Malware Analysis

Malware Analysis – evasion – 0d3f25e56a2706965f7d95be341a8db7

November 7, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 0d3f25e56a2706965f7d95be341a8db7SHA1: ac9fea21a1a7cc4fbfd73dba7f74c99588d7d12bANALYSIS DATE: 2022-11-07T01:25:55ZTTPS: T1091, T1082, T1088, T1089, T1112, T1060, T1490, T1012,...

Malware Analysis – evasion – 932cbc0036a7bbd8608c8b37e1c62107

November 7, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 932cbc0036a7bbd8608c8b37e1c62107SHA1: 24ce74cc99a1de006c75efdcb283dce32798c840ANALYSIS DATE: 2022-11-07T09:48:18ZTTPS: T1490, T1059, T1107, T1485, T1082, T1012, T1120 ScoreMeaningExample10Known badA malware...

Malware Analysis – privateloader – ebcdfc509d4e6eea4c1692b03675e55d

November 7, 2022

Score: 10 MALWARE FAMILY: privateloaderTAGS:family:privateloader, family:redline, family:smokeloader, botnet:all, botnet:suk, backdoor, discovery, evasion, infostealer, loader, main, persistence, spyware, stealer, trojanMD5: ebcdfc509d4e6eea4c1692b03675e55dSHA1:...

Malware Analysis – discovery – ba9bbc1f583f5f93bb78628fc73f61c3

November 7, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, ransomwareMD5: ba9bbc1f583f5f93bb78628fc73f61c3SHA1: b4c439b7834ec26adf8c8eb71b18ede3a20b51eaANALYSIS DATE: 2022-11-07T09:22:28ZTTPS: T1012, T1082, T1130, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 7844d97ae3dc5876d2c89a5f02415ba6

November 7, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 7844d97ae3dc5876d2c89a5f02415ba6SHA1: 8d7e1daa16ff8f48a759c0fbb12a735172e74df8ANALYSIS DATE: 2022-11-07T09:35:22ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – 1a7056340d8f6a6360ea3364e09830ed

November 7, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 1a7056340d8f6a6360ea3364e09830edSHA1: 64b0ae5d704ea5a3b40a7f740fd3844ef3a9ae10ANALYSIS DATE: 2022-11-07T10:34:50ZTTPS: T1012, T1082, T1112, T1042, T1060 ScoreMeaningExample10Known badA malware family...

Malware Analysis – amadey – e735a97e4e0e565f98ac40c3ed93336f

November 7, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:google2, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojan,...

Malware Analysis – wannacry – 9b1e56e3e4afe02a712896995a7dbd96

November 7, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 9b1e56e3e4afe02a712896995a7dbd96SHA1: 7ba0ff52478158d16ec0f5120d9df6dd527354f9ANALYSIS DATE: 2022-11-07T10:40:25ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – smokeloader – 6f4c50af40764e40f85bd818f290eb3e

November 7, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 6f4c50af40764e40f85bd818f290eb3eSHA1: 7d95ee920cf491c69831a8e377f42325ac5751baANALYSIS DATE: 2022-11-07T10:21:36ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ryuk – 622bc38dee08e70e91e2be32a58b6d1f

November 7, 2022

Score: 10 MALWARE FAMILY: ryukTAGS:family:ryuk, discovery, evasion, ransomwareMD5: 622bc38dee08e70e91e2be32a58b6d1fSHA1: 7cfec4859fa7ca178095983b3f174f842a44b0c2ANALYSIS DATE: 2022-11-07T11:53:59ZTTPS: T1222, T1053, T1082, T1012, T1120, T1158 ScoreMeaningExample10Known badA...

Malware Analysis – amadey – 7bb3cf423412fe38357326945d4031b0

November 7, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:slovarik1btc, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5:...

Malware Analysis – djvu – e0aea896a0d1aafcf00413ca920b69f7

November 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, stealerMD5: e0aea896a0d1aafcf00413ca920b69f7SHA1: c065f93451fbff65d9d5255d2a5671571b8973e6ANALYSIS DATE: 2022-11-07T11:02:45ZTTPS: T1060, T1112, T1222, T1082, T1012,...

Malware Analysis – wannacry – ffa761aaad7398b58c98b7de186783bf

November 7, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: ffa761aaad7398b58c98b7de186783bfSHA1: df00acaf9cfd869fdd5689ea276bc678e569431eANALYSIS DATE: 2022-11-07T11:00:37ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – wannacry – a1bbc4f908c7e79fa740abb5574e5733

November 7, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: a1bbc4f908c7e79fa740abb5574e5733SHA1: 7bec90bf83835b93a718e22b2851d8561eda55d0ANALYSIS DATE: 2022-11-07T03:00:34ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – wannacry – 7cfcb0def88dafe36c8b1440bb62ebd8

November 7, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 7cfcb0def88dafe36c8b1440bb62ebd8SHA1: ada0dfa301f1130468fdc57dd0944a0716a12db3ANALYSIS DATE: 2022-11-07T03:20:27ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – amadey – 143b2d68c66781d3bcfedaa63cdea1c3

November 7, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:google2, botnet:mario23_10, botnet:slovarik1btc, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware,...

