Malware Analysis

Malware Analysis – chaos – ae7795f6305ad315589ff4846ad1ef14

March 16, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, ransomwareMD5: ae7795f6305ad315589ff4846ad1ef14SHA1: 71f4143d89ce0dcb5729e2a8b2cd54bc9b423e65ANALYSIS DATE: 2023-03-16T04:06:04ZTTPS: T1490, T1059, T1107, T1082, T1012 ScoreMeaningExample10Known badA malware family...

Malware Analysis – discovery – d28e88e6e9ad654f81909e605f3398c1

March 16, 2023

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, persistence, spyware, stealerMD5: d28e88e6e9ad654f81909e605f3398c1SHA1: 84726882c606eec6b7ed7d0ba1d9acdd13390e45ANALYSIS DATE: 2023-03-16T04:21:02ZTTPS: T1060, T1112, T1005, T1081, T1222 ScoreMeaningExample10Known badA...

Malware Analysis – chaos – 8f033c07f57f8ce2e62e3a327f423d55

March 16, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, persistence, ransomware, spyware, stealerMD5: 8f033c07f57f8ce2e62e3a327f423d55SHA1: 57ac411652d7b1d9accaa8a1af5f4b6a45ef7448ANALYSIS DATE: 2023-03-16T04:07:10ZTTPS: T1490, T1059, T1107, T1112, T1082, T1012,...

Malware Analysis – djvu – 93b3449417b91a339c37b9647d884db6

March 16, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: 93b3449417b91a339c37b9647d884db6SHA1: c7a40ac43987a5d519e95b4fc3b1acb6eae8ac05ANALYSIS DATE: 2023-03-16T04:38:16ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – evasion – 6c782f5f5a64c0b2d9b1db4c774e416e

March 16, 2023

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 6c782f5f5a64c0b2d9b1db4c774e416eSHA1: 536d5cf87af69245644efd7c06a06616eee3ff7bANALYSIS DATE: 2023-03-16T05:16:45ZTTPS: T1490, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – amadey – 6aefc29eb3e1f666cba3c09647d9c187

March 16, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:laplas, family:smokeloader, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, botnet:pub1, botnet:sprg, backdoor, clipper, discovery, persistence, ransomware, spyware, stealer, trojanMD5:...

Malware Analysis – djvu – 55d0959d9de905e03b833891efa6cddf

March 16, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: 55d0959d9de905e03b833891efa6cddfSHA1: 07511e4f5ac903ec1a43ded40d3bd9ac0dc758a0ANALYSIS DATE: 2023-03-16T05:14:03ZTTPS: T1005, T1081, T1060, T1112,...

Malware Analysis – ransomware – d1e8c1498d56e7da0e8fc0671b5ab2b5

March 16, 2023

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: d1e8c1498d56e7da0e8fc0671b5ab2b5SHA1: 8276facc6ef40df6385dd3dd49e41848228c7735ANALYSIS DATE: 2023-03-15T21:04:23ZTTPS: T1012, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – 3cb60ddc5d349a8ffbda640f3c201884

March 16, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: 3cb60ddc5d349a8ffbda640f3c201884SHA1: 87a887303c616bd350e8ed890941240d5faa5610ANALYSIS DATE: 2023-03-15T21:36:18ZTTPS: T1222, T1012, T1082, T1005,...

Malware Analysis – eternity – 5f4b0475c50266443e5d50ed496912ef

March 16, 2023

Score: 10 MALWARE FAMILY: eternityTAGS:family:eternity, evasion, ransomwareMD5: 5f4b0475c50266443e5d50ed496912efSHA1: 6e97a7131a9285e3a182e739017e5bde4548f6ddANALYSIS DATE: 2023-03-15T21:53:11ZTTPS: T1053, T1107, T1490, T1082, T1018 ScoreMeaningExample10Known badA malware family...

Malware Analysis – amadey – 7f707db90b2c23dad5bd0ee1951ffc05

March 16, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:rhadamanthys, family:smokeloader, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, botnet:pub1, botnet:sprg, backdoor, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 7f707db90b2c23dad5bd0ee1951ffc05SHA1:...

Malware Analysis – djvu – aaa532c24ef3e42b4fad1997a49a13fb

March 16, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: aaa532c24ef3e42b4fad1997a49a13fbSHA1: dec412fc077ac69b21fe869ae37ec8761ad52c5bANALYSIS DATE: 2023-03-15T21:25:50ZTTPS: T1222, T1082, T1053, T1012,...

Malware Analysis – djvu – c2dbc2aee5f07914fac16075c857bca9

March 16, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: c2dbc2aee5f07914fac16075c857bca9SHA1: bf011ffe863fd1ed73cad62fb5002a97bceaa090ANALYSIS DATE: 2023-03-15T22:50:29ZTTPS: T1060, T1112, T1222, T1082,...

Malware Analysis – xworm – dcf97bdb41eb351d2fc4ea91f624423d

March 16, 2023

Score: 10 MALWARE FAMILY: xwormTAGS:family:xworm, evasion, persistence, ransomware, rat, trojanMD5: dcf97bdb41eb351d2fc4ea91f624423dSHA1: d3715326aebfa2e71c1e7a56567fabfafb4728faANALYSIS DATE: 2023-03-15T22:30:53ZTTPS: T1491, T1112, T1053, T1012, T1082, T1088,...

