Malware Analysis

Malware Analysis – djvu – f1a4fadf22886ea65120de4d9a227d78

April 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5df88deb5dde677ba658b77ad5f60248, discovery, persistence, ransomware, spyware, stealerMD5: f1a4fadf22886ea65120de4d9a227d78SHA1: f6fa9b1c2010638a4a939774d2b0090d03e08d8eANALYSIS DATE: 2023-04-01T16:40:50ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – evasion – 807740e3472484d420667e6c0fcfb515

April 1, 2023

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 807740e3472484d420667e6c0fcfb515SHA1: 9df328dee54e0865376efc4ab90b7cd419c1784cANALYSIS DATE: 2023-04-01T16:28:46ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – evasion – 660708319a500f1865fa9d2fadfa712d

April 1, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 660708319a500f1865fa9d2fadfa712dSHA1: b2ae3aef17095ab26410e0f1792a379a4a2966f8ANALYSIS DATE: 2023-04-01T16:52:30ZTTPS: T1004, T1112, T1082, T1491, T1088, T1089 ScoreMeaningExample10Known badA...

Malware Analysis – brand:pubg – f7b8cff13de0de32fa0f438c3aab7eae

April 1, 2023

Score: 10 MALWARE FAMILY: brand:pubgTAGS:brand:pubg, evasion, phishing, ransomwareMD5: f7b8cff13de0de32fa0f438c3aab7eaeSHA1: a6c449f9a3e1bce13c54159e9575aa66c4462b4eANALYSIS DATE: 2023-04-01T16:46:16ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – djvu – 61804db8a814f17f5cdc8243e6c609cf

April 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5df88deb5dde677ba658b77ad5f60248, discovery, persistence, ransomware, spyware, stealerMD5: 61804db8a814f17f5cdc8243e6c609cfSHA1: 815b35ca9dba75b0f8906b8e838599c757c3ab77ANALYSIS DATE: 2023-04-01T16:54:11ZTTPS: T1082, T1012, T1053, T1005,...

Malware Analysis – – 7866d944436d7983d61024fbbf38256b

April 1, 2023

Score: 3 MALWARE FAMILY: TAGS:MD5: 7866d944436d7983d61024fbbf38256bSHA1: 7e79db996465dfe542fc2d16f14fb8e92da7b75dANALYSIS DATE: 2023-04-01T16:58:41ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – evasion – e13f0908d3f295ba5c61081ca835734f

April 1, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: e13f0908d3f295ba5c61081ca835734fSHA1: fe7972cbfde692e199017f39870032ecbe464138ANALYSIS DATE: 2023-04-01T17:01:08ZTTPS: T1491, T1112, T1012, T1120, T1082, T1060, T1158 ScoreMeaningExample10Known badA...

Malware Analysis – evasion – 26533eb236f3fb7aeef82f4920fd7af4

April 1, 2023

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 26533eb236f3fb7aeef82f4920fd7af4SHA1: 9af1504717b3a2f80f399407c660961a55bf1870ANALYSIS DATE: 2023-04-01T17:56:12ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – amadey – b27b89b27b109e38cbf776096847b093

April 1, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:5df88deb5dde677ba658b77ad5f60248, botnet:pub1, backdoor, discovery, evasion, persistence, ransomware, spyware, stealer, trojanMD5: b27b89b27b109e38cbf776096847b093SHA1: d22ae194c0244a5791171972b4e17e03b65a74e2ANALYSIS...

Malware Analysis – djvu – 4dc20f9e8a797dac6a43de2b18975aef

April 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5df88deb5dde677ba658b77ad5f60248, discovery, persistence, ransomware, spyware, stealerMD5: 4dc20f9e8a797dac6a43de2b18975aefSHA1: 0bc513fa63bb285ecca914a144d40d27d3e485deANALYSIS DATE: 2023-04-01T17:34:23ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – persistence – f755a44bbb97e9ba70bf38f1bdc67722

March 30, 2023

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: f755a44bbb97e9ba70bf38f1bdc67722SHA1: f70331eb64fd893047f263623ffb1e74e6fe4187ANALYSIS DATE: 2023-03-30T15:05:37ZTTPS: T1491, T1112, T1005, T1081, T1060, T1082, T1107, T1490...

Malware Analysis – djvu – ca4c8c98cbf461f832cbf2764c82a5bd

March 30, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5df88deb5dde677ba658b77ad5f60248, discovery, persistence, ransomware, spyware, stealerMD5: ca4c8c98cbf461f832cbf2764c82a5bdSHA1: 67154ad8db949e4a23eb725f47842ff5d045f02fANALYSIS DATE: 2023-03-30T15:15:00ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – ransomware – 1ace926cf826999d3aa1e63372d009c8

March 30, 2023

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 1ace926cf826999d3aa1e63372d009c8SHA1: 0ac145c53c1c3bcb14a428f943309c5c5dc7aa62ANALYSIS DATE: 2023-03-30T15:24:49ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – amadey – 32962e720a69b0ea507f89962cdacfac

March 30, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, family:socelars, family:vidar, botnet:5df88deb5dde677ba658b77ad5f60248, botnet:frtrack, botnet:pub1, backdoor, discovery, evasion, infostealer, persistence, ransomware, spyware,...

