Malware Analysis

Malware Analysis – teslacrypt – bb42ac7cdc834ba9abb5b4b90025f022

October 20, 2022

Score: 10 MALWARE FAMILY: teslacryptTAGS:family:teslacrypt, persistence, ransomwareMD5: bb42ac7cdc834ba9abb5b4b90025f022SHA1: 3c75d402cca4de4898ac07888900ee7560b9536eANALYSIS DATE: 2022-10-20T14:58:49ZTTPS: T1082, T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family...

Malware Analysis – evasion – 96670058d1b53755214428e67ef461bb

October 20, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 96670058d1b53755214428e67ef461bbSHA1: 73f051c7362dcc40ef6eef9b1b64d4c247c07795ANALYSIS DATE: 2022-10-20T14:59:38ZTTPS: T1012, T1120, T1082, T1060, T1112, T1088, T1089, T1004,...

Malware Analysis – persistence – 96e4fd7e9a5995525b54a249eda2d1d0

October 20, 2022

Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, spyware, stealer, upxMD5: 96e4fd7e9a5995525b54a249eda2d1d0SHA1: a89487e40377e09c1f9dc97793f042b3f6352f5cANALYSIS DATE: 2022-10-20T14:59:32ZTTPS: T1060, T1112, T1082, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – persistence – fb830824292fb0bf97f8a691bddd377f

October 20, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: fb830824292fb0bf97f8a691bddd377fSHA1: efa617db6da4fc0694b74b8591619b14f2ac752eANALYSIS DATE: 2022-10-20T15:00:33ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091, T1060, T1112...

Malware Analysis – evasion – 5f594a891ee0a26be4f22295485b033e

October 20, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 5f594a891ee0a26be4f22295485b033eSHA1: c00016c8189aa454aa334fb3e812a5b817a8d9e1ANALYSIS DATE: 2022-10-20T14:59:40ZTTPS: T1004, T1112, T1082, T1088, T1089, T1060, T1491, T1012,...

Malware Analysis – persistence – 548c1fff6217572e344bfb4a2a529867

October 20, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 548c1fff6217572e344bfb4a2a529867SHA1: fd5dd09fd0b305d3405094c4e1216ca57f956efdANALYSIS DATE: 2022-10-20T15:00:43ZTTPS: T1107, T1490, T1091, T1060, T1112, T1005, T1081, T1082...

Malware Analysis – persistence – c014ffc9b9f05e9cc28441ab135a22a7

October 20, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: c014ffc9b9f05e9cc28441ab135a22a7SHA1: be05a0aa28ec361540adaba63424544d43609273ANALYSIS DATE: 2022-10-20T15:00:23ZTTPS: T1107, T1490, T1091, T1060, T1112, T1005, T1081, T1082...

Malware Analysis – persistence – 38faa63bb0de5674847b6049e9a9f780

October 20, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 38faa63bb0de5674847b6049e9a9f780SHA1: 71d5b298b2f0655ea892a3d3660f92015393e83eANALYSIS DATE: 2022-10-20T15:00:59ZTTPS: T1107, T1490, T1091, T1060, T1112, T1005, T1081, T1082...

Malware Analysis – persistence – bf0ceb4b5062a087d32a6ae14bb46895

October 20, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: bf0ceb4b5062a087d32a6ae14bb46895SHA1: c6b83a14fc3790d484e237d95293e92004104768ANALYSIS DATE: 2022-10-20T15:00:49ZTTPS: T1107, T1490, T1091, T1060, T1112, T1005, T1081, T1082...

Malware Analysis – smokeloader – 92469931cb44beb2b06bb19fc1f2a327

October 20, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 92469931cb44beb2b06bb19fc1f2a327SHA1: 85e96b0294d384522f948f43ea6030800cb19c05ANALYSIS DATE: 2022-10-20T15:01:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – 4780aef00be23f093c688bff0678388b

October 20, 2022

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, upxMD5: 4780aef00be23f093c688bff0678388bSHA1: 45d8398f1c6cb00cb7721fd208de99ccb9c93ab4ANALYSIS DATE: 2022-10-20T15:10:45ZTTPS: T1012, T1082, T1112, T1158, T1057, T1491, T1060 ScoreMeaningExample10Known...

Malware Analysis – persistence – e1e7c39dfb76e42fea4d5ee81e4f21cd

October 20, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: e1e7c39dfb76e42fea4d5ee81e4f21cdSHA1: 353915351f9bf53b55c6ef0324c0d35379bb6c94ANALYSIS DATE: 2022-10-20T15:20:19ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091, T1060, T1112...

Malware Analysis – djvu – 548b95bb2513576d2887d1871bcc3990

October 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 548b95bb2513576d2887d1871bcc3990SHA1: 6699c6a95ea88d9c0e84ecd55fc47006e9870104ANALYSIS DATE: 2022-10-20T15:26:14ZTTPS: T1060, T1112, T1053, T1005,...

Malware Analysis – persistence – 1194a0f50753c9e2de2ca167e9126e4d

October 20, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 1194a0f50753c9e2de2ca167e9126e4dSHA1: 348b33d313f1adad9c4429ff59cae236f83b24dcANALYSIS DATE: 2022-10-20T15:20:33ZTTPS: T1082, T1107, T1490, T1091, T1060, T1112, T1005, T1081...

