Malware Analysis

Malware Analysis – smokeloader – 9816d5d74cbc8de59fb0a5b586edec59

October 6, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 9816d5d74cbc8de59fb0a5b586edec59SHA1: 2413db25f45c0e67c3e0d9eb34920d4da40fea72ANALYSIS DATE: 2022-10-06T14:32:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 4189a65eb93039893dc196555977b4de

October 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 4189a65eb93039893dc196555977b4deSHA1: 9d6a22c04f2ca9ebb573d2219ff756eec494a5efANALYSIS DATE: 2022-10-06T14:52:25ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – djvu – a775e039e5201a60ef4b932eff40a7ad

October 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: a775e039e5201a60ef4b932eff40a7adSHA1: 060af818be022d09ec9509772105b5f1aa62d141ANALYSIS DATE: 2022-10-06T15:27:41ZTTPS: T1222, T1053, T1005, T1081,...

Malware Analysis – – ef4fdf65fc90bfda8d1d2ae6d20aff60

October 6, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: ef4fdf65fc90bfda8d1d2ae6d20aff60SHA1: 9431227836440c78f12bfb2cb3247d59f4d4640bANALYSIS DATE: 2022-10-06T14:53:37ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – c90ab0e7f5139a1690233dd68f54cf28

October 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: c90ab0e7f5139a1690233dd68f54cf28SHA1: 588d882524cc9c689ee3dfdd83b3d6840c5a2d17ANALYSIS DATE: 2022-10-06T15:13:06ZTTPS: T1222, T1082, T1005, T1081,...

Malware Analysis – djvu – 8082396808375b2d4297de6297b85387

October 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 8082396808375b2d4297de6297b85387SHA1: b3eba7002e1805c0857e834337e3e0163cef4d6cANALYSIS DATE: 2022-10-06T15:27:53ZTTPS: T1082, T1005, T1081, T1053,...

Malware Analysis – privateloader – 4109b53059128d74bf178bfbc7b5d7e5

October 6, 2022

Score: 10 MALWARE FAMILY: privateloaderTAGS:family:privateloader, family:redline, family:smokeloader, botnet:nam6.9, backdoor, infostealer, loader, main, spyware, stealer, trojan, vmprotectMD5: 4109b53059128d74bf178bfbc7b5d7e5SHA1: 4ab24c962cb923a0a36f2620241b40c8d4f609d3ANALYSIS DATE: 2022-10-06T16:21:03ZTTPS:...

Malware Analysis – smokeloader – 58ff38bdff8438163ca9fbe87236b7eb

October 6, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 58ff38bdff8438163ca9fbe87236b7ebSHA1: f1e258bf5c8505ee04739c331e2304669b2b3371ANALYSIS DATE: 2022-10-06T15:31:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 58ff38bdff8438163ca9fbe87236b7eb

October 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 58ff38bdff8438163ca9fbe87236b7ebSHA1: f1e258bf5c8505ee04739c331e2304669b2b3371ANALYSIS DATE: 2022-10-06T15:41:09ZTTPS:...

Malware Analysis – redline – 1259ae3073eba6af139f7a5520da1bc6

October 6, 2022

Score: 10 MALWARE FAMILY: redlineTAGS:family:redline, discovery, infostealer, persistence, ransomware, spywareMD5: 1259ae3073eba6af139f7a5520da1bc6SHA1: 7bd280d484c60373f276322eacb11566b16af368ANALYSIS DATE: 2022-10-06T16:11:55ZTTPS: T1012, T1112, T1005, T1081, T1060, T1082,...

Malware Analysis – smokeloader – 5dbee5162f032bf484ddbcc68eebbf42

October 6, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 5dbee5162f032bf484ddbcc68eebbf42SHA1: 07e86d83adc3e04caf149922c48085b7639b6837ANALYSIS DATE: 2022-10-06T16:34:57ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 6fbde990ad1659a4063bbcc3099ae82a

October 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 6fbde990ad1659a4063bbcc3099ae82aSHA1: f6e725c2280469ab5a3c39cc82cfb03dec67a6bcANALYSIS DATE: 2022-10-06T16:32:33ZTTPS: T1053, T1005, T1081, T1222,...

Malware Analysis – smokeloader – 5dbee5162f032bf484ddbcc68eebbf42

October 6, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 5dbee5162f032bf484ddbcc68eebbf42SHA1: 07e86d83adc3e04caf149922c48085b7639b6837ANALYSIS DATE: 2022-10-06T16:32:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 5dbee5162f032bf484ddbcc68eebbf42

October 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 5dbee5162f032bf484ddbcc68eebbf42SHA1: 07e86d83adc3e04caf149922c48085b7639b6837ANALYSIS DATE: 2022-10-06T16:38:20ZTTPS:...

Malware Analysis – evasion – b1315f90a7f98c5f7e187104615bf20f

October 6, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: b1315f90a7f98c5f7e187104615bf20fSHA1: 49f773c7e7cf66d715de2c2f7fd5352515918c0dANALYSIS DATE: 2022-10-06T08:28:22ZTTPS: T1082, T1088, T1089, T1112, T1031, T1107, T1490, T1098,...

