Malware Analysis

Malware Analysis – evasion – 793c23884b769e0561ac51e543d20cf0

October 23, 2022

Score: 5 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 793c23884b769e0561ac51e543d20cf0SHA1: e4aa8deef807ded18edc553aabfedb33a8cdf483ANALYSIS DATE: 2022-10-21T19:24:25ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – ransomware – 62cf2c0bbbbd750f10f2ceada62cba80

October 23, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 62cf2c0bbbbd750f10f2ceada62cba80SHA1: 6c52bfdf172a1762fbf003e346ade681b46b702dANALYSIS DATE: 2022-10-21T19:24:27ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – evasion – 7652b0483d37bd356614b3888ab37dc0

October 23, 2022

Score: 5 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 7652b0483d37bd356614b3888ab37dc0SHA1: e582f54d1ba4baeadc11c1e0d92f1cf4ff3239feANALYSIS DATE: 2022-10-21T19:24:23ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – evasion – 7c76a982bb6b0733ebd8ac0b8c3229e0

October 23, 2022

Score: 5 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 7c76a982bb6b0733ebd8ac0b8c3229e0SHA1: 2709aa4c2e05fc106c31289caae76b04882b2c19ANALYSIS DATE: 2022-10-21T19:24:21ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – f3d0f216082efa741c8bfd2d48f44f93

October 23, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: f3d0f216082efa741c8bfd2d48f44f93SHA1: aa95deb15b0010136901bf38cd75db7956b6a762ANALYSIS DATE: 2022-10-22T20:16:28ZTTPS: T1082, T1053, T1012, T1060,...

Malware Analysis – – 9d90ec66bb19ef146bab226bea33179f

October 23, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 9d90ec66bb19ef146bab226bea33179fSHA1: be8e6a3c530379d93bd4da368ef63feed975eeebANALYSIS DATE: 2022-10-21T19:25:33ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – persistence – 9b9990715e97a109dcf3ca50c261117c

October 23, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 9b9990715e97a109dcf3ca50c261117cSHA1: 0015726a1a50e9925145eaf1e3b07961245b4dd1ANALYSIS DATE: 2022-10-22T21:00:19ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091, T1060, T1112...

Malware Analysis – djvu – 168af1f71f98c7211ff6ba66d13cd2df

October 23, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 168af1f71f98c7211ff6ba66d13cd2dfSHA1: 0d21dcc28537be467b80dc8772ed6c0951419fd4ANALYSIS DATE: 2022-10-22T20:32:08ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – ransomware – 12cf5b208e41d71e1e3ce6011683cf6d

October 23, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 12cf5b208e41d71e1e3ce6011683cf6dSHA1: 0bfefd02ab296c6b9ecb266e9d4d80506cef76f5ANALYSIS DATE: 2022-10-22T21:09:43ZTTPS: T1082, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – d9001e295434d715d2d68cff6642425d

October 23, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: d9001e295434d715d2d68cff6642425dSHA1: 042ddd3e3703cbaa81e22b72bcabbcdefc046670ANALYSIS DATE: 2022-10-22T21:20:43ZTTPS: T1082, T1053, T1005, T1081,...

Malware Analysis – banker – c1f57d168e3799db1e9bf566e451b93f

October 23, 2022

Score: 8 MALWARE FAMILY: bankerTAGS:banker, evasion, ransomwareMD5: c1f57d168e3799db1e9bf566e451b93fSHA1: f7eb4ef4a360cf0a14aafb0c26ae2dc1576989faANALYSIS DATE: 2022-10-22T21:13:00ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – 0483e20297a6c648111f3a79b352c71a

October 23, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 0483e20297a6c648111f3a79b352c71aSHA1: 1b2a16253482595aca2c4b31b76f98846c7dfe12ANALYSIS DATE: 2022-10-22T21:12:59ZTTPS: T1060, T1112, T1082, T1053,...

Malware Analysis – wannacry – ed2c789b87728fb5a71105c24348ab14

October 23, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: ed2c789b87728fb5a71105c24348ab14SHA1: c0efa6b71ffd0e12e48eee3697a2b4dc88afe47aANALYSIS DATE: 2022-10-22T22:40:19ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – wannacry – 22e8a12784b65287f97914473b4581fd

October 23, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 22e8a12784b65287f97914473b4581fdSHA1: f0901b6e57fb74484629f098e9509758ef7c4a48ANALYSIS DATE: 2022-10-22T22:00:21ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – da8ae748568d252c27af7457be7a4ab5

October 23, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: da8ae748568d252c27af7457be7a4ab5SHA1: 913b2268de16a4294c433f97bbb4439634f7b564ANALYSIS DATE: 2022-10-22T21:48:26ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – – 106bdbb47b30a477321b204108577744

October 23, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 106bdbb47b30a477321b204108577744SHA1: b177e0df659779ca1165b8b35cb7e09754129401ANALYSIS DATE: 2022-10-22T21:30:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – discovery – 443247892070b27552695efb25cbd370

October 22, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 443247892070b27552695efb25cbd370SHA1: 9994e9ff44bfa117ffe2f73b3f974a639f99d751ANALYSIS DATE: 2022-10-21T13:54:38ZTTPS: T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – persistence – 7941708f058beca69eaf0f9d7618d020

October 22, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 7941708f058beca69eaf0f9d7618d020SHA1: 0be04012482c6df1410db047523524e6b8aa9b8aANALYSIS DATE: 2022-10-21T14:19:14ZTTPS: T1082, T1112, T1060, T1107, T1490, T1005, T1081 ScoreMeaningExample10Known...

