T17:22:26ZTTPS: T1107, T1490, T1082, T1112, T1060 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – djvu – d58d383bf9394e1a7dd26d1f96b644bc

November 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: d58d383bf9394e1a7dd26d1f96b644bcSHA1: 4a472430d5c071d17b3ca30419ece8868dde48caANALYSIS DATE: 2022-11-21T17:31:07ZTTPS:...

Malware Analysis – evasion – 94d087166651c0020a9e6cc2fdacdc0c

November 21, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 94d087166651c0020a9e6cc2fdacdc0cSHA1: 99be22569ba9b1e49d3fd36f65faa6795672fcc0ANALYSIS DATE: 2022-11-21T17:26:44ZTTPS: T1491, T1112, T1031, T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family...

Malware Analysis – djvu – 8e637847078984ede008e53a549aaf59

November 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 8e637847078984ede008e53a549aaf59SHA1: 7dd746cfecce7b728918bd15d7d7eb3e2da70474ANALYSIS DATE: 2022-11-21T04:20:44ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – djvu – b8a3b7f9c04e2522b454963e5c7d67be

November 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:mario23_10, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: b8a3b7f9c04e2522b454963e5c7d67beSHA1:...

Malware Analysis – djvu – e31c38e9f1ab45320a0053dd649ec8f9

November 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: e31c38e9f1ab45320a0053dd649ec8f9SHA1: 3047d3bf2654a5fb51a4438bb44dacab296e1d70ANALYSIS DATE: 2022-11-21T05:40:10ZTTPS: T1060, T1112, T1222, T1082, T1012, T1053 ScoreMeaningExample10Known badA...

Malware Analysis – evasion – 14e5a91d1292a99bb872f4b31acd9646

November 21, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, upxMD5: 14e5a91d1292a99bb872f4b31acd9646SHA1: d2b91d461ab3e9bd0c70b49860d455f841673eccANALYSIS DATE: 2022-11-21T05:25:42ZTTPS: T1091, T1082, T1158, T1112, T1060, T1491 ScoreMeaningExample10Known badA...

Malware Analysis – buran – 3ea0ab42bcab5745ba3631f01c4d4cd3

November 21, 2022

Score: 10 MALWARE FAMILY: buranTAGS:family:buran, ransomwareMD5: 3ea0ab42bcab5745ba3631f01c4d4cd3SHA1: 9eb457ce8568fa4a4375cdebbf3b181976a99718ANALYSIS DATE: 2022-11-21T05:47:20ZTTPS: T1018, T1102, T1082, T1012, T1120 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – djvu – c1ba21c6be66db5f18e143f95df50241

November 21, 2022

Malware Analysis – ransomware – 6ba66ac7b56c6f31417db0c1ca9fe6b1

November 21, 2022

Score: 5 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 6ba66ac7b56c6f31417db0c1ca9fe6b1SHA1: 8ccc065e083d78b3a6b8996a687235234c2cd07dANALYSIS DATE: 2022-11-20T20:54:35ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – dcrat – d609d7888ebd66e4cb502ae75ca86885

November 21, 2022

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:mario23_10, backdoor, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealer,...

Malware Analysis – djvu – c87b0936f8df9e15a4f1b80ec67b1e7c

November 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: c87b0936f8df9e15a4f1b80ec67b1e7cSHA1: b8079093e721cc3bec75aefdea51eb89aca07797ANALYSIS DATE: 2022-11-20T21:52:57ZTTPS: T1222, T1082, T1012, T1005,...

Malware Analysis – dcrat – f789ab6aeccc2819d9c8a1c16ee74ac0

November 21, 2022

Malware Analysis – djvu – e9ad549423799c0b5c2cafa201b58064

November 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: e9ad549423799c0b5c2cafa201b58064SHA1: c52a88d026937faef2066b108a4b4ba3aee1412eANALYSIS DATE: 2022-11-20T21:45:06ZTTPS: T1082, T1005, T1081, T1222,...

Malware Analysis – dcrat – d9ed38e3ba39acbfa4ed8d69e233c67e

November 21, 2022

Malware Analysis – dcrat – e617ddfbd2fd3407103b9ed8371cdc72

November 20, 2022

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, family:djvu, family:redline, family:smokeloader, botnet:mario23_10, backdoor, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealer, trojanMD5: e617ddfbd2fd3407103b9ed8371cdc72SHA1:...

