Malware Analysis

Malware Analysis – persistence – a2bf3ceb879904e6fe6fdaa80a6db39b

October 30, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: a2bf3ceb879904e6fe6fdaa80a6db39bSHA1: dba07637840b84133a3cf8e9012d6a9b5c50d7f0ANALYSIS DATE: 2022-10-30T04:47:36ZTTPS: T1112, T1060, T1107, T1490, T1082 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – evasion – 931bd3160c08b92c4ff90b66b8efcec5

October 30, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 931bd3160c08b92c4ff90b66b8efcec5SHA1: c816e7d1a082f6b4ae8798958e3bf0daeb5c407bANALYSIS DATE: 2022-10-30T05:39:02ZTTPS: T1491, T1112, T1490, T1082, T1012, T1120, T1088, T1089,...

Malware Analysis – djvu – 4154fc7a72570db72966dccccb93f5ca

October 30, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:1752, botnet:517, botnet:google2, botnet:mario23_10, botnet:slovarik15btc, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware,...

Malware Analysis – ransomware – d9956991845e1e275e0fc823133eebf2

October 30, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: d9956991845e1e275e0fc823133eebf2SHA1: d5c9a236ea6a8af8af49f1b95d9065d5d31be737ANALYSIS DATE: 2022-10-30T15:40:47ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 30c121c3995d7d7c5597b0b4d3047aa2

October 30, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 30c121c3995d7d7c5597b0b4d3047aa2SHA1: 4c80abe95de3788a5ff6b2e16175a68b76413643ANALYSIS DATE: 2022-10-30T15:40:33ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – hive – 177417be748814f6168171a42545f9dd

October 30, 2022

Score: 10 MALWARE FAMILY: hiveTAGS:family:hive, evasion, ransomware, spyware, stealer, trojanMD5: 177417be748814f6168171a42545f9ddSHA1: 9c8b988e66e0fe6f9dab69b1055e4ee200531094ANALYSIS DATE: 2022-10-30T15:56:09ZTTPS: T1490, T1070, T1005, T1081, T1107, T1018,...

Malware Analysis – ransomware – 9ca46c92ae6ab9a127917be16cbbf337

October 30, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 9ca46c92ae6ab9a127917be16cbbf337SHA1: b80a2ed9fe34575f709dff7badc5ea1d31eef986ANALYSIS DATE: 2022-10-30T15:40:39ZTTPS: T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – 73daf946d8e6ca26d983209add90d970

October 30, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 73daf946d8e6ca26d983209add90d970SHA1: 4490a66af0cd16b30c6e189e44b5c900cc822fb4ANALYSIS DATE: 2022-10-30T16:09:37ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – c862bbb79cf3512d444dec4acb489882

October 30, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:1752, botnet:517, botnet:google2, botnet:mario23_10, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer,...

Malware Analysis – ransomware – 1bd2517f25e7ba3a3b9568c2768b66d9

October 30, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 1bd2517f25e7ba3a3b9568c2768b66d9SHA1: a7cd993dd6b820b4c8f4fd9973a29e1f779c5ac1ANALYSIS DATE: 2022-10-30T16:16:56ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – smokeloader – c7b987a36262b72c27d1e3282186f235

October 30, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: c7b987a36262b72c27d1e3282186f235SHA1: f6722992a55c8d7ab60986725b0d07204b14c4a3ANALYSIS DATE: 2022-10-30T17:36:38ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – a3629e1ac9a406713d4301202e559d00

October 30, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, persistenceMD5: a3629e1ac9a406713d4301202e559d00SHA1: 38504d98f976fa87da12a9c0165f5e37dc33611aANALYSIS DATE: 2022-10-29T20:22:22ZTTPS: T1222, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – 55afea6e347e2249fab29a55a5df9ba1

October 30, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, persistenceMD5: 55afea6e347e2249fab29a55a5df9ba1SHA1: 0908dd743908cd8208f835a301286c81a1d22642ANALYSIS DATE: 2022-10-29T20:22:21ZTTPS: T1060, T1112, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – persistence – a3975628bc4302b107fcf1a043f7eaad

October 30, 2022

Score: 7 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: a3975628bc4302b107fcf1a043f7eaadSHA1: 4cc28edca51befdddbebc9053b4fa910bc8fa3ecANALYSIS DATE: 2022-10-29T19:57:56ZTTPS: T1012, T1082, T1060, T1112, T1491 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – wannacry – 0629d8804e1c50934aa2a55213828b21

October 30, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 0629d8804e1c50934aa2a55213828b21SHA1: a9beac5c15f51b67c7f6237a3deb7ff960a91c71ANALYSIS DATE: 2022-10-30T03:00:22ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – wannacry – 0f810b8d2b4ce0a7bec679081cd52c18

October 30, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 0f810b8d2b4ce0a7bec679081cd52c18SHA1: a3c947e15fbea7fa7cd47113372d1d9d75fc748cANALYSIS DATE: 2022-10-30T04:20:35ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – persistence – 3f3bf49a4aba5114b7e676ca6da9535a

