Malware Analysis

Malware Analysis – djvu – e7ea90686ee11d235596640d76e18c31

April 30, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, spyware, stealerMD5: e7ea90686ee11d235596640d76e18c31SHA1: f7626cce1a1983522fc95b3737842e10c067439cANALYSIS DATE: 2023-04-30T16:47:34ZTTPS: T1222, T1082, T1012, T1005,...

Malware Analysis – amadey – 9d54aae2994dec26029909916dfc208a

April 30, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:1616034f091df9fd0229bc38dd17597f, botnet:5cb879265de0011bfc7588d5d251aee6, botnet:pub1, botnet:sprg, backdoor, discovery, evasion, persistence, ransomware, spyware, stealer, trojanMD5:...

Malware Analysis – amadey – 544ca3fb991856aada9cc5d7b83cfdba

April 30, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:icedid, family:smokeloader, family:vidar, botnet:1616034f091df9fd0229bc38dd17597f, botnet:5cb879265de0011bfc7588d5d251aee6, botnet:pub1, botnet:sprg, campaign:252847557, backdoor, banker, discovery, evasion, loader, persistence,...

Malware Analysis – persistence – 09250d8b8323c62fb59941b458fa70d1

April 29, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 09250d8b8323c62fb59941b458fa70d1SHA1: da5f6347207257139ac82b50bc8276de9c1afd9eANALYSIS DATE: 2023-04-29T15:39:47ZTTPS: T1112, T1060, T1012, T1120, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – cabb11a8e237ff7233e19b9cb6cc829d

April 29, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, spyware, stealerMD5: cabb11a8e237ff7233e19b9cb6cc829dSHA1: ffe487aba123018573a275adfe98c44d1cee9c77ANALYSIS DATE: 2023-04-29T15:35:17ZTTPS: T1060, T1112, T1222, T1053,...

Malware Analysis – djvu – 1420395c269bb059c6f60d8faee97088

April 29, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, spyware, stealerMD5: 1420395c269bb059c6f60d8faee97088SHA1: 1c3662586dcf5451f479d7c1812a22cc9db25dbdANALYSIS DATE: 2023-04-29T16:22:32ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – ransomware – b55fca9a67bd38321a51a8724b61ee12

April 29, 2023

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: b55fca9a67bd38321a51a8724b61ee12SHA1: 99e8e1961755df056c605ca052e92da3ddb0a3d3ANALYSIS DATE: 2023-04-29T15:56:53ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – amadey – cea30f806e644cebe48399eefa345e51

April 29, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:icedid, family:redline, family:smokeloader, family:vidar, botnet:1616034f091df9fd0229bc38dd17597f, botnet:5cb879265de0011bfc7588d5d251aee6, botnet:potok 2, botnet:pub1, campaign:252847557, backdoor, banker, discovery, evasion,...

Malware Analysis – amadey – 845774441d6a856cfb4529fdef819fda

April 29, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:1616034f091df9fd0229bc38dd17597f, botnet:5cb879265de0011bfc7588d5d251aee6, botnet:potok 2, botnet:pub1, backdoor, discovery, evasion, infostealer, persistence, ransomware,...

Malware Analysis – evasion – cfa24958fbf3252ae18c9ff59d740ba5

April 27, 2023

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: cfa24958fbf3252ae18c9ff59d740ba5SHA1: 3ad7265383ff3d43cdc5802b3339106f2e7aef6eANALYSIS DATE: 2023-04-27T15:17:02ZTTPS: T1070, T1031, T1562, T1489 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – amadey – bbf0b55abc4ca7fc1b9c4c466e0271e5

April 27, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:lumma, family:smokeloader, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, botnet:pub1, backdoor, discovery, evasion, persistence, ransomware, spyware, stealer, trojanMD5: bbf0b55abc4ca7fc1b9c4c466e0271e5SHA1:...

Malware Analysis – djvu – 95b67bb3125cc3cb0052df60027907af

April 27, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, spyware, stealerMD5: 95b67bb3125cc3cb0052df60027907afSHA1: 8fb0c5fc196fb70c0739cb289ea7e5a72536f650ANALYSIS DATE: 2023-04-27T15:24:49ZTTPS: T1005, T1081, T1060, T1112,...

Malware Analysis – djvu – 5831b53317ba956aaf51e6b5d7e532ab

April 27, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, spyware, stealerMD5: 5831b53317ba956aaf51e6b5d7e532abSHA1: 457917dd86216bb1031b012eed3c21f0b38fbbb8ANALYSIS DATE: 2023-04-27T16:21:09ZTTPS: T1222, T1005, T1081, T1060,...

