Malware Analysis

Malware Analysis – persistence – df80cbaadb754de14c97dc05995fdc4a

April 25, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: df80cbaadb754de14c97dc05995fdc4aSHA1: 6f9369c9d2f174b4abd642d4fb43cff690f364dfANALYSIS DATE: 2023-04-25T17:27:16ZTTPS: T1107, T1490, T1112, T1012, T1120, T1082, T1060 ScoreMeaningExample10Known badA malware...

Malware Analysis – persistence – 420b2f010edbc63a68b2cce2cdf1e5e9

April 25, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 420b2f010edbc63a68b2cce2cdf1e5e9SHA1: 4cf5072cfe0eb42d387713067e2706902c89b294ANALYSIS DATE: 2023-04-25T17:27:15ZTTPS: T1130, T1112, T1107, T1490, T1082, T1060, T1012, T1120 ScoreMeaningExample10Known badA...

Malware Analysis – persistence – 3bceadd4c2c546aba24e24307f1defcd

April 25, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 3bceadd4c2c546aba24e24307f1defcdSHA1: 81e4110a72821a1b1f01a3f3a8bf89188af40067ANALYSIS DATE: 2023-04-25T17:27:20ZTTPS: T1107, T1490, T1082, T1060, T1112, T1012, T1120 ScoreMeaningExample10Known badA malware...

Malware Analysis – persistence – e736d07744f89f05460b1f12daeb8172

April 25, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: e736d07744f89f05460b1f12daeb8172SHA1: 19fb70308f0d47947eb6d2d5b572e96539d345bbANALYSIS DATE: 2023-04-25T17:27:21ZTTPS: T1012, T1120, T1082, T1107, T1490, T1112, T1060 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 66f62279e9722368a730adc3b67f2315

April 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, stealerMD5: 66f62279e9722368a730adc3b67f2315SHA1: a9804ada1a10d8a5827029342283f6ffeea6f3d3ANALYSIS DATE: 2023-04-25T17:35:04ZTTPS: T1053, T1130, T1112, T1222, T1060,...

Malware Analysis – persistence – a202914a34dc528aa137bd394518d9b0

April 25, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: a202914a34dc528aa137bd394518d9b0SHA1: 4724934b61687cb1abe96bab137c7b1d4476f271ANALYSIS DATE: 2023-04-25T17:27:21ZTTPS: T1060, T1112, T1012, T1120, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 900c5a8f4afb3473c9dac0f984d746f4

April 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, stealerMD5: 900c5a8f4afb3473c9dac0f984d746f4SHA1: 00dadacc6119c3e8ccdbe4477da2452d06e8a992ANALYSIS DATE: 2023-04-25T17:32:11ZTTPS: T1130, T1112, T1060, T1222, T1082,...

Malware Analysis – quasar – 5ec1610f2529bf6c482f43e8d7cb6235

April 25, 2023

Score: 10 MALWARE FAMILY: quasarTAGS:family:quasar, evasion, persistence, ransomware, spyware, trojanMD5: 5ec1610f2529bf6c482f43e8d7cb6235SHA1: a356a2a69d0551967f133b4b18c43703027e2383ANALYSIS DATE: 2023-04-25T17:40:13ZTTPS: T1107, T1490, T1088, T1089, T1112, T1031,...

Malware Analysis – evasion – 2c2bd73dcba2e7eb7fa78105c84ca2b1

April 25, 2023

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 2c2bd73dcba2e7eb7fa78105c84ca2b1SHA1: 24d7defc1e00739461dda0b275bd8304277aafd1ANALYSIS DATE: 2023-04-25T17:37:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – babuk – f9afb31bc17811e5ab4fa406f105b1fe

April 25, 2023

Score: 10 MALWARE FAMILY: babukTAGS:family:babuk, family:darkside, ransomwareMD5: f9afb31bc17811e5ab4fa406f105b1feSHA1: d1a9449dcc8a3aa0c887bce71f128866175f679aANALYSIS DATE: 2023-04-25T17:44:04ZTTPS: T1107, T1490, T1082, T1012, T1120 ScoreMeaningExample10Known badA malware family...

Malware Analysis – djvu – 4bc6e26f6bf9258473180f9805bbe508

April 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 4bc6e26f6bf9258473180f9805bbe508SHA1: dacc8979f7e59e60be9cb842982ee0deca5b3248ANALYSIS DATE: 2023-04-25T17:41:03ZTTPS: T1130, T1112, T1060, T1222, T1082, T1053 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – 18d171bc6fea9f638c4d76698b2b7d7f

April 24, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, spyware, stealerMD5: 18d171bc6fea9f638c4d76698b2b7d7fSHA1: ab1aa609f0395ab1a410a8aeef94d9fc6f9b0fb6ANALYSIS DATE: 2023-04-24T15:22:21ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – evasion – 8effcc3b16c124f3ba46fe8e86947105

April 24, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 8effcc3b16c124f3ba46fe8e86947105SHA1: d6b4f76d9bfbaae0fc944adb8cb9dd8f487050efANALYSIS DATE: 2023-04-24T14:32:46ZTTPS: T1012, T1082, T1112, T1060, T1158, T1491, T1120 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – 9d416753c2a076fa65105a7d34fbe1cb

April 24, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, spyware, stealerMD5: 9d416753c2a076fa65105a7d34fbe1cbSHA1: 52e01796a7c5f0492d832f86708d4bfab0f2b690ANALYSIS DATE: 2023-04-24T15:43:58ZTTPS: T1005, T1081, T1012, T1060,...

