Malware Analysis

Malware Analysis – blackbasta – c115bbbdb1a61f8c553d74802bfd78fb

October 7, 2022

Score: 10 MALWARE FAMILY: blackbastaTAGS:family:blackbasta, ransomwareMD5: c115bbbdb1a61f8c553d74802bfd78fbSHA1: 1f439569e3c1c14ea9f02235f8f45c49e2764160ANALYSIS DATE: 2022-10-07T03:42:52ZTTPS: T1107, T1490, T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – blackbasta – c115bbbdb1a61f8c553d74802bfd78fb

October 7, 2022

Score: 10 MALWARE FAMILY: blackbastaTAGS:family:blackbasta, ransomwareMD5: c115bbbdb1a61f8c553d74802bfd78fbSHA1: 1f439569e3c1c14ea9f02235f8f45c49e2764160ANALYSIS DATE: 2022-10-07T03:40:04ZTTPS: T1107, T1490, T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 6747e6c476e9a424f200ab855a7e608a

October 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 6747e6c476e9a424f200ab855a7e608aSHA1: e3a8b85e2ef091416bbf72f9384257bb6fc97653ANALYSIS DATE: 2022-10-07T04:38:59ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – djvu – dfcb8ba262be97d0c87031c6c8cd4abb

October 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: dfcb8ba262be97d0c87031c6c8cd4abbSHA1: fca9b0f065baced918451eaabf4779505ea81bd3ANALYSIS DATE: 2022-10-07T04:20:55ZTTPS: T1053, T1012, T1082, T1060,...

Malware Analysis – dcrat – 14309ebba0bb552a9bbbf640301313ed

October 7, 2022

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, family:djvu, family:raccoon, family:smokeloader, family:vidar, botnet:517, botnet:884d084df0d90657bc52b99e12a5611c, backdoor, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealer,...

Malware Analysis – smokeloader – 14309ebba0bb552a9bbbf640301313ed

October 7, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 14309ebba0bb552a9bbbf640301313edSHA1: 104e44044325cc19415232de78e0146e45ef17c4ANALYSIS DATE: 2022-10-07T04:31:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – a64d49b747d1ae2346f8c4e47f75d990

October 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: a64d49b747d1ae2346f8c4e47f75d990SHA1: 1a127cbb2996ab256afeda3773571b90f61b1c2aANALYSIS DATE: 2022-10-06T20:01:45ZTTPS:...

Malware Analysis – djvu – 5ec6d8582f6ab8401fe667bc22ed639f

October 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 5ec6d8582f6ab8401fe667bc22ed639fSHA1: f51d073d99e98f0b23595738b927775fd72e9116ANALYSIS DATE: 2022-10-06T20:00:19ZTTPS: T1053, T1005, T1081, T1222,...

Malware Analysis – ransomware – 49143739704f7d2cb081f787241a5e6b

October 7, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 49143739704f7d2cb081f787241a5e6bSHA1: a7ca5e122c496ec9d605cca95ba93f5fabae4c44ANALYSIS DATE: 2022-10-06T20:11:06ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – smokeloader – a64d49b747d1ae2346f8c4e47f75d990

October 7, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: a64d49b747d1ae2346f8c4e47f75d990SHA1: 1a127cbb2996ab256afeda3773571b90f61b1c2aANALYSIS DATE: 2022-10-06T20:02:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – a64d49b747d1ae2346f8c4e47f75d990

October 7, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: a64d49b747d1ae2346f8c4e47f75d990SHA1: 1a127cbb2996ab256afeda3773571b90f61b1c2aANALYSIS DATE: 2022-10-06T20:02:29ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 2af5fb4795f72a7e4d2d482f3de56203

October 7, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 2af5fb4795f72a7e4d2d482f3de56203SHA1: 3bd374109ebcd348321b351edd53bac2e3b809bfANALYSIS DATE: 2022-10-06T20:11:05ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – a26018cd2c37af036be7813691de7b0c

October 7, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: a26018cd2c37af036be7813691de7b0cSHA1: 9a45302f1c3bdebf51ee43cfa4cb6ae04fcf39f4ANALYSIS DATE: 2022-10-06T20:11:06ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – smokeloader – f1ec441f31d57ce6c855b027fbeb3da2

October 7, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: f1ec441f31d57ce6c855b027fbeb3da2SHA1: a6a0eaaa5ff49e19caf3657cd87713558c113da0ANALYSIS DATE: 2022-10-06T21:31:37ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 85e1f46bf518f778cb08158b25d0083d

October 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 85e1f46bf518f778cb08158b25d0083dSHA1: d64d8cd462d6126cabf44ce0d990ebc5e5c3a33dANALYSIS DATE: 2022-10-06T21:42:27ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – smokeloader – f1ec441f31d57ce6c855b027fbeb3da2

