Malware Analysis

Malware Analysis – persistence – 93e43b823190659046c61d99e20c6486

October 22, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 93e43b823190659046c61d99e20c6486SHA1: 74c9ffb8bc1492acf3ff36fd3f8f19952af01b6eANALYSIS DATE: 2022-10-22T03:22:24ZTTPS: T1107, T1490, T1091, T1060, T1112, T1005, T1081, T1082...

Malware Analysis – persistence – a6f270a986eb430d220f8cd21524c558

October 22, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: a6f270a986eb430d220f8cd21524c558SHA1: 14405ef1782d59890b1491ec06b763da2aaf7cd8ANALYSIS DATE: 2022-10-22T03:22:16ZTTPS: T1060, T1112, T1005, T1081, T1082, T1107, T1490, T1091...

Malware Analysis – ransomware – 5ea6d02733264d1f685c6bb009e45794

October 22, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 5ea6d02733264d1f685c6bb009e45794SHA1: ab18b198dcb941fe1efea2fdd0b2908368218588ANALYSIS DATE: 2022-10-22T03:45:55ZTTPS: T1107, T1490, T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – f623aa2147c701b68f8db4e3bb36701c

October 22, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: f623aa2147c701b68f8db4e3bb36701cSHA1: 0f0d52901b8b662ed5ddea304bc55094c98879a5ANALYSIS DATE: 2022-10-22T03:54:36ZTTPS: T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – 2e12ce413e915c2a2a55fbff6646f058

October 22, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 2e12ce413e915c2a2a55fbff6646f058SHA1: 66b782adfa1e70ab5530178ed74333fd8dac1845ANALYSIS DATE: 2022-10-22T03:49:34ZTTPS: T1222, T1012, T1082, T1005,...

Malware Analysis – smokeloader – 7dee1ab63f1a5d740024d881bfd38b54

October 22, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 7dee1ab63f1a5d740024d881bfd38b54SHA1: 54549891251c81086f04ea8cc1ab8e9c7a36ae37ANALYSIS DATE: 2022-10-22T04:16:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – – ba5e80f2d798e241471decd7fea5c32e

October 22, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: ba5e80f2d798e241471decd7fea5c32eSHA1: 0a94f3a096002197befb9dd5e6611f0fba19cf8dANALYSIS DATE: 2022-10-22T03:50:39ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – a0f2cc9af0d1601244cf49c6921bd654

October 22, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: a0f2cc9af0d1601244cf49c6921bd654SHA1: 56975fb26d55b42ceaff7b4f259a273be5e7549fANALYSIS DATE: 2022-10-22T04:19:05ZTTPS: T1082, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – djvu – 8118f0eee6a59572daf1d5eb1055644d

October 22, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 8118f0eee6a59572daf1d5eb1055644dSHA1: 47039fd9e7ee142959fcb90f8b911b8f0c656891ANALYSIS DATE: 2022-10-22T04:16:05ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – – ed7c1e85bb836319b8eb6f7cedafa7d5

October 22, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: ed7c1e85bb836319b8eb6f7cedafa7d5SHA1: c354add9010891b2e5798cf9ec9703f8c8ae1082ANALYSIS DATE: 2022-10-22T04:19:50ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – f1c3e4fdca55ff6e6f8597a0a2713fdb

October 22, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: f1c3e4fdca55ff6e6f8597a0a2713fdbSHA1: 82e40346a7489cf77b90aeb3a4cd287d3363eaf1ANALYSIS DATE: 2022-10-22T04:20:16ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – – 1da30b0ac73ba3217911bd2d7fcccd68

October 22, 2022

Score: 8 MALWARE FAMILY: TAGS:MD5: 1da30b0ac73ba3217911bd2d7fcccd68SHA1: bbf2eb07e50925e798d8397add96740df0dbbe48ANALYSIS DATE: 2022-10-22T04:24:59ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – smokeloader – e15b2ebd158ad84daf45b0853a1bfd3e

October 22, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: e15b2ebd158ad84daf45b0853a1bfd3eSHA1: 82e9555065e8b67ca93b4ae8bf35e717e400a9e3ANALYSIS DATE: 2022-10-22T04:21:06ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 8ae5a35a6e434514f421e720aecab786

October 22, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 8ae5a35a6e434514f421e720aecab786SHA1: 518ae303c6e50d29ab84765b49e94d9f34862599ANALYSIS DATE: 2022-10-22T04:21:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 5253ee04a417dcde084c02f9922996bc

October 22, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 5253ee04a417dcde084c02f9922996bcSHA1: 96788615fc0392ac867d7f61e8b8042ed648cd51ANALYSIS DATE: 2022-10-22T04:23:52ZTTPS: T1082, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – ransomware – a4743f759b43493ff32ce5f70b45946d

October 22, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: a4743f759b43493ff32ce5f70b45946dSHA1: e89f2f7f7e226a869a60bec822db5cafb26d36dbANALYSIS DATE: 2022-10-22T04:33:03ZTTPS: T1082, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – – ced879efa3f8ed1c2ff2952c6bc7225e

October 22, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: ced879efa3f8ed1c2ff2952c6bc7225eSHA1: 8286ca8d0c4a54a15aa194ec78fde219bf4c4149ANALYSIS DATE: 2022-10-22T04:45:29ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 7b1414db846dddafb2de8405425b57fd

October 22, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 7b1414db846dddafb2de8405425b57fdSHA1: e9220f99b4c33d253221ecf54b58af3a0573054aANALYSIS DATE: 2022-10-22T04:32:48ZTTPS:...

