Malware Analysis

Malware Analysis – infinitylock – b805db8f6a84475ef76b795b0d1ed6ae

April 23, 2023

Score: 10 MALWARE FAMILY: infinitylockTAGS:family:infinitylock, ransomwareMD5: b805db8f6a84475ef76b795b0d1ed6aeSHA1: 7711cb4873e58b7adcf2a2b047b090e78d10c75bANALYSIS DATE: 2023-04-23T16:45:30ZTTPS: T1012, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – persistence – c9c341eaf04c89933ed28cbc2739d325

April 23, 2023

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: c9c341eaf04c89933ed28cbc2739d325SHA1: c5b7d47aef3bd33a24293138fcba3a5ff286c2a8ANALYSIS DATE: 2023-04-23T16:55:28ZTTPS: T1107, T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – a138167f24490e16fc61019313b21fe9

April 23, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:bf58e1879f88b222ba2391682babf9d8, discovery, persistence, ransomware, spyware, stealerMD5: a138167f24490e16fc61019313b21fe9SHA1: 09083bb5f45cc3e4109d48980b01eb8ce97aad85ANALYSIS DATE: 2023-04-23T16:50:27ZTTPS: T1222, T1012, T1082, T1053,...

Malware Analysis – djvu – 58bed43c59725777ba297b624a20aa9b

April 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:bf58e1879f88b222ba2391682babf9d8, discovery, persistence, ransomware, spyware, stealerMD5: 58bed43c59725777ba297b624a20aa9bSHA1: bf9175aa263d1430e14ba0d82c4b22dd8bce8fc2ANALYSIS DATE: 2023-04-22T15:30:39ZTTPS: T1005, T1081, T1222, T1082,...

Malware Analysis – nemty – 0000efd7a890e1e1a93e481288f5bd2a

April 22, 2023

Score: 10 MALWARE FAMILY: nemtyTAGS:family:nemty, ransomwareMD5: 0000efd7a890e1e1a93e481288f5bd2aSHA1: b5c5386dcbd850262a7a81ff818343dc306e58ceANALYSIS DATE: 2023-04-22T15:37:03ZTTPS: T1107, T1490, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – sodinokibi – fa8117afd2dbd20513522f2f8e991262

April 22, 2023

Score: 10 MALWARE FAMILY: sodinokibiTAGS:family:sodinokibi, botnet:$2b$13$wz1rerfdlg.aistldqg5jeqqysemspatwkhdwbpwvrc3ty7akscg6, campaign:49, ransomwareMD5: fa8117afd2dbd20513522f2f8e991262SHA1: f7b876edb8fc0c83fd8b665d3c5a1050d4396302ANALYSIS DATE: 2023-04-22T15:31:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – evasion – e634caa91e10f27736e85527c9689850

April 22, 2023

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: e634caa91e10f27736e85527c9689850SHA1: 92cf5e1ba154a02cf99e98a927f328b8332bbf5cANALYSIS DATE: 2023-04-22T15:59:51ZTTPS: T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – – c34c49a9b96d5a7d748a0a4d9710c724

April 22, 2023

Score: 6 MALWARE FAMILY: TAGS:MD5: c34c49a9b96d5a7d748a0a4d9710c724SHA1: ff1f0f83fb7ad3de4a6575c8e74e829047a41e87ANALYSIS DATE: 2023-04-22T15:39:02ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 4656b7d2f66e89e0e4abd1d89644cd28

April 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:bf58e1879f88b222ba2391682babf9d8, discovery, persistence, ransomware, spyware, stealerMD5: 4656b7d2f66e89e0e4abd1d89644cd28SHA1: 3edeb841721f62785d3c2d79efbe7500438dacaeANALYSIS DATE: 2023-04-22T17:10:25ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – amadey – 478b577f1c2f29eac6bf1c49bab3e999

April 22, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:lumma, family:rhadamanthys, family:smokeloader, family:vidar, family:xmrig, botnet:bf58e1879f88b222ba2391682babf9d8, botnet:pub1, backdoor, collection, discovery, evasion, miner, persistence, ransomware,...

