Malware Analysis

Malware Analysis – discovery – 4c3430c3d668441dffadbcc7662a13b0

November 20, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 4c3430c3d668441dffadbcc7662a13b0SHA1: 6e5bc7bf045859d125cdadec21c446c08ca3f2acANALYSIS DATE: 2022-11-20T05:30:27ZTTPS: T1222, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – adware – 052920d1d53bdc2554f3be338d3f0d60

November 20, 2022

Score: 8 MALWARE FAMILY: adwareTAGS:adware, discovery, exploit, persistence, stealer, upxMD5: 052920d1d53bdc2554f3be338d3f0d60SHA1: 637e23b51d0e01c71a52aaad7b5fd5182760af23ANALYSIS DATE: 2022-11-20T04:55:33ZTTPS: T1112, T1176, T1060, T1222 ScoreMeaningExample10Known badA...

Malware Analysis – discovery – 420e66c94fa92a84d6a6a0693aadd2f0

November 20, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 420e66c94fa92a84d6a6a0693aadd2f0SHA1: 76ab9090301c225949be30ad8d3050d2932686a1ANALYSIS DATE: 2022-11-20T04:59:42ZTTPS: T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – discovery – 428b12438e19486171dcb1fed5fb0e30

November 20, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 428b12438e19486171dcb1fed5fb0e30SHA1: a889bbd78950a4dc9f9ac9aabe599e65e50b9374ANALYSIS DATE: 2022-11-20T05:30:32ZTTPS: T1012, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – amadey – 66e241960bb5436d16716811175a3eaf

November 20, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:mario23_10, botnet:richbitch, backdoor, collection, discovery, evasion, infostealer, persistence, ransomware, spyware,...

Malware Analysis – evasion – 1f9dbd08859508906caf3db01560b410

November 20, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: 1f9dbd08859508906caf3db01560b410SHA1: fe1429f26fc45c9cdc72c974e308ec8756f2e11cANALYSIS DATE: 2022-11-20T05:49:29ZTTPS: T1005, T1081, T1060, T1112, T1158, T1088,...

Malware Analysis – discovery – 344e0bd90f6dab2a3235ee8ee7c89d50

November 20, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 344e0bd90f6dab2a3235ee8ee7c89d50SHA1: 73ede8ce0a525d3fa3b92db5e3b0a3853c877a7cANALYSIS DATE: 2022-11-20T05:30:35ZTTPS: T1222, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – – 5e1a659a734f2849a28f9dee904decf0

November 19, 2022

Score: 3 MALWARE FAMILY: TAGS:MD5: 5e1a659a734f2849a28f9dee904decf0SHA1: ebddba71804e902042dffc9cfd5f5f8780e3a79aANALYSIS DATE: 2022-11-19T15:54:58ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – discovery – 5591211a3b6591dcfdda3254820eb446

November 19, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 5591211a3b6591dcfdda3254820eb446SHA1: 25f0b212b9e083f900fbc14f8fc900295a4b9b4cANALYSIS DATE: 2022-11-19T15:34:17ZTTPS: T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – d8e2fea7f0aff05d78f0feb3b61c3ac7

November 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: d8e2fea7f0aff05d78f0feb3b61c3ac7SHA1: 308c51ef3ef2c2c93fb24589cb6dec08e893d675ANALYSIS DATE: 2022-11-19T15:41:20ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – bootkit – 5c51a8836f1c31af4517ff739cb3e7fa

November 19, 2022

Score: 8 MALWARE FAMILY: bootkitTAGS:bootkit, discovery, evasion, persistenceMD5: 5c51a8836f1c31af4517ff739cb3e7faSHA1: 49af67355378b659a38686c6b02e7de32915a1f8ANALYSIS DATE: 2022-11-19T16:53:55ZTTPS: T1067, T1222, T1158, T1012, T1082, T1059, T1102, T1018...

Malware Analysis – djvu – 6f60b9997d06030dba66cb6906052770

November 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 6f60b9997d06030dba66cb6906052770SHA1: 9be16feea12623a1a745f6cb34bd0e552edaa6d1ANALYSIS DATE: 2022-11-19T17:15:42ZTTPS: T1012, T1082, T1060, T1112,...

Malware Analysis – djvu – 02117002dd6e40b919ff3b59a2f3cf1b

November 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 02117002dd6e40b919ff3b59a2f3cf1bSHA1: a85ebba39171b4617e7e6104e8ad616fb9e83f33ANALYSIS DATE: 2022-11-19T17:08:36ZTTPS: T1060, T1112, T1005, T1081,...

Malware Analysis – redline – ca1cf4a9b531c3c6d84dbb188dc649ad

November 19, 2022

Score: 10 MALWARE FAMILY: redlineTAGS:family:redline, agilenet, discovery, evasion, infostealer, persistence, ransomware, spyware, stealerMD5: ca1cf4a9b531c3c6d84dbb188dc649adSHA1: 0bc2567aa74c9deaf85a78f4d675f16939dabd6dANALYSIS DATE: 2022-11-19T16:10:35ZTTPS: T1012, T1082, T1060,...

Malware Analysis – dcrat – e812b559b4f0a8fd5d11c86e2b7bbdea

November 19, 2022

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:mario23_10, backdoor, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealer,...

