Malware Analysis

Malware Analysis – danabot – 4a8cef940dbcaaab17be40229f8f09e9

October 11, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 4a8cef940dbcaaab17be40229f8f09e9SHA1: fbccf3ef94809dae33000b6a15f7780db9bb3925ANALYSIS...

Malware Analysis – djvu – d8eaa6a4796ba5b2bb8ecaa2f9ce3999

October 11, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: d8eaa6a4796ba5b2bb8ecaa2f9ce3999SHA1: 0cf6a0cc77e2a73eeef82fc434368e9dbea9836dANALYSIS DATE: 2022-10-11T08:09:45ZTTPS: T1005, T1081, T1060, T1112,...

Malware Analysis – wannacry – 14baa82b3b48237395b7f0b43927229f

October 11, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 14baa82b3b48237395b7f0b43927229fSHA1: 99b382b9b239db3a3a0cc34ade673d6071b773d8ANALYSIS DATE: 2022-10-11T08:11:18ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – 4647bb53eb893013f8c752f2b550ae81

October 11, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 4647bb53eb893013f8c752f2b550ae81SHA1: 5779a312940e1b8dcc587fdf22f94ec220c1db4bANALYSIS DATE: 2022-10-11T08:10:59ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 4647bb53eb893013f8c752f2b550ae81

October 11, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 4647bb53eb893013f8c752f2b550ae81SHA1: 5779a312940e1b8dcc587fdf22f94ec220c1db4bANALYSIS DATE: 2022-10-11T08:11:06ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – 719089f79446e8f6d7e2ba960a2ed96c

October 11, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 719089f79446e8f6d7e2ba960a2ed96cSHA1: 5047fdd972be0de532409dee8ea72ae2dda2ede8ANALYSIS DATE: 2022-10-11T08:17:02ZTTPS: T1031, T1112, T1107, T1490, T1082 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – wannacry – 14baa82b3b48237395b7f0b43927229f

October 11, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 14baa82b3b48237395b7f0b43927229fSHA1: 99b382b9b239db3a3a0cc34ade673d6071b773d8ANALYSIS DATE: 2022-10-11T08:12:05ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – persistence – b49b434dbfee3b934e8d1fdca785b18b

October 11, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: b49b434dbfee3b934e8d1fdca785b18bSHA1: 16d250980885f9f7d92cd23df590bac5be29e7bdANALYSIS DATE: 2022-10-11T08:16:07ZTTPS: T1060, T1082, T1491, T1112, T1042 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – evasion – 719089f79446e8f6d7e2ba960a2ed96c

October 11, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 719089f79446e8f6d7e2ba960a2ed96cSHA1: 5047fdd972be0de532409dee8ea72ae2dda2ede8ANALYSIS DATE: 2022-10-11T08:16:32ZTTPS: T1107, T1490, T1082, T1031, T1112 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – discovery – 63fbbac40a124e5f40fb768acb4df6c1

October 11, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, persistenceMD5: 63fbbac40a124e5f40fb768acb4df6c1SHA1: 90ae3913d6f89f99e5d4baa38133d306e9b1583eANALYSIS DATE: 2022-10-11T08:27:31ZTTPS: T1060, T1112, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – a156800b9afd9e30ffce8aa6e89d6cfb

October 11, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: a156800b9afd9e30ffce8aa6e89d6cfbSHA1: 7b0769c3164faf45d071a0da7e8fafe0eaf4fc82ANALYSIS DATE: 2022-10-11T08:33:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 0cb4753490c6383c0005aa3c025d16c7

October 11, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 0cb4753490c6383c0005aa3c025d16c7SHA1: 7fd69a77ece673870edff6d18cc49efedadaf366ANALYSIS DATE: 2022-10-11T08:21:06ZTTPS: T1012, T1082, T1053, T1005,...

Malware Analysis – discovery – 69f8758ed98e98659611e7cfbbeddcc0

October 11, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, persistenceMD5: 69f8758ed98e98659611e7cfbbeddcc0SHA1: 2206ad1f11531b07bbbd08eef062844ce8944738ANALYSIS DATE: 2022-10-11T08:21:19ZTTPS: T1060, T1112, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 32a51d488c8a68eedb7221fc7e7ee196

October 11, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 32a51d488c8a68eedb7221fc7e7ee196SHA1: 98a0bef751da37a0bcbc6961ce3a5eaab705f311ANALYSIS DATE: 2022-10-11T09:02:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – danabot – a156800b9afd9e30ffce8aa6e89d6cfb

October 11, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: a156800b9afd9e30ffce8aa6e89d6cfbSHA1: 7b0769c3164faf45d071a0da7e8fafe0eaf4fc82ANALYSIS...

Malware Analysis – smokeloader – 32a51d488c8a68eedb7221fc7e7ee196

October 11, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 32a51d488c8a68eedb7221fc7e7ee196SHA1: 98a0bef751da37a0bcbc6961ce3a5eaab705f311ANALYSIS DATE: 2022-10-11T09:05:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 7545dc45d86663ee45aff24419cc15ac

October 11, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 7545dc45d86663ee45aff24419cc15acSHA1: adadfbebd62e1f3890d74200ecd671b713a7e56cANALYSIS DATE: 2022-10-11T08:34:21ZTTPS: T1060, T1112, T1222, T1082,...

