Malware Analysis

Malware Analysis – – ff85205dd23b73ced624661171ef5c20

October 5, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: ff85205dd23b73ced624661171ef5c20SHA1: a72dad57cdcb556d7d8fb044052132a2e3d6ff52ANALYSIS DATE: 2022-10-05T15:50:01ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 9a2fc7060a890ac5dae857ba330775ec

October 5, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 9a2fc7060a890ac5dae857ba330775ecSHA1: 6175729b50b4007f470ae5817612679ae21abd75ANALYSIS DATE: 2022-10-05T15:54:33ZTTPS: T1012, T1082, T1060, T1112,...

Malware Analysis – djvu – ba1706454ac5e3a8541f776d4ca961b0

October 5, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: ba1706454ac5e3a8541f776d4ca961b0SHA1: 1eb730050e4e7981778f05f363ace28262d2f57aANALYSIS DATE: 2022-10-05T15:42:29ZTTPS: T1005, T1081, T1222, T1012,...

Malware Analysis – ransomware – fed98c2820ca40c228ef080ddf68e994

October 5, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: fed98c2820ca40c228ef080ddf68e994SHA1: c61dd67fa85a6e3e1cf48512263a7097d0eac80eANALYSIS DATE: 2022-10-05T15:40:00ZTTPS: T1082, T1005, T1081, T1491, T1112 ScoreMeaningExample10Known badA malware family...

Malware Analysis – djvu – f7d6001c5cf2e09a7ac2682ee18739d0

October 5, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: f7d6001c5cf2e09a7ac2682ee18739d0SHA1: 2b2b5bc208d0b00d72671722703a1491c43a74a0ANALYSIS DATE: 2022-10-05T16:03:42ZTTPS: T1060, T1112, T1082, T1053,...

Malware Analysis – smokeloader – bff503746b3152016b17bb3062ab9a8a

October 5, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: bff503746b3152016b17bb3062ab9a8aSHA1: f15e9b16d52548a03361de7320b2c42f085ae332ANALYSIS DATE: 2022-10-05T16:02:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – bff503746b3152016b17bb3062ab9a8a

October 5, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: bff503746b3152016b17bb3062ab9a8aSHA1: f15e9b16d52548a03361de7320b2c42f085ae332ANALYSIS DATE: 2022-10-05T16:03:39ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – bff503746b3152016b17bb3062ab9a8a

October 5, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: bff503746b3152016b17bb3062ab9a8aSHA1: f15e9b16d52548a03361de7320b2c42f085ae332ANALYSIS DATE: 2022-10-05T16:17:47ZTTPS:...

Malware Analysis – persistence – 58aea2aac89947773dfae8e3859e20b0

October 5, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 58aea2aac89947773dfae8e3859e20b0SHA1: be17c41c65703f9475e36dff55fd3de220e395f3ANALYSIS DATE: 2022-10-05T11:39:54ZTTPS: T1107, T1490, T1012, T1082, T1120, T1005, T1081, T1112,...

Malware Analysis – djvu – 18d87ffe360cfd92cb65a2992e98c482

October 5, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, pyinstaller, ransomware, spyware, stealer, trojanMD5: 18d87ffe360cfd92cb65a2992e98c482SHA1: b6047b777d250cbe8161eb5be1322168a0a9f3c9ANALYSIS DATE:...

Malware Analysis – djvu – afaea3bf154fd46c55b33c49f25cd7fa

October 5, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: afaea3bf154fd46c55b33c49f25cd7faSHA1: 472143e79672883bbe0c26e5558ae43919b4f1fcANALYSIS DATE: 2022-10-05T12:22:46ZTTPS: T1012, T1082, T1053, T1222,...

Malware Analysis – djvu – c401b79c9fc5f2c5e6ecda7d146a94ff

October 5, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: c401b79c9fc5f2c5e6ecda7d146a94ffSHA1: 84667eea5e485f9155a96dcc85477cac1f7eb584ANALYSIS DATE: 2022-10-05T12:26:50ZTTPS: T1053, T1012, T1005, T1081,...

Malware Analysis – smokeloader – 18d87ffe360cfd92cb65a2992e98c482

October 5, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 18d87ffe360cfd92cb65a2992e98c482SHA1: b6047b777d250cbe8161eb5be1322168a0a9f3c9ANALYSIS DATE: 2022-10-05T12:31:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 6e7d0004abf6a9b3c9431da6844d231f

October 5, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 6e7d0004abf6a9b3c9431da6844d231fSHA1: 9716805336d0a5e9d5d5dfd5f833624a14a098fcANALYSIS DATE: 2022-10-05T13:03:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 6e7d0004abf6a9b3c9431da6844d231f

October 5, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 6e7d0004abf6a9b3c9431da6844d231fSHA1: 9716805336d0a5e9d5d5dfd5f833624a14a098fcANALYSIS DATE: 2022-10-05T13:03:11ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 5dfcfe9e48bb38f6044bcd3e26fe7a6c

October 5, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 5dfcfe9e48bb38f6044bcd3e26fe7a6cSHA1: 038f76909d23ed04ce2eb19209e537e15f5c434dANALYSIS DATE: 2022-10-05T13:05:57ZTTPS: T1082, T1005, T1081, T1012,...