Malware Analysis – amadey – b59b3a9cc2547eef5e6e51e0d7e5aa33

March 16, 2023

Malware Analysis – djvu – a176a3f60922d66d161c83d726602fbf

March 16, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: a176a3f60922d66d161c83d726602fbfSHA1: ece19fee8629873a2722407a33f1d2803e21efceANALYSIS DATE: 2023-03-15T23:00:09ZTTPS: T1060, T1112, T1082, T1005,...

Malware Analysis – lockbit – 85ca694de55c02d285e997e7671c9e43

March 15, 2023

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, ransomwareMD5: 85ca694de55c02d285e997e7671c9e43SHA1: e4ecabeb1f0df4ae69a9408d6522f039fd3a4968ANALYSIS DATE: 2023-03-15T15:56:06ZTTPS: T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – – bcc2e38c80b962e6990f7f0538ce4cc4

March 15, 2023

Score: 3 MALWARE FAMILY: TAGS:MD5: bcc2e38c80b962e6990f7f0538ce4cc4SHA1: bfa80f1fbb9407e6e284ae68502c889d66c4b582ANALYSIS DATE: 2023-03-15T15:32:44ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – amadey – 23bd56688d0f348d255bf35fc1b4ccb0

March 15, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:pseudomanuscrypt, family:redline, family:smokeloader, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, botnet:pub1, botnet:sprg, backdoor, discovery, infostealer, loader, persistence, ransomware, spyware,...

Malware Analysis – djvu – 60d9ef4f0519476454fe63f02b2045a5

March 15, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: 60d9ef4f0519476454fe63f02b2045a5SHA1: 2b2beae33470fb86f91795b1b36553e9e5c6707fANALYSIS DATE: 2023-03-15T16:26:47ZTTPS: T1005, T1081, T1222, T1053,...

Malware Analysis – djvu – e5d35ba593a099d53257e82be0167a31

March 15, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: e5d35ba593a099d53257e82be0167a31SHA1: 87608ccb984d8873c5b10c339a58664aff0d8ba3ANALYSIS DATE: 2023-03-15T16:48:14ZTTPS: T1222, T1060, T1112, T1005,...

Malware Analysis – – b8b80a59bc3d4e11730cbabf7311fd60

March 15, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: b8b80a59bc3d4e11730cbabf7311fd60SHA1: 821c8b6a541e9f9d1dd7ab1c4c0906fd418a86ffANALYSIS DATE: 2023-03-15T15:56:27ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – b01a1b1c19436e4c9c7ba4c8050cf01d

March 15, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: b01a1b1c19436e4c9c7ba4c8050cf01dSHA1: a8ea730e1acc73846b478447333d915efa5eb974ANALYSIS DATE: 2023-03-15T09:10:59ZTTPS: T1005, T1081, T1012, T1053,...

Malware Analysis – discovery – daad86ad18d95c4439cbc00e1c717128

March 15, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: daad86ad18d95c4439cbc00e1c717128SHA1: 089dccbb5bc3ab13481ca73803ba4af8a45bae7bANALYSIS DATE: 2023-03-15T09:09:23ZTTPS: T1012, T1060, T1082, T1112, T1042 ScoreMeaningExample10Known badA malware family...

Malware Analysis

Malware Analysis – chaos – ae7795f6305ad315589ff4846ad1ef14

Malware Analysis – discovery – d28e88e6e9ad654f81909e605f3398c1

Malware Analysis – chaos – 8f033c07f57f8ce2e62e3a327f423d55

Malware Analysis – djvu – 93b3449417b91a339c37b9647d884db6

Malware Analysis – evasion – 6c782f5f5a64c0b2d9b1db4c774e416e

Malware Analysis – amadey – 6aefc29eb3e1f666cba3c09647d9c187

Malware Analysis – djvu – 55d0959d9de905e03b833891efa6cddf

Malware Analysis – ransomware – d1e8c1498d56e7da0e8fc0671b5ab2b5

Malware Analysis – djvu – 3cb60ddc5d349a8ffbda640f3c201884

Malware Analysis – eternity – 5f4b0475c50266443e5d50ed496912ef

Malware Analysis – amadey – 7f707db90b2c23dad5bd0ee1951ffc05

Malware Analysis – djvu – aaa532c24ef3e42b4fad1997a49a13fb

Malware Analysis – djvu – c2dbc2aee5f07914fac16075c857bca9

Malware Analysis – xworm – dcf97bdb41eb351d2fc4ea91f624423d

Malware Analysis – amadey – b59b3a9cc2547eef5e6e51e0d7e5aa33

Malware Analysis – djvu – a176a3f60922d66d161c83d726602fbf

Malware Analysis – lockbit – 85ca694de55c02d285e997e7671c9e43

Malware Analysis – – bcc2e38c80b962e6990f7f0538ce4cc4

Malware Analysis – amadey – 23bd56688d0f348d255bf35fc1b4ccb0

Malware Analysis – djvu – 60d9ef4f0519476454fe63f02b2045a5

Malware Analysis – djvu – e5d35ba593a099d53257e82be0167a31

Malware Analysis – – b8b80a59bc3d4e11730cbabf7311fd60

Malware Analysis – djvu – b01a1b1c19436e4c9c7ba4c8050cf01d

Malware Analysis – discovery – daad86ad18d95c4439cbc00e1c717128

HackerOne Bug Bounty Disclosure: bypass-email-verification-on-add-email-monitoring-dotxml

[AKIRA] – Ransomware Victim: AAA Environmental

[AKIRA] – Ransomware Victim: Drywall Partitions

[AKIRA] – Ransomware Victim: Drivestream

CVE Alert: CVE-2024-31913

You may have missed