Malware Analysis – persistence – 62da799689f1fa028572e529a36982a3

October 22, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 62da799689f1fa028572e529a36982a3SHA1: dbf2f865e0d1bab2613015312eaded00cfa60877ANALYSIS DATE: 2022-10-21T14:19:16ZTTPS: T1107, T1490, T1082, T1112, T1060 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – discovery – 1344621b4058158942a763ad534a01d0

October 22, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 1344621b4058158942a763ad534a01d0SHA1: a5577f6bbfdf07f8627a23946ff3147c6840668fANALYSIS DATE: 2022-10-21T13:54:04ZTTPS: T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – persistence – e6dcc0d19c42acf6f8bc0a5fb295dc71

October 22, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: e6dcc0d19c42acf6f8bc0a5fb295dc71SHA1: b932cd7e0c43288444e34c7ad00639ae52b1e865ANALYSIS DATE: 2022-10-22T14:00:25ZTTPS: T1082, T1107, T1490, T1091, T1060, T1112, T1005, T1081...

Malware Analysis – evasion – 13423360b8c1ffb02fac15d4f4c2b261

October 22, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 13423360b8c1ffb02fac15d4f4c2b261SHA1: b7bd5e7f2d7ef49967f921d263251bf2445a1ce8ANALYSIS DATE: 2022-10-21T14:20:10ZTTPS: T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 35dddd354540c317a9b131af025fea15

October 22, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 35dddd354540c317a9b131af025fea15SHA1: f4077779d53f962c53674957feadc83cd718c124ANALYSIS DATE: 2022-10-22T14:10:44ZTTPS: T1060, T1112, T1082, T1053,...

Malware Analysis – persistence – 115c90fa3782f94e7beb2959903293bc

October 22, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 115c90fa3782f94e7beb2959903293bcSHA1: 1667f62eed47dfd608fe8f4b8b74b6a20b00a084ANALYSIS DATE: 2022-10-22T14:00:38ZTTPS: T1107, T1490, T1091, T1060, T1112, T1005, T1081, T1082...

Malware Analysis

Malware Analysis – evasion – 793c23884b769e0561ac51e543d20cf0

Malware Analysis – ransomware – 62cf2c0bbbbd750f10f2ceada62cba80

Malware Analysis – evasion – 7652b0483d37bd356614b3888ab37dc0

Malware Analysis – evasion – 7c76a982bb6b0733ebd8ac0b8c3229e0

Malware Analysis – djvu – f3d0f216082efa741c8bfd2d48f44f93

Malware Analysis – – 9d90ec66bb19ef146bab226bea33179f

Malware Analysis – persistence – 9b9990715e97a109dcf3ca50c261117c

Malware Analysis – djvu – 168af1f71f98c7211ff6ba66d13cd2df

Malware Analysis – ransomware – 12cf5b208e41d71e1e3ce6011683cf6d

Malware Analysis – djvu – d9001e295434d715d2d68cff6642425d

Malware Analysis – banker – c1f57d168e3799db1e9bf566e451b93f

Malware Analysis – djvu – 0483e20297a6c648111f3a79b352c71a

Malware Analysis – wannacry – ed2c789b87728fb5a71105c24348ab14

Malware Analysis – wannacry – 22e8a12784b65287f97914473b4581fd

Malware Analysis – djvu – da8ae748568d252c27af7457be7a4ab5

Malware Analysis – – 106bdbb47b30a477321b204108577744

Malware Analysis – discovery – 443247892070b27552695efb25cbd370

Malware Analysis – persistence – 7941708f058beca69eaf0f9d7618d020

Malware Analysis – persistence – 62da799689f1fa028572e529a36982a3

Malware Analysis – discovery – 1344621b4058158942a763ad534a01d0

Malware Analysis – persistence – e6dcc0d19c42acf6f8bc0a5fb295dc71

Malware Analysis – evasion – 13423360b8c1ffb02fac15d4f4c2b261

Malware Analysis – djvu – 35dddd354540c317a9b131af025fea15

Malware Analysis – persistence – 115c90fa3782f94e7beb2959903293bc

[EVEREST] – Ransomware Victim: Protected: Title Hidden

Empire C2 Detected – 45[.]60[.]39[.]14:8880

CISA: ASD’s ACSC, CISA, and US and International Partners Release Guidance on Choosing Secure and Verifiable Technologies

CISA: Cisco Releases Security Updates for NX-OS Software

CISA: Ivanti Releases Security Updates for Multiple Products

You may have missed