Malware Analysis – djvu – 5564c4680da43fb5501cd028b43531f5

October 11, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 5564c4680da43fb5501cd028b43531f5SHA1: 0e11e3f578c5271423bb9ace237fb2bebe496444ANALYSIS DATE: 2022-10-11T09:48:54ZTTPS: T1082, T1012, T1060, T1112,...

Malware Analysis – smokeloader – 7a14753737a3de00a01d7c0bcfa52230

October 11, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 7a14753737a3de00a01d7c0bcfa52230SHA1: f55cfee97f76001ceb503809570faaa744886d5aANALYSIS DATE: 2022-10-11T09:32:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – danabot – 32a51d488c8a68eedb7221fc7e7ee196

October 11, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:buildnewdomain, backdoor, banker, collection, discovery, infostealer, persistence, ransomware, spyware, stealer,...

Malware Analysis – koxic – 5a44e1d5691ec9395281123ea0bd501f

October 11, 2022

Score: 10 MALWARE FAMILY: koxicTAGS:family:koxic, evasion, ransomware, trojanMD5: 5a44e1d5691ec9395281123ea0bd501fSHA1: 64566d5049479227d2eff3d983b127c0339974cdANALYSIS DATE: 2022-10-11T09:19:45ZTTPS: T1018, T1082, T1059, T1112, T1031, T1089 ScoreMeaningExample10Known badA...

Malware Analysis – smokeloader – fd76a2d6b3edde0300d09a6143cbf883

October 11, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: fd76a2d6b3edde0300d09a6143cbf883SHA1: 5b5fb81c75a8ffb50b6b29de69eb324818948aa6ANALYSIS DATE: 2022-10-11T10:31:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 335d895837cd0451a60057a9b84c81bc

October 11, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 335d895837cd0451a60057a9b84c81bcSHA1: a3846bce811b7150c30719f7599e700d0a154816ANALYSIS DATE: 2022-10-11T10:00:33ZTTPS: T1222, T1012, T1082, T1060,...

Malware Analysis – djvu – 7a14753737a3de00a01d7c0bcfa52230

October 11, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, stealer, trojanMD5: 7a14753737a3de00a01d7c0bcfa52230SHA1: f55cfee97f76001ceb503809570faaa744886d5aANALYSIS DATE: 2022-10-11T09:51:59ZTTPS: T1082,...

Malware Analysis

Malware Analysis – danabot – 4a8cef940dbcaaab17be40229f8f09e9

Malware Analysis – djvu – d8eaa6a4796ba5b2bb8ecaa2f9ce3999

Malware Analysis – wannacry – 14baa82b3b48237395b7f0b43927229f

Malware Analysis – ransomware – 4647bb53eb893013f8c752f2b550ae81

Malware Analysis – ransomware – 4647bb53eb893013f8c752f2b550ae81

Malware Analysis – evasion – 719089f79446e8f6d7e2ba960a2ed96c

Malware Analysis – wannacry – 14baa82b3b48237395b7f0b43927229f

Malware Analysis – persistence – b49b434dbfee3b934e8d1fdca785b18b

Malware Analysis – evasion – 719089f79446e8f6d7e2ba960a2ed96c

Malware Analysis – discovery – 63fbbac40a124e5f40fb768acb4df6c1

Malware Analysis – smokeloader – a156800b9afd9e30ffce8aa6e89d6cfb

Malware Analysis – djvu – 0cb4753490c6383c0005aa3c025d16c7

Malware Analysis – discovery – 69f8758ed98e98659611e7cfbbeddcc0

Malware Analysis – smokeloader – 32a51d488c8a68eedb7221fc7e7ee196

Malware Analysis – danabot – a156800b9afd9e30ffce8aa6e89d6cfb

Malware Analysis – smokeloader – 32a51d488c8a68eedb7221fc7e7ee196

Malware Analysis – djvu – 7545dc45d86663ee45aff24419cc15ac

Malware Analysis – djvu – 5564c4680da43fb5501cd028b43531f5

Malware Analysis – smokeloader – 7a14753737a3de00a01d7c0bcfa52230

Malware Analysis – danabot – 32a51d488c8a68eedb7221fc7e7ee196

Malware Analysis – koxic – 5a44e1d5691ec9395281123ea0bd501f

Malware Analysis – smokeloader – fd76a2d6b3edde0300d09a6143cbf883

Malware Analysis – djvu – 335d895837cd0451a60057a9b84c81bc

Malware Analysis – djvu – 7a14753737a3de00a01d7c0bcfa52230

[AKIRA] – Ransomware Victim: Ray Fogg Corporate Properties

[FOG] – Ransomware Victim: Grupo Baston Aerossol (baston[.]com[.]br)

CVE Alert: CVE-2024-51948

CVE Alert: CVE-2025-27500

CVE Alert: CVE-2025-27501

You may have missed