Malware Analysis

Malware Analysis – djvu – 47343ccd035c2123139b06a606f676dd

October 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 47343ccd035c2123139b06a606f676ddSHA1: d16e1331d5dd2011a2f5a31b027421c8559313e1ANALYSIS DATE: 2022-10-05T20:43:11ZTTPS: T1222, T1060, T1112, T1005,...

Malware Analysis – djvu – a1a707c217336e4ae154a23f36f3608d

October 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, collection, discovery, persistence, ransomware, spyware, stealerMD5: a1a707c217336e4ae154a23f36f3608dSHA1: 23e83155a5741a21cfae3f635ba964f308b2da8eANALYSIS DATE: 2022-10-05T20:31:27ZTTPS: T1130, T1112, T1102,...

Malware Analysis – djvu – fec683cf03741607291f6c6b8022c98c

October 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: fec683cf03741607291f6c6b8022c98cSHA1: 18a49af627edf179525029421e11209940eae738ANALYSIS DATE: 2022-10-05T22:02:26ZTTPS: T1012, T1005, T1081, T1060,...

Malware Analysis – smokeloader –

October 6, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: SHA1: ANALYSIS DATE: 2022-10-05T21:48:24ZTTPS: T1112, T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – smokeloader – 0b28c768b2688d0b845c6cc8fd1c0c0d

October 6, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 0b28c768b2688d0b845c6cc8fd1c0c0dSHA1: 9c90b3b6675075e7e36199f9ece3fd4d8231b810ANALYSIS DATE: 2022-10-05T21:32:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 0b28c768b2688d0b845c6cc8fd1c0c0d

October 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 0b28c768b2688d0b845c6cc8fd1c0c0dSHA1: 9c90b3b6675075e7e36199f9ece3fd4d8231b810ANALYSIS DATE: 2022-10-05T21:43:30ZTTPS:...

Malware Analysis – djvu – a485514c993967e9b55c4dcff24e9eea

October 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: a485514c993967e9b55c4dcff24e9eeaSHA1: 7c3e4da9fdbef9ef564457e7b715bd78051b85e2ANALYSIS DATE: 2022-10-05T22:05:41ZTTPS: T1060, T1112, T1222, T1005,...

Malware Analysis – smokeloader – fed15979d927202175a67f39a2de5b73

October 6, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: fed15979d927202175a67f39a2de5b73SHA1: 541da8999a0f81a12122344eeafe3b030a09a4abANALYSIS DATE: 2022-10-05T22:32:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 63c01caec4e90ba172267c966f717737

October 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 63c01caec4e90ba172267c966f717737SHA1: cc53db13dedd5b2ccecfd8e726f07af298496173ANALYSIS DATE: 2022-10-05T22:44:44ZTTPS: T1053, T1005, T1081, T1222,...

Malware Analysis – djvu – fed15979d927202175a67f39a2de5b73

October 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:1681, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: fed15979d927202175a67f39a2de5b73SHA1: 541da8999a0f81a12122344eeafe3b030a09a4abANALYSIS DATE:...

Malware Analysis – smokeloader – fbb043bd8741a259448382485bd29dd6

October 5, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: fbb043bd8741a259448382485bd29dd6SHA1: 521882d7a76d6496f800bf5e652e5bd5c07ab1f8ANALYSIS DATE: 2022-10-05T17:02:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – ffcfc1526b2540403e83ffb80c1274a9

October 5, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: ffcfc1526b2540403e83ffb80c1274a9SHA1: edbec265adb2149eae9b433df946ee9e69e5deb8ANALYSIS DATE: 2022-10-05T14:02:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – ffcfc1526b2540403e83ffb80c1274a9

October 5, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, collection, discovery, persistence, ransomware, spyware, stealerMD5: ffcfc1526b2540403e83ffb80c1274a9SHA1: edbec265adb2149eae9b433df946ee9e69e5deb8ANALYSIS DATE: 2022-10-05T14:10:26ZTTPS: T1130, T1112, T1082,...

Malware Analysis – smokeloader – 4db342e59e4063a33e39bf2922746104

October 5, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 4db342e59e4063a33e39bf2922746104SHA1: 0f7cb769a3037816003d7ee2e12cc033bd0a4a6fANALYSIS DATE: 2022-10-05T15:01:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 95503e66b8b02be76b487665cd22127e

October 5, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 95503e66b8b02be76b487665cd22127eSHA1: aa950f5da6313eea5b765e68ba5842316f7c31eaANALYSIS DATE: 2022-10-05T14:24:31ZTTPS: T1060, T1112, T1222, T1053,...

Malware Analysis – djvu – fc47e9571ca6ac5aa22494a8924c5303

October 5, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: fc47e9571ca6ac5aa22494a8924c5303SHA1: 3f38e682284990961cec20317ef33e675dc20d43ANALYSIS DATE: 2022-10-05T14:27:13ZTTPS: T1060, T1112, T1082, T1012,...