Malware Analysis – djvu – a12cdf363ffc22dda705083793aad3dc

November 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: a12cdf363ffc22dda705083793aad3dcSHA1: 77004309fadecdbfc95e0815eb18b01697d692c2ANALYSIS DATE: 2022-11-20T16:57:45ZTTPS: T1082, T1005, T1081, T1012,...

Malware Analysis – djvu – 13e7b7d335bf434f51253a09b682c881

November 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 13e7b7d335bf434f51253a09b682c881SHA1: b372ae40a0102bc385823b18abc80ecaf83db4dbANALYSIS DATE: 2022-11-20T15:06:54ZTTPS: T1005, T1081, T1082, T1053,...

Malware Analysis – ransomware – c80f2a1c373d8ef42229e2919339cadd

November 20, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: c80f2a1c373d8ef42229e2919339caddSHA1: 8ab2a0512004cf6cca30da5b2b0b35e310114166ANALYSIS DATE: 2022-11-20T15:54:03ZTTPS: T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – f4d6bab1ae5f0408bf7a961ac4e1eec9

November 20, 2022

Malware Analysis – djvu – a0696d00fa18ffeef932b2d4c2802aac

November 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: a0696d00fa18ffeef932b2d4c2802aacSHA1: 01d13bbb4a41a5e87fd45c289d4b42bfe71aa8d9ANALYSIS DATE: 2022-11-20T17:20:49ZTTPS: T1222, T1012, T1082, T1005,...

Malware Analysis – smokeloader – 5bcddde0d6920439f9a1b054452da241

November 20, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 5bcddde0d6920439f9a1b054452da241SHA1: 1e85a796ca36a8d71def9f7876902f47b8707e85ANALYSIS DATE: 2022-11-20T17:21:13ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis

Malware Analysis – djvu – 6739446b547d4fcb92d882afbb29b27b

Malware Analysis – evasion – 1162ee821f5b1dd6c1a44be48d0f9b00

Malware Analysis – persistence – 1ce76c8db971b1444b6856f26990e450

Malware Analysis – djvu – d58d383bf9394e1a7dd26d1f96b644bc

Malware Analysis – evasion – 94d087166651c0020a9e6cc2fdacdc0c

Malware Analysis – djvu – 8e637847078984ede008e53a549aaf59

Malware Analysis – djvu – b8a3b7f9c04e2522b454963e5c7d67be

Malware Analysis – djvu – e31c38e9f1ab45320a0053dd649ec8f9

Malware Analysis – evasion – 14e5a91d1292a99bb872f4b31acd9646

Malware Analysis – buran – 3ea0ab42bcab5745ba3631f01c4d4cd3

Malware Analysis – djvu – c1ba21c6be66db5f18e143f95df50241

Malware Analysis – ransomware – 6ba66ac7b56c6f31417db0c1ca9fe6b1

Malware Analysis – dcrat – d609d7888ebd66e4cb502ae75ca86885

Malware Analysis – djvu – c87b0936f8df9e15a4f1b80ec67b1e7c

Malware Analysis – dcrat – f789ab6aeccc2819d9c8a1c16ee74ac0

Malware Analysis – djvu – e9ad549423799c0b5c2cafa201b58064

Malware Analysis – dcrat – d9ed38e3ba39acbfa4ed8d69e233c67e

Malware Analysis – dcrat – e617ddfbd2fd3407103b9ed8371cdc72

Malware Analysis – djvu – a12cdf363ffc22dda705083793aad3dc

Malware Analysis – djvu – 13e7b7d335bf434f51253a09b682c881

Malware Analysis – ransomware – c80f2a1c373d8ef42229e2919339cadd

Malware Analysis – djvu – f4d6bab1ae5f0408bf7a961ac4e1eec9

Malware Analysis – djvu – a0696d00fa18ffeef932b2d4c2802aac

Malware Analysis – smokeloader – 5bcddde0d6920439f9a1b054452da241

[FUNKSEC] – Ransomware Victim: kuzstu-nf[.]ru

[FUNKSEC] – Ransomware Victim: mymobileforms app

CISA: CISA and US and International Partners Publish Guidance on Priority Considerations in Product Selection for OT Owners and Operators

[RANSOMHUB] – Ransomware Victim: mi[.]edu

[LOCKBIT3] – Ransomware Victim: telering[.]de

You may have missed