Malware Analysis – amadey – 0d54474c200d1ecddc41c0a860ca8d88

April 27, 2023

Malware Analysis – – c2ef48c7322c941dc4699fd5fafbaed8

April 27, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: c2ef48c7322c941dc4699fd5fafbaed8SHA1: 44c9b1547258d672994c4297d8b17ed839d0954cANALYSIS DATE: 2023-04-27T16:53:22ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – bb00788c9e1d68dc42525ba0c379eda4

April 27, 2023

Score: 5 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: bb00788c9e1d68dc42525ba0c379eda4SHA1: e0488c0968f9596e22dd7a9590be2b6d2fb390a6ANALYSIS DATE: 2023-04-27T17:57:59ZTTPS: T1082, T1112, T1491 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – djvu – e63a2e22193d1af2fe67db7362e1dc6e

April 27, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, spyware, stealerMD5: e63a2e22193d1af2fe67db7362e1dc6eSHA1: 4a0043b3fb991ace6daf50d6ced0aad179335db0ANALYSIS DATE: 2023-04-27T17:41:35ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – amadey – 28cda8e2c5311765b5b4cbc1380e0cee

April 27, 2023

Malware Analysis – amadey – 036f9407ef3f17bca4e0e9f815abdbf5

April 27, 2023

Malware Analysis – amadey – 2e2d214abd61d6b40e8ad5e9e437df45

April 26, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:lumma, family:smokeloader, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, botnet:pub1, botnet:sprg, backdoor, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 2e2d214abd61d6b40e8ad5e9e437df45SHA1:...

Malware Analysis – amadey – 05cd8d500f128d1c1ab6844e5b98eb4e

April 26, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:lumma, family:smokeloader, botnet:pub1, botnet:sprg, backdoor, discovery, ransomware, stealer, trojanMD5: 05cd8d500f128d1c1ab6844e5b98eb4eSHA1: 76211cea5ed0667e98e9b99312d6a40cd6ffb1faANALYSIS DATE: 2023-04-26T15:37:31ZTTPS: T1012,...

Malware Analysis – – 33868397a64763f16d88e37d4289697a

April 26, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: 33868397a64763f16d88e37d4289697aSHA1: 2bd06371967738d0101dc73ed3fa321cbeac4db6ANALYSIS DATE: 2023-04-26T16:00:59ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – amadey – fd68d6d16b3b5a68311907694d3c5967

April 26, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:lumma, family:redline, family:smokeloader, family:vidar, botnet:1379752987, botnet:5cb879265de0011bfc7588d5d251aee6, botnet:sprg, backdoor, discovery, evasion, infostealer, persistence, ransomware, spyware,...

Malware Analysis – djvu – 51a4106e8f56ecb11ff22995f4cfd3e1

April 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, spyware, stealerMD5: 51a4106e8f56ecb11ff22995f4cfd3e1SHA1: 2781e07822cf8b54406d5785e0e71e3158f4666fANALYSIS DATE: 2023-04-26T15:49:43ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis

Malware Analysis – djvu – e7ea90686ee11d235596640d76e18c31

Malware Analysis – amadey – 9d54aae2994dec26029909916dfc208a

Malware Analysis – amadey – 544ca3fb991856aada9cc5d7b83cfdba

Malware Analysis – persistence – 09250d8b8323c62fb59941b458fa70d1

Malware Analysis – djvu – cabb11a8e237ff7233e19b9cb6cc829d

Malware Analysis – djvu – 1420395c269bb059c6f60d8faee97088

Malware Analysis – ransomware – b55fca9a67bd38321a51a8724b61ee12

Malware Analysis – amadey – cea30f806e644cebe48399eefa345e51

Malware Analysis – amadey – 845774441d6a856cfb4529fdef819fda

Malware Analysis – evasion – cfa24958fbf3252ae18c9ff59d740ba5

Malware Analysis – amadey – bbf0b55abc4ca7fc1b9c4c466e0271e5

Malware Analysis – djvu – 95b67bb3125cc3cb0052df60027907af

Malware Analysis – djvu – 5831b53317ba956aaf51e6b5d7e532ab

Malware Analysis – amadey – 0d54474c200d1ecddc41c0a860ca8d88

Malware Analysis – – c2ef48c7322c941dc4699fd5fafbaed8

Malware Analysis – ransomware – bb00788c9e1d68dc42525ba0c379eda4

Malware Analysis – djvu – e63a2e22193d1af2fe67db7362e1dc6e

Malware Analysis – amadey – 28cda8e2c5311765b5b4cbc1380e0cee

Malware Analysis – amadey – 036f9407ef3f17bca4e0e9f815abdbf5

Malware Analysis – amadey – 2e2d214abd61d6b40e8ad5e9e437df45

Malware Analysis – amadey – 05cd8d500f128d1c1ab6844e5b98eb4e

Malware Analysis – – 33868397a64763f16d88e37d4289697a

Malware Analysis – amadey – fd68d6d16b3b5a68311907694d3c5967

Malware Analysis – djvu – 51a4106e8f56ecb11ff22995f4cfd3e1

[KILLSEC] – Ransomware Victim: Wendy Wu Tours

[HUNTERS] – Ransomware Victim: Tata Technologies

[QILIN] – Ransomware Victim: rockhillwc[.]com

[RANSOMHUB] – Ransomware Victim: goencon[.]com

[QILIN] – Ransomware Victim: peruzzi[.]com

You may have missed