October 7, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: f1ec441f31d57ce6c855b027fbeb3da2SHA1: a6a0eaaa5ff49e19caf3657cd87713558c113da0ANALYSIS DATE: 2022-10-06T21:31:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – d80e037ba92c84639f67d82e625362c1

October 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: d80e037ba92c84639f67d82e625362c1SHA1: 95e0c5169e1828f47ae21d11c9a605e4f27e93bcANALYSIS DATE: 2022-10-06T22:13:19ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – dcrat – f1ec441f31d57ce6c855b027fbeb3da2

October 7, 2022

Malware Analysis – dcrat – 2cef6f29fb5ace1adc062e403a3fb65b

October 7, 2022

Malware Analysis – smokeloader – 2cef6f29fb5ace1adc062e403a3fb65b

October 7, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 2cef6f29fb5ace1adc062e403a3fb65bSHA1: febe262e803779050710a958d569a28371ccdaf6ANALYSIS DATE: 2022-10-06T22:32:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 8f6fa7be2eae1ccb8a857100bb06842b

October 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 8f6fa7be2eae1ccb8a857100bb06842bSHA1: 3003f428f0627fbdaa6df8d381a247c9aaf33279ANALYSIS DATE: 2022-10-06T14:12:07ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – djvu – dd3cc4f1126c59e258d981230214feb8

October 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: dd3cc4f1126c59e258d981230214feb8SHA1: bea118175a7aa4c645795128ff8e6b2b05d27354ANALYSIS DATE: 2022-10-06T14:12:41ZTTPS: T1222, T1005, T1081, T1012,...

Malware Analysis – djvu – 4189a65eb93039893dc196555977b4de

October 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 4189a65eb93039893dc196555977b4deSHA1: 9d6a22c04f2ca9ebb573d2219ff756eec494a5efANALYSIS DATE: 2022-10-06T14:52:25ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – ransomware – 5569bfe4f06724dd750c2a4690b79ba0

October 6, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 5569bfe4f06724dd750c2a4690b79ba0SHA1: 05414c7d5dacf43370ab451d28d4ac27bdcabf22ANALYSIS DATE: 2022-10-06T14:48:36ZTTPS: T1012, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis

Malware Analysis – blackbasta – c115bbbdb1a61f8c553d74802bfd78fb

Malware Analysis – blackbasta – c115bbbdb1a61f8c553d74802bfd78fb

Malware Analysis – djvu – 6747e6c476e9a424f200ab855a7e608a

Malware Analysis – djvu – dfcb8ba262be97d0c87031c6c8cd4abb

Malware Analysis – dcrat – 14309ebba0bb552a9bbbf640301313ed

Malware Analysis – smokeloader – 14309ebba0bb552a9bbbf640301313ed

Malware Analysis – djvu – a64d49b747d1ae2346f8c4e47f75d990

Malware Analysis – djvu – 5ec6d8582f6ab8401fe667bc22ed639f

Malware Analysis – ransomware – 49143739704f7d2cb081f787241a5e6b

Malware Analysis – smokeloader – a64d49b747d1ae2346f8c4e47f75d990

Malware Analysis – smokeloader – a64d49b747d1ae2346f8c4e47f75d990

Malware Analysis – ransomware – 2af5fb4795f72a7e4d2d482f3de56203

Malware Analysis – ransomware – a26018cd2c37af036be7813691de7b0c

Malware Analysis – smokeloader – f1ec441f31d57ce6c855b027fbeb3da2

Malware Analysis – djvu – 85e1f46bf518f778cb08158b25d0083d

Malware Analysis – smokeloader – f1ec441f31d57ce6c855b027fbeb3da2

Malware Analysis – djvu – d80e037ba92c84639f67d82e625362c1

Malware Analysis – dcrat – f1ec441f31d57ce6c855b027fbeb3da2

Malware Analysis – dcrat – 2cef6f29fb5ace1adc062e403a3fb65b

Malware Analysis – smokeloader – 2cef6f29fb5ace1adc062e403a3fb65b

Malware Analysis – djvu – 8f6fa7be2eae1ccb8a857100bb06842b

Malware Analysis – djvu – dd3cc4f1126c59e258d981230214feb8

Malware Analysis – djvu – 4189a65eb93039893dc196555977b4de

Malware Analysis – ransomware – 5569bfe4f06724dd750c2a4690b79ba0

Cobalt Strike Beacon Detected – 117[.]50[.]163[.]22:8080

Cobalt Strike Beacon Detected – 93[.]179[.]101[.]17:80

Cobalt Strike Beacon Detected – 123[.]57[.]230[.]183:443

Cobalt Strike Beacon Detected – 101[.]133[.]224[.]88:443

Cobalt Strike Beacon Detected – 47[.]109[.]58[.]47:80

You may have missed