Malware Analysis

Malware Analysis – wannacry – 9f75c295e2503a82fd1478aa72cbd221

October 11, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: 9f75c295e2503a82fd1478aa72cbd221SHA1: 09fb701ddd78884d39a1669a0441a51976cd10caANALYSIS DATE: 2022-10-11T14:48:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – f6a2ea7b243ba21de0aa38538911b4e8

October 11, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: f6a2ea7b243ba21de0aa38538911b4e8SHA1: 6dc665a37038be83d89635c773cc65562e832421ANALYSIS DATE: 2022-10-11T14:28:49ZTTPS: T1005, T1081, T1012, T1222,...

Malware Analysis – djvu – 2b4abbbbf4d7cdfe36d1d4d4ce541540

October 11, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 2b4abbbbf4d7cdfe36d1d4d4ce541540SHA1: 6bb6f1651647fe02565312685ab25b1c14c8efb1ANALYSIS DATE: 2022-10-11T14:57:50ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – dcrat – 94c6ad8cf97c3f3651dfd705cb15ee14

October 11, 2022

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, family:djvu, family:raccoon, family:redline, family:smokeloader, family:vidar, botnet:45e326db2f0dcd074fdd0d3db7fe304a, botnet:517, botnet:buildnewdomain, backdoor, collection, discovery, infostealer, persistence, ransomware, rat,...

Malware Analysis – wannacry – 59ced1d2c417c6ebd0a2a1c605e6062b

October 11, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 59ced1d2c417c6ebd0a2a1c605e6062bSHA1: 265950bb706582290ad3876527eb840adeb0a463ANALYSIS DATE: 2022-10-11T14:49:03ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – 70f3545a5937c5f241b31c4e6ec35ee2

October 11, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 70f3545a5937c5f241b31c4e6ec35ee2SHA1: 8cfeceb886dc49e758d267353b9685e5dd94b326ANALYSIS DATE: 2022-10-11T15:32:19ZTTPS: T1005, T1081, T1012, T1060,...

Malware Analysis – djvu – c092559ffc2f7a60c82904685ef29e74

October 11, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: c092559ffc2f7a60c82904685ef29e74SHA1: 31a31b8575f3711a6cd8df7252466597a3f94b20ANALYSIS DATE: 2022-10-11T15:35:47ZTTPS: T1060, T1112, T1222, T1082,...

Malware Analysis – ransomware – 802ba5f6817ec4339a24a669be403805

October 11, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 802ba5f6817ec4339a24a669be403805SHA1: a3bc146d4ebb1a04e489870c5b2e55f3a5c8462dANALYSIS DATE: 2022-10-11T15:53:04ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 74aa4f5857bf44680d9fa8b86f6f5705

October 11, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 74aa4f5857bf44680d9fa8b86f6f5705SHA1: e72accda4aece3442c0a2d9ea5819dbc72cb51ffANALYSIS DATE: 2022-10-11T15:53:04ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – efb844ac2e9cfbef9863a56931aa7a7a

October 11, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: efb844ac2e9cfbef9863a56931aa7a7aSHA1: 3ae12cb9cd883eaefbdf9a3ecfb62f5177603f9bANALYSIS DATE: 2022-10-11T15:53:04ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – bcb91ccd549d5188b60c5059a5832d23

October 11, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: bcb91ccd549d5188b60c5059a5832d23SHA1: da3b892c93dcf4a09c3fd63b7bfeaceb9b8527b5ANALYSIS DATE: 2022-10-11T16:56:00ZTTPS: T1060, T1112, T1005, T1081,...

Malware Analysis – wannacry – b583e353ce412edcb4128c251901db5e

October 11, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: b583e353ce412edcb4128c251901db5eSHA1: 482a398c3e8cd2e58f56a5830573b7022456c4d6ANALYSIS DATE: 2022-10-11T15:53:05ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – smokeloader – 82bc99b63c7b78418b1ce9c51f58bf2e

October 11, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 82bc99b63c7b78418b1ce9c51f58bf2eSHA1: 42e782e67c1fd12c8ebcba6cab8fba713871b472ANALYSIS DATE: 2022-10-11T16:32:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 9e5667e13ac62f847f040d374c9b381c

October 11, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 9e5667e13ac62f847f040d374c9b381cSHA1: 6b657bb4a96acf80e477d971a777bd0b96cf019cANALYSIS DATE: 2022-10-11T16:14:30ZTTPS: T1060, T1112, T1222, T1082,...

Malware Analysis – discovery – f27dbb274fb29ae23bbf99d2f0daba71

October 11, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discoveryMD5: f27dbb274fb29ae23bbf99d2f0daba71SHA1: 5661d95683b0bcc4307e6bc08a71b39e5a0580faANALYSIS DATE: 2022-10-11T10:26:28ZTTPS: T1082, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – 88323df0df755d5d667684caddf84bbb

October 11, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 88323df0df755d5d667684caddf84bbbSHA1: add6505387ca1dd1b6b4a9526bb01e30439d5bf2ANALYSIS DATE: 2022-10-11T11:01:49ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – danabot – 2f303d03187136a45d99bc73ad87f37a

October 11, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:buildnewdomain, backdoor, banker, collection, discovery, infostealer, persistence, ransomware, spyware, stealer,...