Malware Analysis – evasion – b209c6502e2fecd11fbdeb4fe602e90a

April 24, 2023

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: b209c6502e2fecd11fbdeb4fe602e90aSHA1: 5abd3b562aa38db2a1f14ec0997a5e9d6fa4fc9eANALYSIS DATE: 2023-04-24T17:23:51ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – amadey – 0e5768e5106ad5956530ada9cbd08647

April 24, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:raccoon, family:rhadamanthys, family:smokeloader, family:vidar, botnet:5c24dc0e9726fcc756a18038ae4e0e67, botnet:5cb879265de0011bfc7588d5d251aee6, botnet:fc8427198f843d72c1aa8a66db1a98f3, botnet:pub1, backdoor, collection, discovery, evasion, persistence, ransomware,...

Malware Analysis – amadey – ca89840f1259ebfe7a0e945c15ed79e5

April 24, 2023

Malware Analysis – djvu – 8729348bb91d4712cde74e6ae4949bbe

April 24, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, spyware, stealerMD5: 8729348bb91d4712cde74e6ae4949bbeSHA1: 996a94a902d668107532ba251f8224d6b7225ddcANALYSIS DATE: 2023-04-24T17:25:53ZTTPS: T1012, T1082, T1053, T1005,...

Malware Analysis – amadey – 6f067e24ed07adc6b424ac9a0e7f5a61

April 24, 2023

Malware Analysis – djvu – 9e152141b4c83bd73477b543860668df

April 24, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, spyware, stealerMD5: 9e152141b4c83bd73477b543860668dfSHA1: 841b2caff78d9dd1e8ad6b6a1493c9892d698dceANALYSIS DATE: 2023-04-24T17:32:45ZTTPS: T1082, T1012, T1005, T1081,...

Malware Analysis – djvu – 413e3d55867e81e00b0fc53b335e0c8a

April 24, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, stealerMD5: 413e3d55867e81e00b0fc53b335e0c8aSHA1: bef6e9491bd8fc6489808c1eebe11d20c638297bANALYSIS DATE: 2023-04-24T17:27:59ZTTPS: T1222, T1082, T1053, T1130, T1112,...

Malware Analysis – ransomware – e0c0eb3003d60d0f9b138b99386f3ac5

April 23, 2023

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: e0c0eb3003d60d0f9b138b99386f3ac5SHA1: 490055d08a5e685a9273ccdc21562d6e61f085ceANALYSIS DATE: 2023-04-23T15:53:28ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – d40e6770732b567015fd74c4ad7ab22b

April 23, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:bf58e1879f88b222ba2391682babf9d8, discovery, persistence, ransomware, spyware, stealerMD5: d40e6770732b567015fd74c4ad7ab22bSHA1: 112d0a3a264ccb52d809cb8c3359733221fc1d1bANALYSIS DATE: 2023-04-23T16:11:01ZTTPS: T1005, T1081, T1060, T1112,...

Malware Analysis – amadey – 385f0863a2078a48cc981c21ca894af4

April 23, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, botnet:pub1, backdoor, discovery, ransomware, trojanMD5: 385f0863a2078a48cc981c21ca894af4SHA1: 1efec0751c7e72261acd3885bb1909ea1bfbf790ANALYSIS DATE: 2023-04-23T16:33:20ZTTPS: T1082, T1222, T1012, T1120,...

Malware Analysis

Malware Analysis – persistence – df80cbaadb754de14c97dc05995fdc4a

Malware Analysis – persistence – 420b2f010edbc63a68b2cce2cdf1e5e9

Malware Analysis – persistence – 3bceadd4c2c546aba24e24307f1defcd

Malware Analysis – persistence – e736d07744f89f05460b1f12daeb8172

Malware Analysis – djvu – 66f62279e9722368a730adc3b67f2315

Malware Analysis – persistence – a202914a34dc528aa137bd394518d9b0

Malware Analysis – djvu – 900c5a8f4afb3473c9dac0f984d746f4

Malware Analysis – quasar – 5ec1610f2529bf6c482f43e8d7cb6235

Malware Analysis – evasion – 2c2bd73dcba2e7eb7fa78105c84ca2b1

Malware Analysis – babuk – f9afb31bc17811e5ab4fa406f105b1fe

Malware Analysis – djvu – 4bc6e26f6bf9258473180f9805bbe508

Malware Analysis – djvu – 18d171bc6fea9f638c4d76698b2b7d7f

Malware Analysis – evasion – 8effcc3b16c124f3ba46fe8e86947105

Malware Analysis – djvu – 9d416753c2a076fa65105a7d34fbe1cb

Malware Analysis – evasion – b209c6502e2fecd11fbdeb4fe602e90a

Malware Analysis – amadey – 0e5768e5106ad5956530ada9cbd08647

Malware Analysis – amadey – ca89840f1259ebfe7a0e945c15ed79e5

Malware Analysis – djvu – 8729348bb91d4712cde74e6ae4949bbe

Malware Analysis – amadey – 6f067e24ed07adc6b424ac9a0e7f5a61

Malware Analysis – djvu – 9e152141b4c83bd73477b543860668df

Malware Analysis – djvu – 413e3d55867e81e00b0fc53b335e0c8a

Malware Analysis – ransomware – e0c0eb3003d60d0f9b138b99386f3ac5

Malware Analysis – djvu – d40e6770732b567015fd74c4ad7ab22b

Malware Analysis – amadey – 385f0863a2078a48cc981c21ca894af4

[DRAGONFORCE] – Ransomware Victim: Ikav Global Energy

[DRAGONFORCE] – Ransomware Victim: Asheville Eye Associates

[FUNKSEC] – Ransomware Victim: deportesapalategui[.]com

CVE Alert: CVE-2024-43705

CVE Alert: CVE-2020-1821

You may have missed