Malware Analysis – djvu – c930da72228be1f2154dd5ce35535c0e

October 5, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: c930da72228be1f2154dd5ce35535c0eSHA1: c43fbf1331a8cf89ae74ded04873325bf6160f81ANALYSIS DATE: 2022-10-05T15:16:43ZTTPS: T1012, T1005, T1081, T1222,...

Malware Analysis – avaddon – bc52d18853a6b575d319692ae8f90fd7

October 5, 2022

Score: 10 MALWARE FAMILY: avaddonTAGS:family:avaddon, evasion, ransomware, trojanMD5: bc52d18853a6b575d319692ae8f90fd7SHA1: 882b07d029ba27a64f442fa0e3047775667c2957ANALYSIS DATE: 2022-10-05T15:20:26ZTTPS: T1012, T1120, T1082, T1107, T1490, T1088, T1089, T1112...

Malware Analysis – djvu – 22b1a5fcdece245a65bad95364c883ab

October 5, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 22b1a5fcdece245a65bad95364c883abSHA1: 725f469899973463a0e900ec59076cce338f7ad5ANALYSIS DATE: 2022-10-05T15:13:40ZTTPS: T1082, T1005, T1081, T1012,...

Malware Analysis – djvu – 4db342e59e4063a33e39bf2922746104

October 5, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 4db342e59e4063a33e39bf2922746104SHA1: 0f7cb769a3037816003d7ee2e12cc033bd0a4a6fANALYSIS DATE: 2022-10-05T15:11:46ZTTPS:...

Malware Analysis – djvu – 1bb973121130046bdca6cf5366891821

October 5, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 1bb973121130046bdca6cf5366891821SHA1: cb87eca19a0dc04828c1a4bc6f01894562d97b05ANALYSIS DATE: 2022-10-05T15:39:56ZTTPS:...

Malware Analysis – smokeloader – 1bb973121130046bdca6cf5366891821

October 5, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 1bb973121130046bdca6cf5366891821SHA1: cb87eca19a0dc04828c1a4bc6f01894562d97b05ANALYSIS DATE: 2022-10-05T15:31:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 2aa4c7dbfea83658bc01b5bcd0a58178

October 5, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 2aa4c7dbfea83658bc01b5bcd0a58178SHA1: bb2ba7ea49a4ee5acf64fe4535ef64ca64813b4fANALYSIS DATE: 2022-10-05T15:34:13ZTTPS: T1222, T1012, T1005, T1081,...

Malware Analysis – smokeloader – 1bb973121130046bdca6cf5366891821

October 5, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 1bb973121130046bdca6cf5366891821SHA1: cb87eca19a0dc04828c1a4bc6f01894562d97b05ANALYSIS DATE: 2022-10-05T15:31:59ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis

Malware Analysis – djvu – 47343ccd035c2123139b06a606f676dd

Malware Analysis – djvu – a1a707c217336e4ae154a23f36f3608d

Malware Analysis – djvu – fec683cf03741607291f6c6b8022c98c

Malware Analysis – smokeloader –

Malware Analysis – smokeloader – 0b28c768b2688d0b845c6cc8fd1c0c0d

Malware Analysis – djvu – 0b28c768b2688d0b845c6cc8fd1c0c0d

Malware Analysis – djvu – a485514c993967e9b55c4dcff24e9eea

Malware Analysis – smokeloader – fed15979d927202175a67f39a2de5b73

Malware Analysis – djvu – 63c01caec4e90ba172267c966f717737

Malware Analysis – djvu – fed15979d927202175a67f39a2de5b73

Malware Analysis – smokeloader – fbb043bd8741a259448382485bd29dd6

Malware Analysis – smokeloader – ffcfc1526b2540403e83ffb80c1274a9

Malware Analysis – djvu – ffcfc1526b2540403e83ffb80c1274a9

Malware Analysis – smokeloader – 4db342e59e4063a33e39bf2922746104

Malware Analysis – djvu – 95503e66b8b02be76b487665cd22127e

Malware Analysis – djvu – fc47e9571ca6ac5aa22494a8924c5303

Malware Analysis – djvu – c930da72228be1f2154dd5ce35535c0e

Malware Analysis – avaddon – bc52d18853a6b575d319692ae8f90fd7

Malware Analysis – djvu – 22b1a5fcdece245a65bad95364c883ab

Malware Analysis – djvu – 4db342e59e4063a33e39bf2922746104

Malware Analysis – djvu – 1bb973121130046bdca6cf5366891821

Malware Analysis – smokeloader – 1bb973121130046bdca6cf5366891821

Malware Analysis – djvu – 2aa4c7dbfea83658bc01b5bcd0a58178

Malware Analysis – smokeloader – 1bb973121130046bdca6cf5366891821

Cobalt Strike Beacon Detected – 198[.]181[.]32[.]32:80

Cobalt Strike Beacon Detected – 101[.]126[.]18[.]76:7979

Cobalt Strike Beacon Detected – 1[.]117[.]72[.]208:8080

Cobalt Strike Beacon Detected – 103[.]231[.]74[.]38:8443

Cobalt Strike Beacon Detected – 147[.]182[.]192[.]11:443

You may have missed