Malware Analysis – smokeloader – 4a8cef940dbcaaab17be40229f8f09e9

October 11, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 4a8cef940dbcaaab17be40229f8f09e9SHA1: fbccf3ef94809dae33000b6a15f7780db9bb3925ANALYSIS DATE: 2022-10-11T08:02:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – 74e9208acd17c7d1e074f19a8f64d2e6

October 11, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 74e9208acd17c7d1e074f19a8f64d2e6SHA1: 64e1007246dc1fa41d448efe2d7ffa7bb873ee8cANALYSIS DATE: 2022-10-11T06:39:26ZTTPS: T1112, T1060, T1158, T1082, T1012, T1120 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – 62863fbe54bcc384001f52896f78a2c0

October 11, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 62863fbe54bcc384001f52896f78a2c0SHA1: ec9bc172a15e6bb7972bda93b854863cecd91f38ANALYSIS DATE: 2022-10-11T06:56:02ZTTPS: T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – ad499a24974aff27e4204574bca7b05f

October 11, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: ad499a24974aff27e4204574bca7b05fSHA1: 2b8246aed7668f94d61ef52a52697981db97ad5fANALYSIS DATE: 2022-10-11T08:01:54ZTTPS: T1082, T1012, T1053, T1005,...

Malware Analysis – evasion – d647220db85f6557e262ada99919e9f2

October 11, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomware, trojanMD5: d647220db85f6557e262ada99919e9f2SHA1: 5fceb3f1819a994b22f3f83084ea50e540d9f8e4ANALYSIS DATE: 2022-10-11T08:06:04ZTTPS: T1112, T1082, T1053, T1107, T1490, T1031, T1491, T1089, T1012,...

Malware Analysis – smokeloader – 4a8cef940dbcaaab17be40229f8f09e9

October 11, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 4a8cef940dbcaaab17be40229f8f09e9SHA1: fbccf3ef94809dae33000b6a15f7780db9bb3925ANALYSIS DATE: 2022-10-11T08:03:33ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – d647220db85f6557e262ada99919e9f2

October 11, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomware, trojanMD5: d647220db85f6557e262ada99919e9f2SHA1: 5fceb3f1819a994b22f3f83084ea50e540d9f8e4ANALYSIS DATE: 2022-10-11T08:05:21ZTTPS: T1491, T1112, T1053, T1107, T1490, T1031, T1089, T1082, T1012,...

Malware Analysis

Malware Analysis – wannacry – 9f75c295e2503a82fd1478aa72cbd221

Malware Analysis – djvu – f6a2ea7b243ba21de0aa38538911b4e8

Malware Analysis – djvu – 2b4abbbbf4d7cdfe36d1d4d4ce541540

Malware Analysis – dcrat – 94c6ad8cf97c3f3651dfd705cb15ee14

Malware Analysis – wannacry – 59ced1d2c417c6ebd0a2a1c605e6062b

Malware Analysis – djvu – 70f3545a5937c5f241b31c4e6ec35ee2

Malware Analysis – djvu – c092559ffc2f7a60c82904685ef29e74

Malware Analysis – ransomware – 802ba5f6817ec4339a24a669be403805

Malware Analysis – ransomware – 74aa4f5857bf44680d9fa8b86f6f5705

Malware Analysis – ransomware – efb844ac2e9cfbef9863a56931aa7a7a

Malware Analysis – djvu – bcb91ccd549d5188b60c5059a5832d23

Malware Analysis – wannacry – b583e353ce412edcb4128c251901db5e

Malware Analysis – smokeloader – 82bc99b63c7b78418b1ce9c51f58bf2e

Malware Analysis – djvu – 9e5667e13ac62f847f040d374c9b381c

Malware Analysis – discovery – f27dbb274fb29ae23bbf99d2f0daba71

Malware Analysis – djvu – 88323df0df755d5d667684caddf84bbb

Malware Analysis – danabot – 2f303d03187136a45d99bc73ad87f37a

Malware Analysis – smokeloader – 4a8cef940dbcaaab17be40229f8f09e9

Malware Analysis – evasion – 74e9208acd17c7d1e074f19a8f64d2e6

Malware Analysis – evasion – 62863fbe54bcc384001f52896f78a2c0

Malware Analysis – djvu – ad499a24974aff27e4204574bca7b05f

Malware Analysis – evasion – d647220db85f6557e262ada99919e9f2

Malware Analysis – smokeloader – 4a8cef940dbcaaab17be40229f8f09e9

Malware Analysis – evasion – d647220db85f6557e262ada99919e9f2

[DRAGONFORCE] – Ransomware Victim: Ikav Global Energy

[DRAGONFORCE] – Ransomware Victim: Asheville Eye Associates

[FUNKSEC] – Ransomware Victim: deportesapalategui[.]com

CVE Alert: CVE-2024-43705

CVE Alert: CVE-2020-1821

You may have missed