Malware Analysis – djvu – 6836ea5f1dd9575394d3d549e29729f7

November 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 6836ea5f1dd9575394d3d549e29729f7SHA1: 941860f0b34142aa11a1e5e4bbf10035568f1d7dANALYSIS DATE: 2022-11-19T17:29:41ZTTPS: T1130, T1112, T1060, T1222, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – smokeloader – c6e438c54033096a47d752040658de04

November 19, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: c6e438c54033096a47d752040658de04SHA1: 9856b7ab9e99830f5819408b61527b5f422d8f45ANALYSIS DATE: 2022-11-19T17:51:16ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 49e12e0bd76941ab54dec0db51cd6e22

November 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 49e12e0bd76941ab54dec0db51cd6e22SHA1: da575ad370d523ed8017f354645dbae9f22180a7ANALYSIS DATE: 2022-11-19T17:34:38ZTTPS: T1107, T1490, T1005, T1081 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – venus – 38d8f55b3a4b6871b5e62fdc73c504d6

November 18, 2022

Score: 10 MALWARE FAMILY: venusTAGS:family:venus, evasion, persistence, ransomwareMD5: 38d8f55b3a4b6871b5e62fdc73c504d6SHA1: 102b8625e5662c89efe4547dc2cb173be8b08851ANALYSIS DATE: 2022-11-18T09:06:42ZTTPS: T1018, T1031, T1060, T1112, T1082, T1012, T1120 ScoreMeaningExample10Known...

Malware Analysis – venus – 99bc5e82135557b8e571b2deab9f297f

November 18, 2022

Score: 10 MALWARE FAMILY: venusTAGS:family:venus, persistence, ransomware, spyware, stealerMD5: 99bc5e82135557b8e571b2deab9f297fSHA1: ec11f6abf13044a438a7f363bda2c9d5709d2475ANALYSIS DATE: 2022-11-18T09:09:43ZTTPS: T1060, T1112, T1082, T1018, T1012, T1120, T1005,...

Malware Analysis – djvu – 045d54b0d3abb25388920575931dc808

November 18, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:raccoon, family:redline, family:smokeloader, family:vidar, botnet:05ad9c5ec543eb32dfa8e77bcd579c06, botnet:517, botnet:mario23_10, backdoor, collection, discovery, evasion, infostealer, persistence, ransomware, spyware,...

Malware Analysis – venus – 1c45c33e9884cb10264c1a2a0255e72a

November 18, 2022

Score: 10 MALWARE FAMILY: venusTAGS:family:venus, evasion, persistence, ransomwareMD5: 1c45c33e9884cb10264c1a2a0255e72aSHA1: 1992336a5d752187c979e24a95a871d8932ade6dANALYSIS DATE: 2022-11-18T09:06:41ZTTPS: T1031, T1082, T1012, T1120, T1060, T1112, T1018 ScoreMeaningExample10Known...

Malware Analysis – djvu – 75a94380a8882221cfcd80d761db68b5

November 18, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 75a94380a8882221cfcd80d761db68b5SHA1: cd1beb5a0bfa1d448d04a68ff9dc2f1b6286bbadANALYSIS DATE: 2022-11-18T10:15:56ZTTPS: T1005, T1081, T1222, T1012,...

Malware Analysis – dcrat – 89c367f90c1cd21cf580807cf4d5cb19

November 18, 2022

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, family:djvu, family:raccoon, family:redline, family:smokeloader, family:vidar, botnet:05ad9c5ec543eb32dfa8e77bcd579c06, botnet:517, botnet:mario23_10, backdoor, collection, discovery, infostealer, persistence, ransomware, rat,...

Malware Analysis

Malware Analysis – discovery – 4c3430c3d668441dffadbcc7662a13b0

Malware Analysis – adware – 052920d1d53bdc2554f3be338d3f0d60

Malware Analysis – discovery – 420e66c94fa92a84d6a6a0693aadd2f0

Malware Analysis – discovery – 428b12438e19486171dcb1fed5fb0e30

Malware Analysis – amadey – 66e241960bb5436d16716811175a3eaf

Malware Analysis – evasion – 1f9dbd08859508906caf3db01560b410

Malware Analysis – discovery – 344e0bd90f6dab2a3235ee8ee7c89d50

Malware Analysis – – 5e1a659a734f2849a28f9dee904decf0

Malware Analysis – discovery – 5591211a3b6591dcfdda3254820eb446

Malware Analysis – djvu – d8e2fea7f0aff05d78f0feb3b61c3ac7

Malware Analysis – bootkit – 5c51a8836f1c31af4517ff739cb3e7fa

Malware Analysis – djvu – 6f60b9997d06030dba66cb6906052770

Malware Analysis – djvu – 02117002dd6e40b919ff3b59a2f3cf1b

Malware Analysis – redline – ca1cf4a9b531c3c6d84dbb188dc649ad

Malware Analysis – dcrat – e812b559b4f0a8fd5d11c86e2b7bbdea

Malware Analysis – djvu – 6836ea5f1dd9575394d3d549e29729f7

Malware Analysis – smokeloader – c6e438c54033096a47d752040658de04

Malware Analysis – ransomware – 49e12e0bd76941ab54dec0db51cd6e22

Malware Analysis – venus – 38d8f55b3a4b6871b5e62fdc73c504d6

Malware Analysis – venus – 99bc5e82135557b8e571b2deab9f297f

Malware Analysis – djvu – 045d54b0d3abb25388920575931dc808

Malware Analysis – venus – 1c45c33e9884cb10264c1a2a0255e72a

Malware Analysis – djvu – 75a94380a8882221cfcd80d761db68b5

Malware Analysis – dcrat – 89c367f90c1cd21cf580807cf4d5cb19

[FUNKSEC] – Ransomware Victim: kuzstu-nf[.]ru

[FUNKSEC] – Ransomware Victim: mymobileforms app

CISA: CISA and US and International Partners Publish Guidance on Priority Considerations in Product Selection for OT Owners and Operators

[RANSOMHUB] – Ransomware Victim: mi[.]edu

[LOCKBIT3] – Ransomware Victim: telering[.]de

You may have missed