Malware Analysis – – 9dfb7e7d7cb190a206b360f6bea86f0d

October 22, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 9dfb7e7d7cb190a206b360f6bea86f0dSHA1: 43d3abf94c67911584cf6a2800c240be7edc0a9eANALYSIS DATE: 2022-10-22T04:28:54ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – f23f34894961227fa6ddb1d64318e28e

October 22, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: f23f34894961227fa6ddb1d64318e28eSHA1: b9e83c5e9ff682ad0a54694ca75557b3defa9d7aANALYSIS DATE: 2022-10-22T04:48:22ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – 6b07adb7eeea289e1908cb5baf5a5d93

October 22, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 6b07adb7eeea289e1908cb5baf5a5d93SHA1: 47d27128426623be81417c109a12e3838c093eb6ANALYSIS DATE: 2022-10-22T04:50:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – aab7a497e2166339b9a82a01d2a051c4

October 22, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: aab7a497e2166339b9a82a01d2a051c4SHA1: 10e9aee8464b4094fb6a6a754d8f617b8746119bANALYSIS DATE: 2022-10-22T04:49:18ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – 8ba287e4d5b62c8b3bd9e5d3e04afcee

October 22, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 8ba287e4d5b62c8b3bd9e5d3e04afceeSHA1: 02781f4b15680c21c59a26959fe858044b0f6135ANALYSIS DATE: 2022-10-22T04:46:36ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – persistence – 7b449fc14ac4ed33d828d70367dd9361

October 22, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealer, upxMD5: 7b449fc14ac4ed33d828d70367dd9361SHA1: 44064f97b839e6c421c1b52c9cf2e8395dd2f890ANALYSIS DATE: 2022-10-20T08:28:28ZTTPS: T1060, T1112, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis

Malware Analysis – persistence – 93e43b823190659046c61d99e20c6486

Malware Analysis – persistence – a6f270a986eb430d220f8cd21524c558

Malware Analysis – ransomware – 5ea6d02733264d1f685c6bb009e45794

Malware Analysis – ransomware – f623aa2147c701b68f8db4e3bb36701c

Malware Analysis – djvu – 2e12ce413e915c2a2a55fbff6646f058

Malware Analysis – smokeloader – 7dee1ab63f1a5d740024d881bfd38b54

Malware Analysis – – ba5e80f2d798e241471decd7fea5c32e

Malware Analysis – ransomware – a0f2cc9af0d1601244cf49c6921bd654

Malware Analysis – djvu – 8118f0eee6a59572daf1d5eb1055644d

Malware Analysis – – ed7c1e85bb836319b8eb6f7cedafa7d5

Malware Analysis – ransomware – f1c3e4fdca55ff6e6f8597a0a2713fdb

Malware Analysis – – 1da30b0ac73ba3217911bd2d7fcccd68

Malware Analysis – smokeloader – e15b2ebd158ad84daf45b0853a1bfd3e

Malware Analysis – smokeloader – 8ae5a35a6e434514f421e720aecab786

Malware Analysis – ransomware – 5253ee04a417dcde084c02f9922996bc

Malware Analysis – ransomware – a4743f759b43493ff32ce5f70b45946d

Malware Analysis – – ced879efa3f8ed1c2ff2952c6bc7225e

Malware Analysis – djvu – 7b1414db846dddafb2de8405425b57fd

Malware Analysis – – 9dfb7e7d7cb190a206b360f6bea86f0d

Malware Analysis – – f23f34894961227fa6ddb1d64318e28e

Malware Analysis – – 6b07adb7eeea289e1908cb5baf5a5d93

Malware Analysis – – aab7a497e2166339b9a82a01d2a051c4

Malware Analysis – – 8ba287e4d5b62c8b3bd9e5d3e04afcee

Malware Analysis – persistence – 7b449fc14ac4ed33d828d70367dd9361

[FUNKSEC] – Ransomware Victim: fuck you all

[AKIRA] – Ransomware Victim: Ichikawa North America Corporation

[RANSOMHUB] – Ransomware Victim: www[.]wisesocon[.]com

[AKIRA] – Ransomware Victim: Thomas J[.] Henry Law

[RANSOMHUB] – Ransomware Victim: amerplumb[.]com

You may have missed