Malware Analysis – djvu – 6d123f3d24355c2b777dbd593fe6f45e

November 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 6d123f3d24355c2b777dbd593fe6f45eSHA1: f9a25d00a40627438c0129597ac05683b4b1f94cANALYSIS DATE: 2022-11-07T04:24:21ZTTPS: T1060, T1112, T1082, T1005,...

Malware Analysis – amadey – 04dd6fba1c7daca5072719e426e81695

November 7, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:google2, botnet:mario23_10, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer,...

Malware Analysis – wannacry – 1fedbacd1ad3982f3718f2344ef7cac8

November 7, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 1fedbacd1ad3982f3718f2344ef7cac8SHA1: 9300853d71f08b28f7926371a29b2abb5fde5a56ANALYSIS DATE: 2022-11-07T04:41:02ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – 7f98c5308bcea9914200a592c17bfaec

November 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 7f98c5308bcea9914200a592c17bfaecSHA1: 94eb9a6727611094cbcde7242343509fd019f1e7ANALYSIS DATE: 2022-11-07T05:39:17ZTTPS: T1060, T1112, T1012, T1082,...

Malware Analysis – chaos – 9d016244b7f58fa5e974ef5f6e1ae54e

November 7, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, ransomwareMD5: 9d016244b7f58fa5e974ef5f6e1ae54eSHA1: 001bc943725ab768f8b8ecb2c9d3ae328f33c78bANALYSIS DATE: 2022-11-07T04:57:03ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – ransomware – 005c8975c5aeeeb883b178da8179478c

November 7, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 005c8975c5aeeeb883b178da8179478cSHA1: 1e2eb9855e058a1bfa1f8ec7caa56d2f260a8b35ANALYSIS DATE: 2022-11-07T05:24:35ZTTPS: T1491, T1112, T1082, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – 2dc0dad1939edfdf997525bac94cdc21

November 7, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 2dc0dad1939edfdf997525bac94cdc21SHA1: e3e398a3eed8ffc0266dbe37c396909eee150cf4ANALYSIS DATE: 2022-11-07T05:05:04ZTTPS: T1012, T1120, T1082, T1107, T1490, T1112 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – djvu – 3993a37920a429f540d76263b393e202

November 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:google2, botnet:mario23_10, botnet:slovarik1btc, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer,...

Malware Analysis

Malware Analysis – evasion – 0d3f25e56a2706965f7d95be341a8db7

Malware Analysis – evasion – 932cbc0036a7bbd8608c8b37e1c62107

Malware Analysis – privateloader – ebcdfc509d4e6eea4c1692b03675e55d

Malware Analysis – discovery – ba9bbc1f583f5f93bb78628fc73f61c3

Malware Analysis – smokeloader – 7844d97ae3dc5876d2c89a5f02415ba6

Malware Analysis – discovery – 1a7056340d8f6a6360ea3364e09830ed

Malware Analysis – amadey – e735a97e4e0e565f98ac40c3ed93336f

Malware Analysis – wannacry – 9b1e56e3e4afe02a712896995a7dbd96

Malware Analysis – smokeloader – 6f4c50af40764e40f85bd818f290eb3e

Malware Analysis – ryuk – 622bc38dee08e70e91e2be32a58b6d1f

Malware Analysis – amadey – 7bb3cf423412fe38357326945d4031b0

Malware Analysis – djvu – e0aea896a0d1aafcf00413ca920b69f7

Malware Analysis – wannacry – ffa761aaad7398b58c98b7de186783bf

Malware Analysis – wannacry – a1bbc4f908c7e79fa740abb5574e5733

Malware Analysis – wannacry – 7cfcb0def88dafe36c8b1440bb62ebd8

Malware Analysis – amadey – 143b2d68c66781d3bcfedaa63cdea1c3

Malware Analysis – djvu – 6d123f3d24355c2b777dbd593fe6f45e

Malware Analysis – amadey – 04dd6fba1c7daca5072719e426e81695

Malware Analysis – wannacry – 1fedbacd1ad3982f3718f2344ef7cac8

Malware Analysis – djvu – 7f98c5308bcea9914200a592c17bfaec

Malware Analysis – chaos – 9d016244b7f58fa5e974ef5f6e1ae54e

Malware Analysis – ransomware – 005c8975c5aeeeb883b178da8179478c

Malware Analysis – ransomware – 2dc0dad1939edfdf997525bac94cdc21

Malware Analysis – djvu – 3993a37920a429f540d76263b393e202

[FUNKSEC] – Ransomware Victim: wissenhive[.]com

[FUNKSEC] – Ransomware Victim: Now you can also visit Funksec on Clearnet funksec[.]top

Cobalt Strike Beacon Detected – 82[.]156[.]0[.]140:443

Cobalt Strike Beacon Detected – 8[.]135[.]237[.]16:2222

Cobalt Strike Beacon Detected – 87[.]120[.]115[.]8:7777

You may have missed