Malware Analysis – amadey – d9b10e1835acff0918213a43a4d6c29d

April 22, 2023

Malware Analysis – djvu – c4c89fbaf5fec1345072aa7fab40c017

April 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:bf58e1879f88b222ba2391682babf9d8, discovery, persistence, ransomware, spyware, stealerMD5: c4c89fbaf5fec1345072aa7fab40c017SHA1: 3abc91a497a4fbaea1da12dccd4a5b1516c022b6ANALYSIS DATE: 2023-04-22T16:30:48ZTTPS: T1005, T1081, T1060, T1112,...

Malware Analysis – smokeloader – d299c57057e47b1a81dd5c49bb822566

April 21, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: d299c57057e47b1a81dd5c49bb822566SHA1: 4369f3fccf494cec03cee057b86db29e6fcbef05ANALYSIS DATE: 2023-04-21T15:38:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – a6d373430a8ca2e93109f8791508f2bc

April 21, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:bf58e1879f88b222ba2391682babf9d8, discovery, persistence, ransomware, spyware, stealerMD5: a6d373430a8ca2e93109f8791508f2bcSHA1: e9a58acd2626dd03d484fa23ed8a83410ff96672ANALYSIS DATE: 2023-04-21T15:40:23ZTTPS: T1082, T1012, T1005, T1081,...

Malware Analysis – djvu – 2507457dc74ba35692289735b816bc33

April 21, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:bf58e1879f88b222ba2391682babf9d8, discovery, persistence, ransomware, spyware, stealerMD5: 2507457dc74ba35692289735b816bc33SHA1: fee3651f12fedaf4cd149dbfdd5da55ac773280eANALYSIS DATE: 2023-04-21T15:50:27ZTTPS: T1060, T1112, T1005, T1081,...

Malware Analysis – – ac5b83224a5aaafe540805a2555b62c2

April 21, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: ac5b83224a5aaafe540805a2555b62c2SHA1: adc510b4447f3ecfcd3406be1f79027c73ed0dfbANALYSIS DATE: 2023-04-08T19:50:01ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – smokeloader – 11472d7a71e987834c71c1dfe9eea130

April 21, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 11472d7a71e987834c71c1dfe9eea130SHA1: 285c43fa2d98c92e9fd43dd979219ec49603341bANALYSIS DATE: 2023-04-21T17:21:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – amadey – ecf6c8be4adce2f2f2edd00b366a9087

April 21, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:lumma, family:raccoon, family:rhadamanthys, family:smokeloader, family:vidar, family:xmrig, botnet:bf58e1879f88b222ba2391682babf9d8, botnet:fc8427198f843d72c1aa8a66db1a98f3, botnet:pub1, backdoor, collection, discovery, evasion, miner,...

Malware Analysis – ransomware – 459085283ba0c03ae143d25791cc1880

April 21, 2023

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 459085283ba0c03ae143d25791cc1880SHA1: 688f769f302d06443ae42a794f0d2d36be8c7886ANALYSIS DATE: 2023-04-21T17:43:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – amadey – a1a830ec32763ae045f543eba5b94059

April 21, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:lumma, family:raccoon, family:rhadamanthys, family:smokeloader, family:vidar, botnet:bf58e1879f88b222ba2391682babf9d8, botnet:fc8427198f843d72c1aa8a66db1a98f3, botnet:pub1, backdoor, discovery, evasion, persistence, ransomware, spyware,...

Malware Analysis – medusalocker – 0f025715a5cb507fc46a4df12cfa74d4

April 20, 2023

Score: 10 MALWARE FAMILY: medusalockerTAGS:family:medusalocker, ransomware, spyware, stealerMD5: 0f025715a5cb507fc46a4df12cfa74d4SHA1: f8b2c1eb3d8c77aa3dd57e5b86018d10c2f5c4fcANALYSIS DATE: 2023-04-20T15:22:55ZTTPS: T1005, T1081, T1012, T1082 ScoreMeaningExample10Known badA malware family...