Malware Analysis – – 499eec4dab168f19d1ee282f66f724b0

October 20, 2022

Score: 8 MALWARE FAMILY: TAGS:MD5: 499eec4dab168f19d1ee282f66f724b0SHA1: ec42e15f7b138a5572a3b5cb1a022cd82f1d7279ANALYSIS DATE: 2022-10-20T15:29:32ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – ransomware – 611aea0fc953a1a881cc939a9e3c3af5

October 20, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 611aea0fc953a1a881cc939a9e3c3af5SHA1: f70aee02ae0d06c6e6fd8a0e98931d1c660733cbANALYSIS DATE: 2022-10-20T15:40:15ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 15ed67e24f385d965b44b8b439cf4fe0

October 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 15ed67e24f385d965b44b8b439cf4fe0SHA1: 22535d74b6488d8ea9b84f885afe33cb671890c2ANALYSIS DATE: 2022-10-20T15:49:37ZTTPS: T1222, T1053, T1005, T1081,...

Malware Analysis – ryuk – a650d5676dc2c91a3af2216044ddaf8c

October 20, 2022

Score: 10 MALWARE FAMILY: ryukTAGS:family:ryuk, discovery, evasion, ransomwareMD5: a650d5676dc2c91a3af2216044ddaf8cSHA1: 851eea629fda6f930ebfd7ac45de5e8bc3f506b5ANALYSIS DATE: 2022-10-20T15:40:19ZTTPS: T1158, T1222, T1082, T1012, T1120, T1053 ScoreMeaningExample10Known badA...

Malware Analysis – smokeloader – f2f1b97c733698ad3c6ddb4a12bc703e

October 20, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: f2f1b97c733698ad3c6ddb4a12bc703eSHA1: 51e3ca64e3b6b3f74a714df9d916303e5ffe22a3ANALYSIS DATE: 2022-10-20T15:41:30ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 0284ef0c5e906d8c6f03393d9cd82e63

October 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 0284ef0c5e906d8c6f03393d9cd82e63SHA1: df461c8ad24f1b90f6c711a9a3a58c4228b4a9d8ANALYSIS DATE: 2022-10-20T16:01:04ZTTPS: T1130, T1112, T1060, T1053,...

Malware Analysis – djvu – cb404fc3a8a024240f2804dd5128ff6c

October 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: cb404fc3a8a024240f2804dd5128ff6cSHA1: b882d72fab44002a7a7b1c05abdef03badb3f9b8ANALYSIS...

Malware Analysis – persistence – b16fb95d7c624fb064dcfe39c746a29d

October 20, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: b16fb95d7c624fb064dcfe39c746a29dSHA1: 75f23d8fd87ca250ecc9dd66ca5c1d04a7e9540eANALYSIS DATE: 2022-10-20T16:00:28ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091, T1060, T1112...

Malware Analysis – ransomware – 332c1a9146276bc9abc1161e13efabde

October 20, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 332c1a9146276bc9abc1161e13efabdeSHA1: 6c366cd3b4a54f8e9f7ed6016aac9e7509b06102ANALYSIS DATE: 2022-10-20T16:14:30ZTTPS: T1091, T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – snatch – 2fa3c5b2e6a0c465045fe8dd7f55dd9a

October 20, 2022

Score: 10 MALWARE FAMILY: snatchTAGS:family:snatch, ransomware, spyware, stealer, upxMD5: 2fa3c5b2e6a0c465045fe8dd7f55dd9aSHA1: 1e6ea91491804da44db10be25bd1ea36baa0b362ANALYSIS DATE: 2022-10-20T08:15:19ZTTPS: T1107, T1490, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis

Malware Analysis – teslacrypt – bb42ac7cdc834ba9abb5b4b90025f022

Malware Analysis – evasion – 96670058d1b53755214428e67ef461bb

Malware Analysis – persistence – 96e4fd7e9a5995525b54a249eda2d1d0

Malware Analysis – persistence – fb830824292fb0bf97f8a691bddd377f

Malware Analysis – evasion – 5f594a891ee0a26be4f22295485b033e

Malware Analysis – persistence – 548c1fff6217572e344bfb4a2a529867

Malware Analysis – persistence – c014ffc9b9f05e9cc28441ab135a22a7

Malware Analysis – persistence – 38faa63bb0de5674847b6049e9a9f780

Malware Analysis – persistence – bf0ceb4b5062a087d32a6ae14bb46895

Malware Analysis – smokeloader – 92469931cb44beb2b06bb19fc1f2a327

Malware Analysis – evasion – 4780aef00be23f093c688bff0678388b

Malware Analysis – persistence – e1e7c39dfb76e42fea4d5ee81e4f21cd

Malware Analysis – djvu – 548b95bb2513576d2887d1871bcc3990

Malware Analysis – persistence – 1194a0f50753c9e2de2ca167e9126e4d

Malware Analysis – – 499eec4dab168f19d1ee282f66f724b0

Malware Analysis – ransomware – 611aea0fc953a1a881cc939a9e3c3af5

Malware Analysis – djvu – 15ed67e24f385d965b44b8b439cf4fe0

Malware Analysis – ryuk – a650d5676dc2c91a3af2216044ddaf8c

Malware Analysis – smokeloader – f2f1b97c733698ad3c6ddb4a12bc703e

Malware Analysis – djvu – 0284ef0c5e906d8c6f03393d9cd82e63

Malware Analysis – djvu – cb404fc3a8a024240f2804dd5128ff6c

Malware Analysis – persistence – b16fb95d7c624fb064dcfe39c746a29d

Malware Analysis – ransomware – 332c1a9146276bc9abc1161e13efabde

Malware Analysis – snatch – 2fa3c5b2e6a0c465045fe8dd7f55dd9a

Cobalt Strike Beacon Detected – 111[.]119[.]217[.]51:8889

Cobalt Strike Beacon Detected – 115[.]120[.]210[.]236:9999

Cobalt Strike Beacon Detected – 23[.]94[.]169[.]124:9090

Cobalt Strike Beacon Detected – 8[.]217[.]7[.]159:1234

Cobalt Strike Beacon Detected – 106[.]14[.]69[.]133:8999

You may have missed