Malware Analysis

Malware Analysis – djvu – 0c46d0619219da90a35d94bcf4d7e094

October 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 0c46d0619219da90a35d94bcf4d7e094SHA1: 43cf7800e5bcdeb439cff1c230a5681682fbc03bANALYSIS DATE: 2022-10-07T08:43:10ZTTPS:...

Malware Analysis – smokeloader – 0c46d0619219da90a35d94bcf4d7e094

October 7, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 0c46d0619219da90a35d94bcf4d7e094SHA1: 43cf7800e5bcdeb439cff1c230a5681682fbc03bANALYSIS DATE: 2022-10-07T08:31:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – f456b83895119b2e6aca1422df7aa11b

October 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: f456b83895119b2e6aca1422df7aa11bSHA1: 3d9c11bf2edae9e7aedd0c4ff160ce0322b7a5faANALYSIS DATE: 2022-10-07T08:31:58ZTTPS: T1082, T1005, T1081, T1012,...

Malware Analysis – djvu – 79afe5212a85f53a83ec1cf4d3ef1cb1

October 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 79afe5212a85f53a83ec1cf4d3ef1cb1SHA1: ede4d779271049a10d83fbd9fbc1394d1b32db47ANALYSIS DATE: 2022-10-07T09:16:28ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – djvu – 573d5adbc8aa739642ae36bedfcbcc0b

October 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 573d5adbc8aa739642ae36bedfcbcc0bSHA1: bedd44262ec356e1e130ae27f6e075e91fef1eb5ANALYSIS DATE: 2022-10-07T09:13:22ZTTPS: T1222, T1053, T1005, T1081,...

Malware Analysis – smokeloader – 782995a03137a524e3568041ceba4fc4

October 7, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 782995a03137a524e3568041ceba4fc4SHA1: 8eef8e69d40d085aa00ba2e1e039cbfb71006a86ANALYSIS DATE: 2022-10-07T09:32:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 782995a03137a524e3568041ceba4fc4

October 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 782995a03137a524e3568041ceba4fc4SHA1: 8eef8e69d40d085aa00ba2e1e039cbfb71006a86ANALYSIS DATE: 2022-10-07T09:30:51ZTTPS:...

Malware Analysis – djvu – 402a9ad95603a61734fb4930fdd5b6ef

October 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 402a9ad95603a61734fb4930fdd5b6efSHA1: a4849d63327bc943e5999a37dad4f87000c7f022ANALYSIS DATE: 2022-10-07T09:56:18ZTTPS: T1012, T1082, T1053, T1005,...

Malware Analysis – djvu – e2c04ff0f6965a5cc683a982a199a025

October 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: e2c04ff0f6965a5cc683a982a199a025SHA1: 12a3c1b0d25a35a9042590f657ba70fbd3e95130ANALYSIS DATE: 2022-10-07T09:42:45ZTTPS: T1012, T1082, T1060, T1112,...

Malware Analysis – smokeloader – 72b054d5ea096ec65e7f765a8bddcedc

October 7, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 72b054d5ea096ec65e7f765a8bddcedcSHA1: 0b2a87ffca78fbf6e7341390c864fc3dc3136192ANALYSIS DATE: 2022-10-07T10:01:06ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – amadey – 72b054d5ea096ec65e7f765a8bddcedc

October 7, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 72b054d5ea096ec65e7f765a8bddcedcSHA1: 0b2a87ffca78fbf6e7341390c864fc3dc3136192ANALYSIS DATE:...

Malware Analysis – djvu – 890e8e2011fc7a98a91d27746288d45b

October 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, collection, discovery, persistence, ransomware, spyware, stealerMD5: 890e8e2011fc7a98a91d27746288d45bSHA1: 98ec5e6e52963f34b96d7d889cab724125419a93ANALYSIS DATE: 2022-10-07T02:06:39ZTTPS: T1102, T1012, T1120,...

Malware Analysis – smokeloader – 890e8e2011fc7a98a91d27746288d45b

October 7, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 890e8e2011fc7a98a91d27746288d45bSHA1: 98ec5e6e52963f34b96d7d889cab724125419a93ANALYSIS DATE: 2022-10-07T02:02:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 890e8e2011fc7a98a91d27746288d45b

October 7, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 890e8e2011fc7a98a91d27746288d45bSHA1: 98ec5e6e52963f34b96d7d889cab724125419a93ANALYSIS DATE: 2022-10-07T02:04:25ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 1d0ec78f9be7ee4a512f894d3f0be3cc

October 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 1d0ec78f9be7ee4a512f894d3f0be3ccSHA1: 7cdf3682f9937e87299173f01f7d262eb11e0ac6ANALYSIS DATE: 2022-10-07T02:32:08ZTTPS: T1060, T1112, T1222, T1082,...

Malware Analysis – djvu – 925d49af178b98a12118f93c8a82422d

October 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 925d49af178b98a12118f93c8a82422dSHA1: cbeff9068bfe1f440053f42484af914962e58c40ANALYSIS DATE: 2022-10-07T02:19:23ZTTPS: T1060, T1112, T1222, T1012,...

Malware Analysis – djvu – 95f7ca058006800e6d0db8190b5bbc23

October 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 95f7ca058006800e6d0db8190b5bbc23SHA1: 00e8525af59c61354ca37c5847200f9a5b294ceaANALYSIS DATE: 2022-10-07T03:20:28ZTTPS: T1222, T1082, T1053, T1012,...