Malware Analysis – djvu – a4de03e4d5a12f369a7fd14c99b16f7f

April 20, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: a4de03e4d5a12f369a7fd14c99b16f7fSHA1: 82c21edfa238036f90176823f7a6c78ade7b2510ANALYSIS DATE: 2023-04-20T15:28:39ZTTPS: T1130, T1112, T1060, T1222, T1082, T1012 ScoreMeaningExample10Known badA...

Malware Analysis – smokeloader – 0b1c074daebb8f8e9895910d927585aa

April 20, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 0b1c074daebb8f8e9895910d927585aaSHA1: 53f470a57886dab6fd1fa5ac5fa02931a2fd9270ANALYSIS DATE: 2023-04-20T15:35:48ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – banker – b4cec5711d8bc5b1b9782c951b7a5eeb

April 20, 2023

Score: 8 MALWARE FAMILY: bankerTAGS:banker, evasion, ransomwareMD5: b4cec5711d8bc5b1b9782c951b7a5eebSHA1: f35c96d80e38bf3485f3b3f21c61825bb0d4630eANALYSIS DATE: 2023-04-20T17:35:39ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis

Malware Analysis – infinitylock – b805db8f6a84475ef76b795b0d1ed6ae

Malware Analysis – persistence – c9c341eaf04c89933ed28cbc2739d325

Malware Analysis – djvu – a138167f24490e16fc61019313b21fe9

Malware Analysis – djvu – 58bed43c59725777ba297b624a20aa9b

Malware Analysis – nemty – 0000efd7a890e1e1a93e481288f5bd2a

Malware Analysis – sodinokibi – fa8117afd2dbd20513522f2f8e991262

Malware Analysis – evasion – e634caa91e10f27736e85527c9689850

Malware Analysis – – c34c49a9b96d5a7d748a0a4d9710c724

Malware Analysis – djvu – 4656b7d2f66e89e0e4abd1d89644cd28

Malware Analysis – amadey – 478b577f1c2f29eac6bf1c49bab3e999

Malware Analysis – amadey – d9b10e1835acff0918213a43a4d6c29d

Malware Analysis – djvu – c4c89fbaf5fec1345072aa7fab40c017

Malware Analysis – smokeloader – d299c57057e47b1a81dd5c49bb822566

Malware Analysis – djvu – a6d373430a8ca2e93109f8791508f2bc

Malware Analysis – djvu – 2507457dc74ba35692289735b816bc33

Malware Analysis – – ac5b83224a5aaafe540805a2555b62c2

Malware Analysis – smokeloader – 11472d7a71e987834c71c1dfe9eea130

Malware Analysis – amadey – ecf6c8be4adce2f2f2edd00b366a9087

Malware Analysis – ransomware – 459085283ba0c03ae143d25791cc1880

Malware Analysis – amadey – a1a830ec32763ae045f543eba5b94059

Malware Analysis – medusalocker – 0f025715a5cb507fc46a4df12cfa74d4

Malware Analysis – djvu – a4de03e4d5a12f369a7fd14c99b16f7f

Malware Analysis – smokeloader – 0b1c074daebb8f8e9895910d927585aa

Malware Analysis – banker – b4cec5711d8bc5b1b9782c951b7a5eeb

[RANSOMHUB] – Ransomware Victim: lianbeng[.]sg

Cobalt Strike Beacon Detected – 42[.]192[.]3[.]170:443

Cobalt Strike Beacon Detected – 117[.]50[.]190[.]56:80

Cobalt Strike Beacon Detected – 36[.]140[.]28[.]13:7777

Cobalt Strike Beacon Detected – 42[.]193[.]230[.]26:6666

You may have missed