Malware Analysis – djvu – 6e7d0004abf6a9b3c9431da6844d231f

October 5, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, pyinstaller, ransomware, spyware, stealer, trojanMD5: 6e7d0004abf6a9b3c9431da6844d231fSHA1: 9716805336d0a5e9d5d5dfd5f833624a14a098fcANALYSIS DATE:...

Malware Analysis – chaos – 2f0c08446e6f6dd75aceaf67ebad2f77

October 5, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, persistence, ransomware, spyware, stealerMD5: 2f0c08446e6f6dd75aceaf67ebad2f77SHA1: a58dd9be0907debb8f39cb357e458a93612ac79cANALYSIS DATE: 2022-10-05T13:22:01ZTTPS: T1490, T1059, T1107, T1060, T1112, T1082,...

Malware Analysis – ransomware – b9633cbd2d5d981610b3f99cfa6a3f51

October 5, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: b9633cbd2d5d981610b3f99cfa6a3f51SHA1: 64ca6877c0ad115191d950b11df709854dbb6807ANALYSIS DATE: 2022-10-05T13:22:04ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – –

October 5, 2022

Score: 8 MALWARE FAMILY: TAGS:MD5: SHA1: ANALYSIS DATE: 2022-10-05T13:12:54ZTTPS: T1012, T1082, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – chaos – 2f0c08446e6f6dd75aceaf67ebad2f77

October 5, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, persistence, ransomware, spyware, stealerMD5: 2f0c08446e6f6dd75aceaf67ebad2f77SHA1: a58dd9be0907debb8f39cb357e458a93612ac79cANALYSIS DATE: 2022-10-05T13:22:03ZTTPS: T1490, T1059, T1107, T1082, T1060, T1112,...

Malware Analysis – smokeloader – ffcfc1526b2540403e83ffb80c1274a9

October 5, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: ffcfc1526b2540403e83ffb80c1274a9SHA1: edbec265adb2149eae9b433df946ee9e69e5deb8ANALYSIS DATE: 2022-10-05T14:02:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – fc47e9571ca6ac5aa22494a8924c5303

October 5, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: fc47e9571ca6ac5aa22494a8924c5303SHA1: 3f38e682284990961cec20317ef33e675dc20d43ANALYSIS DATE: 2022-10-05T14:27:13ZTTPS: T1060, T1112, T1082, T1012,...

Malware Analysis – djvu – ffcfc1526b2540403e83ffb80c1274a9

October 5, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, collection, discovery, persistence, ransomware, spyware, stealerMD5: ffcfc1526b2540403e83ffb80c1274a9SHA1: edbec265adb2149eae9b433df946ee9e69e5deb8ANALYSIS DATE: 2022-10-05T14:10:26ZTTPS: T1130, T1112, T1082,...

Malware Analysis

Malware Analysis – – ff85205dd23b73ced624661171ef5c20

Malware Analysis – djvu – 9a2fc7060a890ac5dae857ba330775ec

Malware Analysis – djvu – ba1706454ac5e3a8541f776d4ca961b0

Malware Analysis – ransomware – fed98c2820ca40c228ef080ddf68e994

Malware Analysis – djvu – f7d6001c5cf2e09a7ac2682ee18739d0

Malware Analysis – smokeloader – bff503746b3152016b17bb3062ab9a8a

Malware Analysis – smokeloader – bff503746b3152016b17bb3062ab9a8a

Malware Analysis – djvu – bff503746b3152016b17bb3062ab9a8a

Malware Analysis – persistence – 58aea2aac89947773dfae8e3859e20b0

Malware Analysis – djvu – 18d87ffe360cfd92cb65a2992e98c482

Malware Analysis – djvu – afaea3bf154fd46c55b33c49f25cd7fa

Malware Analysis – djvu – c401b79c9fc5f2c5e6ecda7d146a94ff

Malware Analysis – smokeloader – 18d87ffe360cfd92cb65a2992e98c482

Malware Analysis – smokeloader – 6e7d0004abf6a9b3c9431da6844d231f

Malware Analysis – smokeloader – 6e7d0004abf6a9b3c9431da6844d231f

Malware Analysis – djvu – 5dfcfe9e48bb38f6044bcd3e26fe7a6c

Malware Analysis – djvu – 6e7d0004abf6a9b3c9431da6844d231f

Malware Analysis – chaos – 2f0c08446e6f6dd75aceaf67ebad2f77

Malware Analysis – ransomware – b9633cbd2d5d981610b3f99cfa6a3f51

Malware Analysis – –

Malware Analysis – chaos – 2f0c08446e6f6dd75aceaf67ebad2f77

Malware Analysis – smokeloader – ffcfc1526b2540403e83ffb80c1274a9

Malware Analysis – djvu – fc47e9571ca6ac5aa22494a8924c5303

Malware Analysis – djvu – ffcfc1526b2540403e83ffb80c1274a9

Cobalt Strike Beacon Detected – 198[.]181[.]32[.]32:80

Cobalt Strike Beacon Detected – 101[.]126[.]18[.]76:7979

Cobalt Strike Beacon Detected – 1[.]117[.]72[.]208:8080

Cobalt Strike Beacon Detected – 103[.]231[.]74[.]38:8443

Cobalt Strike Beacon Detected – 147[.]182[.]192[.]11:443

You may have missed