Malware Analysis – ransomware – a1ffce6c80f805b72c61cc6225457c8b

October 6, 2022

Score: 5 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: a1ffce6c80f805b72c61cc6225457c8bSHA1: 47b2e3cd345f535da7abfa4a02284dcdb2fe177cANALYSIS DATE: 2022-10-06T08:15:46ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – cd13e52122e4ea82def4bd8303bfa3fb

October 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: cd13e52122e4ea82def4bd8303bfa3fbSHA1: 7f4f730b297d30a04364360ccf06636dcd1d25c5ANALYSIS DATE: 2022-10-06T08:28:04ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – smokeloader – 34a120c01759401577fc71beca944aa4

October 6, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 34a120c01759401577fc71beca944aa4SHA1: c569f5a37ef5d5e8bbfabc059b3e712491dc88ffANALYSIS DATE: 2022-10-06T08:31:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 34a120c01759401577fc71beca944aa4

October 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 34a120c01759401577fc71beca944aa4SHA1: c569f5a37ef5d5e8bbfabc059b3e712491dc88ffANALYSIS DATE: 2022-10-06T08:30:48ZTTPS:...

Malware Analysis – djvu – 2867c3287900f54a65dc7654ba2d2f5b

October 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 2867c3287900f54a65dc7654ba2d2f5bSHA1: 6ba0115dd269992658cfa0b1a6d1b10bd2c48947ANALYSIS DATE: 2022-10-06T08:35:27ZTTPS: T1060, T1112, T1082, T1005,...

Malware Analysis – ransomware – 176c0e35328b032619dc485652148f6c

October 6, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 176c0e35328b032619dc485652148f6cSHA1: 00772f0f4bc58c23b4e1d338ba9ee3a1abd0aebdANALYSIS DATE: 2022-10-06T09:11:03ZTTPS: T1107, T1490, T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 176c0e35328b032619dc485652148f6c

October 6, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 176c0e35328b032619dc485652148f6cSHA1: 00772f0f4bc58c23b4e1d338ba9ee3a1abd0aebdANALYSIS DATE: 2022-10-06T09:12:30ZTTPS: T1082, T1012, T1120, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 4d9cd2ec3ce1522427e4654d3d7744da

October 6, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 4d9cd2ec3ce1522427e4654d3d7744daSHA1: ac29cd9beb1754cab94c3f650b22006b6374ec0aANALYSIS DATE: 2022-10-06T09:32:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 0c482b05f3edc8267e37d9b8029645d2

October 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 0c482b05f3edc8267e37d9b8029645d2SHA1: b2d323a620f78d2fd48b045ae278b4e3dfd85a9fANALYSIS DATE: 2022-10-06T09:21:11ZTTPS: T1222, T1060, T1112, T1005,...

Malware Analysis

Malware Analysis – smokeloader – 9816d5d74cbc8de59fb0a5b586edec59

Malware Analysis – djvu – 4189a65eb93039893dc196555977b4de

Malware Analysis – djvu – a775e039e5201a60ef4b932eff40a7ad

Malware Analysis – – ef4fdf65fc90bfda8d1d2ae6d20aff60

Malware Analysis – djvu – c90ab0e7f5139a1690233dd68f54cf28

Malware Analysis – djvu – 8082396808375b2d4297de6297b85387

Malware Analysis – privateloader – 4109b53059128d74bf178bfbc7b5d7e5

Malware Analysis – smokeloader – 58ff38bdff8438163ca9fbe87236b7eb

Malware Analysis – djvu – 58ff38bdff8438163ca9fbe87236b7eb

Malware Analysis – redline – 1259ae3073eba6af139f7a5520da1bc6

Malware Analysis – smokeloader – 5dbee5162f032bf484ddbcc68eebbf42

Malware Analysis – djvu – 6fbde990ad1659a4063bbcc3099ae82a

Malware Analysis – smokeloader – 5dbee5162f032bf484ddbcc68eebbf42

Malware Analysis – djvu – 5dbee5162f032bf484ddbcc68eebbf42

Malware Analysis – evasion – b1315f90a7f98c5f7e187104615bf20f

Malware Analysis – ransomware – a1ffce6c80f805b72c61cc6225457c8b

Malware Analysis – djvu – cd13e52122e4ea82def4bd8303bfa3fb

Malware Analysis – smokeloader – 34a120c01759401577fc71beca944aa4

Malware Analysis – djvu – 34a120c01759401577fc71beca944aa4

Malware Analysis – djvu – 2867c3287900f54a65dc7654ba2d2f5b

Malware Analysis – ransomware – 176c0e35328b032619dc485652148f6c

Malware Analysis – ransomware – 176c0e35328b032619dc485652148f6c

Malware Analysis – smokeloader – 4d9cd2ec3ce1522427e4654d3d7744da

Malware Analysis – djvu – 0c482b05f3edc8267e37d9b8029645d2

US-CERT Vulnerability Summary for the Week of February 24, 2025

[KAIROS] – Ransomware Victim: usarice[.]com

[ARCUSMEDIA] – Ransomware Victim: Itapeseg

[KAIROS] – Ransomware Victim: drvitenas[.]com

[AKIRA] – Ransomware Victim: Sunnking SustainableSolutions

You may have missed