Malware Analysis – djvu – 30a3128f9027608e605a7bc649368072

October 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 30a3128f9027608e605a7bc649368072SHA1: 0a75b16d5c953bd13441dad69bd68a91410c3f3cANALYSIS DATE: 2022-10-07T03:27:25ZTTPS: T1012, T1060, T1112, T1222,...

Malware Analysis – blackbasta – 6d5b9675b68bac95b885b4bb294134a1

October 7, 2022

Score: 10 MALWARE FAMILY: blackbastaTAGS:family:blackbasta, evasion, ransomwareMD5: 6d5b9675b68bac95b885b4bb294134a1SHA1: 74dbf463be3139a28d9851b3b80c2ecac3e56304ANALYSIS DATE: 2022-10-07T03:40:04ZTTPS: T1490, T1491, T1112, T1082, T1107 ScoreMeaningExample10Known badA malware family...

Malware Analysis – dcrat – 9c9891d87460cd4e2074c0e21998ef52

October 7, 2022

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, family:djvu, family:raccoon, family:smokeloader, family:vidar, botnet:517, botnet:884d084df0d90657bc52b99e12a5611c, backdoor, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealer,...

Malware Analysis – chaos – fbd7e50091e64349827d1a62947ce042

October 7, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, ransomwareMD5: fbd7e50091e64349827d1a62947ce042SHA1: 22db7cddf60c5eadeedafc4ce7f27530a06899f4ANALYSIS DATE: 2022-10-07T03:40:04ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – smokeloader – 9c9891d87460cd4e2074c0e21998ef52

October 7, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 9c9891d87460cd4e2074c0e21998ef52SHA1: e51b3200b7967890d25fb00b00b730f373dce7ffANALYSIS DATE: 2022-10-07T03:32:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – blackbasta – 6d5b9675b68bac95b885b4bb294134a1

October 7, 2022

Score: 10 MALWARE FAMILY: blackbastaTAGS:family:blackbasta, evasion, ransomwareMD5: 6d5b9675b68bac95b885b4bb294134a1SHA1: 74dbf463be3139a28d9851b3b80c2ecac3e56304ANALYSIS DATE: 2022-10-07T03:42:04ZTTPS: T1490, T1082, T1012, T1107, T1491, T1112 ScoreMeaningExample10Known badA malware...

Malware Analysis – blackbasta – c115bbbdb1a61f8c553d74802bfd78fb

October 7, 2022

Score: 10 MALWARE FAMILY: blackbastaTAGS:family:blackbasta, ransomwareMD5: c115bbbdb1a61f8c553d74802bfd78fbSHA1: 1f439569e3c1c14ea9f02235f8f45c49e2764160ANALYSIS DATE: 2022-10-07T03:42:52ZTTPS: T1107, T1490, T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis

Malware Analysis – djvu – 0c46d0619219da90a35d94bcf4d7e094

Malware Analysis – smokeloader – 0c46d0619219da90a35d94bcf4d7e094

Malware Analysis – djvu – f456b83895119b2e6aca1422df7aa11b

Malware Analysis – djvu – 79afe5212a85f53a83ec1cf4d3ef1cb1

Malware Analysis – djvu – 573d5adbc8aa739642ae36bedfcbcc0b

Malware Analysis – smokeloader – 782995a03137a524e3568041ceba4fc4

Malware Analysis – djvu – 782995a03137a524e3568041ceba4fc4

Malware Analysis – djvu – 402a9ad95603a61734fb4930fdd5b6ef

Malware Analysis – djvu – e2c04ff0f6965a5cc683a982a199a025

Malware Analysis – smokeloader – 72b054d5ea096ec65e7f765a8bddcedc

Malware Analysis – amadey – 72b054d5ea096ec65e7f765a8bddcedc

Malware Analysis – djvu – 890e8e2011fc7a98a91d27746288d45b

Malware Analysis – smokeloader – 890e8e2011fc7a98a91d27746288d45b

Malware Analysis – smokeloader – 890e8e2011fc7a98a91d27746288d45b

Malware Analysis – djvu – 1d0ec78f9be7ee4a512f894d3f0be3cc

Malware Analysis – djvu – 925d49af178b98a12118f93c8a82422d

Malware Analysis – djvu – 95f7ca058006800e6d0db8190b5bbc23

Malware Analysis – djvu – 30a3128f9027608e605a7bc649368072

Malware Analysis – blackbasta – 6d5b9675b68bac95b885b4bb294134a1

Malware Analysis – dcrat – 9c9891d87460cd4e2074c0e21998ef52

Malware Analysis – chaos – fbd7e50091e64349827d1a62947ce042

Malware Analysis – smokeloader – 9c9891d87460cd4e2074c0e21998ef52

Malware Analysis – blackbasta – 6d5b9675b68bac95b885b4bb294134a1

Malware Analysis – blackbasta – c115bbbdb1a61f8c553d74802bfd78fb

Cobalt Strike Beacon Detected – 117[.]50[.]163[.]22:8080

Cobalt Strike Beacon Detected – 93[.]179[.]101[.]17:80

Cobalt Strike Beacon Detected – 123[.]57[.]230[.]183:443

Cobalt Strike Beacon Detected – 101[.]133[.]224[.]88:443

Cobalt Strike Beacon Detected – 47[.]109[.]58[.]47:80

You may have missed