Malware Analysis

Malware Analysis – evasion – 9072eaaac635b661de75bb2dc52dac80

October 31, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: 9072eaaac635b661de75bb2dc52dac80SHA1: c6c05d62f702fbf3510865b2f311f6a653d18c5cANALYSIS DATE: 2022-10-30T22:31:39ZTTPS: T1005, T1081, T1012, T1082, T1112, T1004,...

Malware Analysis – evasion – 91330e76d6842aeda80250decb27e860

October 31, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: 91330e76d6842aeda80250decb27e860SHA1: 84e48fd14b26d717fb071ad3975b538cc5f521bfANALYSIS DATE: 2022-10-30T22:31:43ZTTPS: T1112, T1158, T1088, T1089, T1082, T1005,...

Malware Analysis – evasion – 90cf1e187dd9bb026e6e9c7872fd7f90

October 31, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: 90cf1e187dd9bb026e6e9c7872fd7f90SHA1: bcaccac04abffb51c3ce117cc93bf8ab4fed8adeANALYSIS DATE: 2022-10-30T22:31:53ZTTPS: T1012, T1082, T1004, T1112, T1005, T1081,...

Malware Analysis – evasion – 829998e57b9e408624db174732c4a7d0

October 31, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: 829998e57b9e408624db174732c4a7d0SHA1: 5e61b4573191de5eaabbec8c7cd69adbe8d8b58cANALYSIS DATE: 2022-10-30T22:31:20ZTTPS: T1158, T1112, T1060, T1004, T1088, T1089,...

Malware Analysis – evasion – a24e60454aeb6a930cba580af779bbd0

October 31, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: a24e60454aeb6a930cba580af779bbd0SHA1: ec0ba985d86c27ee34eb51ec01635fb09e20f116ANALYSIS DATE: 2022-10-30T22:32:17ZTTPS: T1158, T1112, T1088, T1089, T1082, T1005,...

Malware Analysis – evasion – 82e7a8a640aeb983f581c6324c6e0a40

October 31, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: 82e7a8a640aeb983f581c6324c6e0a40SHA1: 921cf6dd2f4367cd343c781a7370747e449ee401ANALYSIS DATE: 2022-10-30T22:32:09ZTTPS: T1060, T1112, T1082, T1158, T1005, T1081,...

Malware Analysis – evasion – 918e6cdb363dc23ff1875e334136b100

October 31, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, trojanMD5: 918e6cdb363dc23ff1875e334136b100SHA1: fc604fc3d97ba75ccd0673fe2eb0c41a332f3a4eANALYSIS DATE: 2022-10-30T22:32:13ZTTPS: T1060, T1112, T1158, T1088, T1089, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – 82894aa1d6b7617537ac1542d2230ae0

October 31, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: 82894aa1d6b7617537ac1542d2230ae0SHA1: 512cef9ad8b4c59ff880c86da0380282b1c2f291ANALYSIS DATE: 2022-10-30T22:32:04ZTTPS: T1004, T1112, T1158, T1082, T1012, T1060,...

Malware Analysis – evasion – a22787100dd832f4d9903c0f3ba68280

October 31, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: a22787100dd832f4d9903c0f3ba68280SHA1: 627c7dcf888f5f8be877f34b9f253263bd816910ANALYSIS DATE: 2022-10-30T22:32:24ZTTPS: T1088, T1089, T1112, T1082, T1005, T1081,...

Malware Analysis – octo – fe8c5119c2e887e22028919ce65d5fc2

October 31, 2022

Score: 10 MALWARE FAMILY: octoTAGS:family:octo, banker, evasion, infostealer, ransomware, rat, trojanMD5: fe8c5119c2e887e22028919ce65d5fc2SHA1: c264d92e2ef991dad17896589b04344304b50fcfANALYSIS DATE: 2022-10-31T16:35:24ZTTPS: ScoreMeaningExample10Known badA malware family was...

Malware Analysis – smokeloader – 228c8eb91f844d89235c7bc80ad57a85

October 31, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 228c8eb91f844d89235c7bc80ad57a85SHA1: ad06384bedb70d6a90efe277bea1b440a6d76d83ANALYSIS DATE: 2022-10-31T15:34:53ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 144f0104997e1d57ec26ef608201819a

October 31, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 144f0104997e1d57ec26ef608201819aSHA1: 61e55c0094594a5714a945b07a4fc7a3baed3fffANALYSIS DATE: 2022-10-31T16:39:20ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – persistence – 7129291fc3d97377200f8a24ad06930a

October 31, 2022

Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 7129291fc3d97377200f8a24ad06930aSHA1: 3f858d2837529e6c973ffa7c26c643e9748e7282ANALYSIS DATE: 2022-10-31T17:01:04ZTTPS: T1005, T1081, T1012, T1120, T1082, T1060, T1112 ScoreMeaningExample10Known...

Malware Analysis – smokeloader – 312b08af732069833358094647763db8

October 31, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 312b08af732069833358094647763db8SHA1: 6fba36cf4a478f5f6dddf3a335979947f85c313dANALYSIS DATE: 2022-10-31T17:26:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – f125e972f42ff30bf7df357311249aa3

October 31, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, botnet:mario23_10, botnet:slovarik1btc, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: f125e972f42ff30bf7df357311249aa3SHA1: 9bd85179c11ea8cd9f0954a406c6cae4d9585106ANALYSIS...