October 30, 2022

Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 3f3bf49a4aba5114b7e676ca6da9535aSHA1: 8df59902f504baafc432a8e7ac7d1c38d3c1326bANALYSIS DATE: 2022-10-30T04:38:35ZTTPS: T1060, T1112, T1491, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 561ea4834fddc37604a8edfd59646f79

October 30, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 561ea4834fddc37604a8edfd59646f79SHA1: 0091fb9c80a147f96683d084c082af0fc06716daANALYSIS DATE: 2022-10-30T03:01:53ZTTPS: T1112, T1158, T1082, T1059, T1012, T1057 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – persistence – 17f409be70237abeeeca57f18c504bcf

October 30, 2022

Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 17f409be70237abeeeca57f18c504bcfSHA1: 64d1776631eb4644721fbee42c0bbf30da8783fbANALYSIS DATE: 2022-10-30T04:41:51ZTTPS: T1082, T1112, T1491, T1060 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – infostealer – a97b0f272fa4b1a2e3588ae1ba4ca709

October 30, 2022

Score: 7 MALWARE FAMILY: infostealerTAGS:infostealer, ransomwareMD5: a97b0f272fa4b1a2e3588ae1ba4ca709SHA1: 4ed6341ff49109b65e7e71a4c5019418389c7ecfANALYSIS DATE: 2022-10-29T14:20:12ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – gozi – e7420f65e10bcc7bec4fc1bd3812d2d0

October 30, 2022

Score: 10 MALWARE FAMILY: goziTAGS:family:gozi, botnet:1006, banker, evasion, isfb, persistence, ransomware, trojanMD5: e7420f65e10bcc7bec4fc1bd3812d2d0SHA1: 7b23f3e25a8ec792935123444806368048762127ANALYSIS DATE: 2022-10-29T14:31:07ZTTPS: T1082, T1491, T1112, T1060,...

Malware Analysis – ransomware – 61d88e372b71069553d53144fe7a12a2

October 30, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 61d88e372b71069553d53144fe7a12a2SHA1: 939a98c5226f917df26cddf71000cfb25bcd616aANALYSIS DATE: 2022-10-29T14:33:41ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – evasion – 9fda6127bafc0bb9d6cc53bad6137763

October 30, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 9fda6127bafc0bb9d6cc53bad6137763SHA1: 104cc0fbd3f1a1c1253b9279f90b3929bc850af9ANALYSIS DATE: 2022-10-29T14:38:53ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – discovery – d7ef40600c2d4031e262ede93a5b1cf2

October 30, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: d7ef40600c2d4031e262ede93a5b1cf2SHA1: 55b9dd028f3bb02ec555f5e1ade5379ed8ea297fANALYSIS DATE: 2022-10-29T14:31:41ZTTPS: T1222, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis

Malware Analysis – persistence – a2bf3ceb879904e6fe6fdaa80a6db39b

Malware Analysis – evasion – 931bd3160c08b92c4ff90b66b8efcec5

Malware Analysis – djvu – 4154fc7a72570db72966dccccb93f5ca

Malware Analysis – ransomware – d9956991845e1e275e0fc823133eebf2

Malware Analysis – ransomware – 30c121c3995d7d7c5597b0b4d3047aa2

Malware Analysis – hive – 177417be748814f6168171a42545f9dd

Malware Analysis – ransomware – 9ca46c92ae6ab9a127917be16cbbf337

Malware Analysis – ransomware – 73daf946d8e6ca26d983209add90d970

Malware Analysis – djvu – c862bbb79cf3512d444dec4acb489882

Malware Analysis – ransomware – 1bd2517f25e7ba3a3b9568c2768b66d9

Malware Analysis – smokeloader – c7b987a36262b72c27d1e3282186f235

Malware Analysis – discovery – a3629e1ac9a406713d4301202e559d00

Malware Analysis – discovery – 55afea6e347e2249fab29a55a5df9ba1

Malware Analysis – persistence – a3975628bc4302b107fcf1a043f7eaad

Malware Analysis – wannacry – 0629d8804e1c50934aa2a55213828b21

Malware Analysis – wannacry – 0f810b8d2b4ce0a7bec679081cd52c18

Malware Analysis – persistence – 3f3bf49a4aba5114b7e676ca6da9535a

Malware Analysis – ransomware – 561ea4834fddc37604a8edfd59646f79

Malware Analysis – persistence – 17f409be70237abeeeca57f18c504bcf

Malware Analysis – infostealer – a97b0f272fa4b1a2e3588ae1ba4ca709

Malware Analysis – gozi – e7420f65e10bcc7bec4fc1bd3812d2d0

Malware Analysis – ransomware – 61d88e372b71069553d53144fe7a12a2

Malware Analysis – evasion – 9fda6127bafc0bb9d6cc53bad6137763

Malware Analysis – discovery – d7ef40600c2d4031e262ede93a5b1cf2

[LYNX] – Ransomware Victim: Astaphans

[LYNX] – Ransomware Victim: Jim Thompson

CVE Alert: CVE-2024-57823

CVE Alert: CVE-2024-41787

CVE Alert: CVE-2024-57686

You may have missed