Malware Analysis

Malware Analysis – discovery – 91e468a26d3874218232010daf7242fe

October 20, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 91e468a26d3874218232010daf7242feSHA1: 99d849b7b1949ce57d08baa46873aecb5cc6f304ANALYSIS DATE: 2022-10-19T22:09:47ZTTPS: T1222, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – persistence – 824f46ae1d98c3df4926c37b5c04dc90

October 20, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 824f46ae1d98c3df4926c37b5c04dc90SHA1: 6f34b0da7420988b058dbef6cf49a21b8ae16f0fANALYSIS DATE: 2022-10-19T22:57:35ZTTPS: T1107, T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – gozi_ifsb – 90cf795b14a75a1a28e7abf49a0a9af0

October 20, 2022

Score: 10 MALWARE FAMILY: gozi_ifsbTAGS:family:gozi_ifsb, botnet:1020, banker, persistence, ransomware, trojanMD5: 90cf795b14a75a1a28e7abf49a0a9af0SHA1: 93190d75a679cff026b04902c09cf31ca4082036ANALYSIS DATE: 2022-10-19T23:32:47ZTTPS: T1158, T1082, T1060, T1112, T1491 ScoreMeaningExample10Known...

Malware Analysis – persistence – a1628f841ac770973760211ca8010230

October 20, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: a1628f841ac770973760211ca8010230SHA1: 73a617c3b853fc58f1e7fab73e9c39a3ff5893caANALYSIS DATE: 2022-10-19T23:09:12ZTTPS: T1060, T1112, T1107, T1490, T1082, T1491 ScoreMeaningExample10Known badA malware family...

Malware Analysis – evasion – a137ede6404c16bb8ff883790c147160

October 20, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: a137ede6404c16bb8ff883790c147160SHA1: 664ef9bf0ab4ee4846dca9317dbce1f206afdad2ANALYSIS DATE: 2022-10-19T23:29:39ZTTPS: T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – 91fdb0ce76ce480c7235a5b795260140

October 20, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: 91fdb0ce76ce480c7235a5b795260140SHA1: 1c0e7ed865841c73f6b33ada94871d4cb6c7ae13ANALYSIS DATE: 2022-10-19T23:09:18ZTTPS: T1112, T1158, T1005, T1081, T1060, T1082,...

Malware Analysis – persistence – 281ee302920f2146a3ee0fb0b7bbb561

October 20, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 281ee302920f2146a3ee0fb0b7bbb561SHA1: 46b251f39da8892504b3003fa3246f4dea5b824aANALYSIS DATE: 2022-10-20T02:20:18ZTTPS: T1082, T1107, T1490, T1091, T1060, T1112, T1005, T1081...

Malware Analysis – djvu – b50a49e4871b1284dc1793c0e3764020

October 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: b50a49e4871b1284dc1793c0e3764020SHA1: 564411dec4932d0606cd44596d4c36f47bc2da1cANALYSIS DATE: 2022-10-20T02:34:47ZTTPS: T1222, T1012, T1082, T1005,...

Malware Analysis – djvu – 6de9b4e5b0fedd17f014eacb0bfa1156

October 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 6de9b4e5b0fedd17f014eacb0bfa1156SHA1: d656a122078c96db3f56369ce7e0f6bfdc86447fANALYSIS DATE: 2022-10-20T02:43:03ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – persistence – dc3b873702290238148645b07bc488a2

October 20, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: dc3b873702290238148645b07bc488a2SHA1: cb118c8198f79f7725a0421a888b404f0eabd26bANALYSIS DATE: 2022-10-20T03:00:22ZTTPS: T1107, T1490, T1091, T1060, T1112, T1005, T1081, T1082...

Malware Analysis – persistence – 989ed709455c92be911f0233ce8eaaf9

October 20, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 989ed709455c92be911f0233ce8eaaf9SHA1: 934dda1cca9f685a587039138ad544936effcfa4ANALYSIS DATE: 2022-10-20T03:00:30ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091, T1060, T1112...

Malware Analysis – persistence – af4d452b4d478092bc714b8eb719e2d6

October 20, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: af4d452b4d478092bc714b8eb719e2d6SHA1: b19f734c62fd3634e3081371b733a677b6d467a7ANALYSIS DATE: 2022-10-20T03:01:01ZTTPS: T1107, T1490, T1091, T1060, T1112, T1005, T1081, T1082...

Malware Analysis – persistence – cb6813970ba6ab92fed07e15877ff22b

October 20, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: cb6813970ba6ab92fed07e15877ff22bSHA1: f26fdb6d8e64781d0884ad085f0f299555b22061ANALYSIS DATE: 2022-10-20T03:00:52ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091, T1060, T1112...

Malware Analysis – persistence – 62dc4509c9261b75d26e0b25c3e4f45b

October 20, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 62dc4509c9261b75d26e0b25c3e4f45bSHA1: 608815f3947836e9bb4a4d505a131a16ccd76d43ANALYSIS DATE: 2022-10-20T03:00:38ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091, T1060, T1112...

Malware Analysis – persistence – 45f101592243088b3f905a64ccc25a36

October 20, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 45f101592243088b3f905a64ccc25a36SHA1: 72ea3afc87d0752c7db2387d2f7a395e72b36cceANALYSIS DATE: 2022-10-20T03:01:22ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091, T1060, T1112...