Malware Analysis – amadey – 404a7c5c03a53b10f0eed922316e6681

March 30, 2023

Malware Analysis – djvu – 1413865f4a87f28b94e00396de7459d2

March 30, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5df88deb5dde677ba658b77ad5f60248, discovery, persistence, ransomware, spyware, stealerMD5: 1413865f4a87f28b94e00396de7459d2SHA1: 549c641578f2dd01c2b257fe4cb5625977da8574ANALYSIS DATE: 2023-03-30T15:27:08ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – ransomware – 53586770fa7c3483b5b6b626ad7130e8

March 30, 2023

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 53586770fa7c3483b5b6b626ad7130e8SHA1: 36e3f72106c29c83a87ad69d58375038d0b6a326ANALYSIS DATE: 2023-03-30T16:24:25ZTTPS: T1082, T1012, T1120, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – b673d92b77489d12779dc1fb5e8f6fdd

March 30, 2023

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, upxMD5: b673d92b77489d12779dc1fb5e8f6fddSHA1: 1921915dc4400a4aa70ca68a6ba1fd99106a336fANALYSIS DATE: 2023-03-30T15:57:56ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – d2a9396b590d7fe9e348a090e03d9d3d

March 30, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5df88deb5dde677ba658b77ad5f60248, discovery, persistence, ransomware, spyware, stealerMD5: d2a9396b590d7fe9e348a090e03d9d3dSHA1: 90d5a76ed3a67d0565a7748a1d5f9aedb70b063cANALYSIS DATE: 2023-03-30T16:56:44ZTTPS: T1012, T1082, T1222, T1053,...

Malware Analysis – amadey – 474154bf80eeca7d3be7614bea80b4b8

March 30, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, family:socelars, family:vidar, botnet:5df88deb5dde677ba658b77ad5f60248, botnet:pub1, backdoor, discovery, evasion, infostealer, persistence, ransomware, spyware, stealer,...

Malware Analysis – djvu – 62bc08785fba8084b146de9cb4aa493a

March 30, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5df88deb5dde677ba658b77ad5f60248, discovery, persistence, ransomware, spyware, stealerMD5: 62bc08785fba8084b146de9cb4aa493aSHA1: cbf7d9ea2adc622690b8e1af17351b91e40390ddANALYSIS DATE: 2023-03-30T17:31:32ZTTPS: T1012, T1082, T1053, T1005,...

Malware Analysis – amadey – 035d846ddc6a64f19b463d2ddf2bddaa

March 30, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, botnet:pub1, backdoor, discovery, persistence, ransomware, trojanMD5: 035d846ddc6a64f19b463d2ddf2bddaaSHA1: 56d52240fac546cadf5fc243ee3b938fbdab679eANALYSIS DATE: 2023-03-30T17:35:33ZTTPS: T1012, T1120, T1082,...

Malware Analysis – djvu – 42c20aa157f4523e908b8d6f9755e5cc

March 30, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5df88deb5dde677ba658b77ad5f60248, discovery, persistence, ransomware, spyware, stealerMD5: 42c20aa157f4523e908b8d6f9755e5ccSHA1: b7e2115f166d96b382dd369544db23b3aeea886cANALYSIS DATE: 2023-03-30T17:54:14ZTTPS: T1222, T1082, T1053, T1005,...

Malware Analysis – djvu – 06401e594be2ba59fe355f2c669ced41

March 30, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5df88deb5dde677ba658b77ad5f60248, discovery, persistence, ransomware, spyware, stealerMD5: 06401e594be2ba59fe355f2c669ced41SHA1: afab8237ea21303da96c8940b6add1df40c7602bANALYSIS DATE: 2023-03-30T17:56:22ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis

Malware Analysis – djvu – f1a4fadf22886ea65120de4d9a227d78

Malware Analysis – evasion – 807740e3472484d420667e6c0fcfb515

Malware Analysis – evasion – 660708319a500f1865fa9d2fadfa712d

Malware Analysis – brand:pubg – f7b8cff13de0de32fa0f438c3aab7eae

Malware Analysis – djvu – 61804db8a814f17f5cdc8243e6c609cf

Malware Analysis – – 7866d944436d7983d61024fbbf38256b

Malware Analysis – evasion – e13f0908d3f295ba5c61081ca835734f

Malware Analysis – evasion – 26533eb236f3fb7aeef82f4920fd7af4

Malware Analysis – amadey – b27b89b27b109e38cbf776096847b093

Malware Analysis – djvu – 4dc20f9e8a797dac6a43de2b18975aef

Malware Analysis – persistence – f755a44bbb97e9ba70bf38f1bdc67722

Malware Analysis – djvu – ca4c8c98cbf461f832cbf2764c82a5bd

Malware Analysis – ransomware – 1ace926cf826999d3aa1e63372d009c8

Malware Analysis – amadey – 32962e720a69b0ea507f89962cdacfac

Malware Analysis – amadey – 404a7c5c03a53b10f0eed922316e6681

Malware Analysis – djvu – 1413865f4a87f28b94e00396de7459d2

Malware Analysis – ransomware – 53586770fa7c3483b5b6b626ad7130e8

Malware Analysis – ransomware – b673d92b77489d12779dc1fb5e8f6fdd

Malware Analysis – djvu – d2a9396b590d7fe9e348a090e03d9d3d

Malware Analysis – amadey – 474154bf80eeca7d3be7614bea80b4b8

Malware Analysis – djvu – 62bc08785fba8084b146de9cb4aa493a

Malware Analysis – amadey – 035d846ddc6a64f19b463d2ddf2bddaa

Malware Analysis – djvu – 42c20aa157f4523e908b8d6f9755e5cc

Malware Analysis – djvu – 06401e594be2ba59fe355f2c669ced41

HackerOne Bug Bounty Disclosure: ability-to-add-and-verify-uncontrolled-mobile-numbers-leading-to-account-takeover-ato-trev-ck

HackerOne Bug Bounty Disclosure: sensitive-api-key-leakage-hemant

[FOG] – Ransomware Victim: Pampili (pampili[.]com[.]br)

[BIANLIAN] – Ransomware Victim: Keystone Pacific Property Management LLC

[BIANLIAN] – Ransomware Victim: Mosley Glick O’Brien, Inc[.]

You may have missed