Malware Analysis – spyware – 6468ee100d88c71d55dfdcf4e30f991e

October 31, 2022

Score: 7 MALWARE FAMILY: spywareTAGS:spyware, stealerMD5: 6468ee100d88c71d55dfdcf4e30f991eSHA1: 5c520d2d7dc4c9e5d536d3aff998185657d40ac8ANALYSIS DATE: 2022-10-31T17:01:04ZTTPS: T1012, T1120, T1082, T1005, T1081 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – evasion – 82d488f347a4e67db237bf4bbe470c40

October 31, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 82d488f347a4e67db237bf4bbe470c40SHA1: 0252fde2095c5f45111eb4c60be5a178538dbab0ANALYSIS DATE: 2022-10-30T18:25:23ZTTPS: T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – 827fdd109cd5a7380d69ad85d5ac6ca0

October 31, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 827fdd109cd5a7380d69ad85d5ac6ca0SHA1: f7c97273942629cc7695db4109b8dd56b6deed50ANALYSIS DATE: 2022-10-30T18:47:37ZTTPS: T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – 82fd0018bb2441cfc589124168472840

October 31, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, exploit, trojanMD5: 82fd0018bb2441cfc589124168472840SHA1: c389e4cd7981f7236f19f357f5ba61901d52dc37ANALYSIS DATE: 2022-10-30T17:57:29ZTTPS: T1088, T1089, T1112, T1222, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – discovery – 81a13f9d7efa8f86332cb8f897df2a46

October 31, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 81a13f9d7efa8f86332cb8f897df2a46SHA1: d0f11013eca20c750ae74456ed17fb2b010c5e23ANALYSIS DATE: 2022-10-30T17:52:28ZTTPS: T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – 47f913162c41fbbb8d4df6dd8db678b1

October 31, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, botnet:mario23_10, botnet:slovarik1btc, backdoor, bootkit, collection, discovery, infostealer, persistence, ransomware, spyware, trojanMD5: 47f913162c41fbbb8d4df6dd8db678b1SHA1: 67aad17ae47bc054c066cf285a5a0093cc6ee3f9ANALYSIS...

Malware Analysis – smokeloader – fc7f8d916ef462b2625f2d879658c7d7

October 31, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: fc7f8d916ef462b2625f2d879658c7d7SHA1: 9181dabb0b81f89f30bb43be0723247e9c620b33ANALYSIS DATE: 2022-10-31T10:25:14ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 378aa9513d43ab0502ff20063fbf4adf

October 31, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 378aa9513d43ab0502ff20063fbf4adfSHA1: d3b06d16b1c1bccdc0489f8014893cf33e028729ANALYSIS DATE: 2022-10-31T10:25:18ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 824ff4f4dee50edcdffa47005b5e94a3

October 31, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, botnet:mario23_10, botnet:slovarik1btc, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, trojanMD5: 824ff4f4dee50edcdffa47005b5e94a3SHA1: 928594c20c1d119d3a96620de99c175387bae38aANALYSIS DATE:...

Malware Analysis

Malware Analysis – evasion – 9072eaaac635b661de75bb2dc52dac80

Malware Analysis – evasion – 91330e76d6842aeda80250decb27e860

Malware Analysis – evasion – 90cf1e187dd9bb026e6e9c7872fd7f90

Malware Analysis – evasion – 829998e57b9e408624db174732c4a7d0

Malware Analysis – evasion – a24e60454aeb6a930cba580af779bbd0

Malware Analysis – evasion – 82e7a8a640aeb983f581c6324c6e0a40

Malware Analysis – evasion – 918e6cdb363dc23ff1875e334136b100

Malware Analysis – evasion – 82894aa1d6b7617537ac1542d2230ae0

Malware Analysis – evasion – a22787100dd832f4d9903c0f3ba68280

Malware Analysis – octo – fe8c5119c2e887e22028919ce65d5fc2

Malware Analysis – smokeloader – 228c8eb91f844d89235c7bc80ad57a85

Malware Analysis – smokeloader – 144f0104997e1d57ec26ef608201819a

Malware Analysis – persistence – 7129291fc3d97377200f8a24ad06930a

Malware Analysis – smokeloader – 312b08af732069833358094647763db8

Malware Analysis – djvu – f125e972f42ff30bf7df357311249aa3

Malware Analysis – spyware – 6468ee100d88c71d55dfdcf4e30f991e

Malware Analysis – evasion – 82d488f347a4e67db237bf4bbe470c40

Malware Analysis – evasion – 827fdd109cd5a7380d69ad85d5ac6ca0

Malware Analysis – discovery – 82fd0018bb2441cfc589124168472840

Malware Analysis – discovery – 81a13f9d7efa8f86332cb8f897df2a46

Malware Analysis – djvu – 47f913162c41fbbb8d4df6dd8db678b1

Malware Analysis – smokeloader – fc7f8d916ef462b2625f2d879658c7d7

Malware Analysis – smokeloader – 378aa9513d43ab0502ff20063fbf4adf

Malware Analysis – djvu – 824ff4f4dee50edcdffa47005b5e94a3

[LYNX] – Ransomware Victim: Astaphans

[LYNX] – Ransomware Victim: Jim Thompson

CVE Alert: CVE-2024-57823

CVE Alert: CVE-2024-41787

CVE Alert: CVE-2024-57686

You may have missed