Malware Analysis – persistence – 6d08d30102b1f7a3e9f47624c7d049fd

October 20, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 6d08d30102b1f7a3e9f47624c7d049fdSHA1: d94c8b26a179351cf7f23b480616c98affe99047ANALYSIS DATE: 2022-10-20T03:01:14ZTTPS: T1082, T1107, T1490, T1091, T1060, T1112, T1005, T1081...

Malware Analysis – ransomware – 76f5e18ba92fc7d3c90ab8ae7cbedc05

October 20, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 76f5e18ba92fc7d3c90ab8ae7cbedc05SHA1: 4ef7b09ee9c967a207afe16a3605deed90718cd3ANALYSIS DATE: 2022-10-20T03:01:33ZTTPS: T1107, T1490, T1091, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – c7045caae927e27487964b36658f0df9

October 20, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: c7045caae927e27487964b36658f0df9SHA1: cd24d35e12f2c1a9bd31bcb053e85f857468a97cANALYSIS DATE: 2022-10-20T03:01:27ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – smokeloader – cb77dc108d02788a85729c8d17dfeb07

October 20, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: cb77dc108d02788a85729c8d17dfeb07SHA1: d6026533c917960524664ba0ecbe6ebb21998893ANALYSIS DATE: 2022-10-20T03:07:33ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – persistence – da0fa06669475a0d8a9cffbf66ae2649

October 20, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: da0fa06669475a0d8a9cffbf66ae2649SHA1: 7b82a641353526ec2e67f7911cba6249857e4ae3ANALYSIS DATE: 2022-10-20T03:20:18ZTTPS: T1082, T1107, T1490, T1091, T1060, T1112, T1005, T1081...

Malware Analysis – djvu – e85b76e6329d84a2deaf949a41f9f38b

October 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: e85b76e6329d84a2deaf949a41f9f38bSHA1: 33683932dd9ab46ccf33177363b1143242a284bbANALYSIS DATE: 2022-10-20T03:11:04ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – persistence – d677d25e57038aa39a5ebf509bc8be0f

October 20, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: d677d25e57038aa39a5ebf509bc8be0fSHA1: ba1ded1bf4e1195e2e27a2da83c34bbafd4a05b7ANALYSIS DATE: 2022-10-20T03:20:24ZTTPS: T1082, T1107, T1490, T1091, T1060, T1112, T1005, T1081...

Malware Analysis – persistence – 6774ec8453d6d58cd8e79534080fcf3d

October 20, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 6774ec8453d6d58cd8e79534080fcf3dSHA1: 9841464a2b1be2b4d6b72bfc71c7e2c95b756992ANALYSIS DATE: 2022-10-20T03:20:31ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091, T1060, T1112...

Malware Analysis – danabot – 96739370beb331b75f4dadc34a97b377

October 20, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 96739370beb331b75f4dadc34a97b377SHA1: 07794bc92e5a744d14f4d5fab2bdad6a9048d67eANALYSIS...

Malware Analysis

Malware Analysis – discovery – 91e468a26d3874218232010daf7242fe

Malware Analysis – persistence – 824f46ae1d98c3df4926c37b5c04dc90

Malware Analysis – gozi_ifsb – 90cf795b14a75a1a28e7abf49a0a9af0

Malware Analysis – persistence – a1628f841ac770973760211ca8010230

Malware Analysis – evasion – a137ede6404c16bb8ff883790c147160

Malware Analysis – evasion – 91fdb0ce76ce480c7235a5b795260140

Malware Analysis – persistence – 281ee302920f2146a3ee0fb0b7bbb561

Malware Analysis – djvu – b50a49e4871b1284dc1793c0e3764020

Malware Analysis – djvu – 6de9b4e5b0fedd17f014eacb0bfa1156

Malware Analysis – persistence – dc3b873702290238148645b07bc488a2

Malware Analysis – persistence – 989ed709455c92be911f0233ce8eaaf9

Malware Analysis – persistence – af4d452b4d478092bc714b8eb719e2d6

Malware Analysis – persistence – cb6813970ba6ab92fed07e15877ff22b

Malware Analysis – persistence – 62dc4509c9261b75d26e0b25c3e4f45b

Malware Analysis – persistence – 45f101592243088b3f905a64ccc25a36

Malware Analysis – persistence – 6d08d30102b1f7a3e9f47624c7d049fd

Malware Analysis – ransomware – 76f5e18ba92fc7d3c90ab8ae7cbedc05

Malware Analysis – ransomware – c7045caae927e27487964b36658f0df9

Malware Analysis – smokeloader – cb77dc108d02788a85729c8d17dfeb07

Malware Analysis – persistence – da0fa06669475a0d8a9cffbf66ae2649

Malware Analysis – djvu – e85b76e6329d84a2deaf949a41f9f38b

Malware Analysis – persistence – d677d25e57038aa39a5ebf509bc8be0f

Malware Analysis – persistence – 6774ec8453d6d58cd8e79534080fcf3d

Malware Analysis – danabot – 96739370beb331b75f4dadc34a97b377

HackerOne Bug Bounty Disclosure: use-after-free-read-in-curl-multi-perform-with-doh-and-proxy-options-and-resolve-timeouts-catenacyber

HackerOne Bug Bounty Disclosure: sqli-in-url-paths-almuntadhar

HackerOne Bug Bounty Disclosure: exposing-debug-log-file-leads-to-server-full-path-disclosure-kanon

CISA: CISA Releases Three Industrial Control Systems Advisories

[RANSOMHUB] – Ransomware Victim: www[.]centersheetmetal[.]com

You may have missed