Malware Analysis

Malware Analysis – makop – 7a668b5ec9a34afa512e471a20b8f932

March 15, 2023

Score: 10 MALWARE FAMILY: makopTAGS:family:makop, ransomwareMD5: 7a668b5ec9a34afa512e471a20b8f932SHA1: e53653edc907842c577b3c6dda208a60b409ced8ANALYSIS DATE: 2023-03-15T04:14:03ZTTPS: T1059, T1107, T1490, T1082, T1012 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – djvu – f94d991791731fad369fdce4e4d93e5c

March 15, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: f94d991791731fad369fdce4e4d93e5cSHA1: c6de1e985b0dbc936ad4a57367405a783671913dANALYSIS DATE: 2023-03-15T04:15:29ZTTPS: T1060, T1112, T1005, T1081,...

Malware Analysis – amadey – e4ed5e35900f50a92b2c02a76e398df9

March 15, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:pseudomanuscrypt, family:redline, family:smokeloader, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, botnet:pub1, botnet:sprg, backdoor, discovery, infostealer, loader, persistence, ransomware, spyware,...

Malware Analysis – evasion – b69ce219f7cbe3caf5787ced0f1de7a6

March 15, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomware, spyware, stealerMD5: b69ce219f7cbe3caf5787ced0f1de7a6SHA1: 71f5e3e4ebba8b0c2a76314aa6822b371dec0a5cANALYSIS DATE: 2023-03-15T04:24:03ZTTPS: T1490, T1059, T1107, T1082, T1005, T1081, T1012 ScoreMeaningExample10Known...

Malware Analysis – lockbit – 6316bb1e8a5c4fadbbce5a0a7e26498a

March 15, 2023

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, ransomware, spyware, stealerMD5: 6316bb1e8a5c4fadbbce5a0a7e26498aSHA1: 33794f285ed1e41c8dad4ea3dafeccb0115e4dd9ANALYSIS DATE: 2023-03-15T04:18:02ZTTPS: T1005, T1081, T1491, T1112, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – dharma – 6b86ff8665b1ad95feec45d33fd603cf

March 15, 2023

Score: 10 MALWARE FAMILY: dharmaTAGS:family:dharma, persistence, ransomware, spyware, stealerMD5: 6b86ff8665b1ad95feec45d33fd603cfSHA1: 59ca4e72e3103b2c7d0a2eb90c93f72da6cb3b95ANALYSIS DATE: 2023-03-15T04:20:52ZTTPS: T1060, T1112, T1107, T1490, T1005, T1081, T1082...

Malware Analysis – djvu – 5de37d761e18d2226401b394a843b138

March 15, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: 5de37d761e18d2226401b394a843b138SHA1: 3e385f95db53a011ac2b2587c35d64a8ce0808acANALYSIS DATE: 2023-03-15T05:48:22ZTTPS: T1222, T1012, T1082, T1005,...

Malware Analysis – djvu – ddad9e2374144a91ab7397cf59ef7820

March 15, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: ddad9e2374144a91ab7397cf59ef7820SHA1: b745eff98924d9cf8fd226aa0a0e64d0168921faANALYSIS DATE: 2023-03-15T05:44:06ZTTPS: T1060, T1112, T1222, T1005,...

Malware Analysis – persistence – 71852d35ddc0e13d2d830fcf6d185171

March 15, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 71852d35ddc0e13d2d830fcf6d185171SHA1: 1fef641cf4e07924718b9291b80a055016167e9aANALYSIS DATE: 2023-03-15T04:50:37ZTTPS: T1012, T1120, T1082, T1060, T1112 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – amadey – 0335a8ded38025006fb90549e43348cb

March 15, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, botnet:pub1, botnet:sprg, backdoor, discovery, ransomware, trojanMD5: 0335a8ded38025006fb90549e43348cbSHA1: ea861e6dc13aed19f6ffb5a545ec201574c29e1bANALYSIS DATE: 2023-03-15T05:26:27ZTTPS: T1012, T1120, T1082,...

Malware Analysis – persistence – 0ced87772881b63caf95f1d828ba40c5

March 15, 2023

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 0ced87772881b63caf95f1d828ba40c5SHA1: 6e5fca51a018272d1b1003b16dce6ee9e836908cANALYSIS DATE: 2023-03-14T22:17:51ZTTPS: T1107, T1490, T1082, T1005, T1081, T1012, T1060, T1112...

Malware Analysis – amadey – d4d57efdb95f1a0479e5a084a1a306ba

March 15, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:laplas, family:pseudomanuscrypt, family:rhadamanthys, family:smokeloader, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, botnet:pub1, botnet:sprg, backdoor, clipper, discovery, loader, persistence, ransomware,...

Malware Analysis – djvu – c2c302b1bcd3cdac9c68cdb6ce61ff78

March 15, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: c2c302b1bcd3cdac9c68cdb6ce61ff78SHA1: 27695da581da90c8cf3a75431a3dfda8f9ecd2ebANALYSIS DATE: 2023-03-14T22:29:18ZTTPS: T1060, T1112, T1005, T1081,...

Malware Analysis – amadey – d0bff8baa2746fc0ea5123044539d329

March 15, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:pseudomanuscrypt, family:redline, family:rhadamanthys, family:smokeloader, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, botnet:pub1, botnet:sprg, backdoor, discovery, infostealer, loader, persistence, ransomware,...

Malware Analysis – djvu – b4f3db2b75b05734fe2f9fa10db7efcd

March 15, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: b4f3db2b75b05734fe2f9fa10db7efcdSHA1: c87ac965e1b3938ce68485d4cd5324ac0accfbd1ANALYSIS DATE: 2023-03-14T22:24:56ZTTPS: T1060, T1112, T1222, T1005,...

Malware Analysis – smokeloader – f36de975e9bad6eb88ecc77bad774bf4

March 15, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: f36de975e9bad6eb88ecc77bad774bf4SHA1: 389fdbdd4060b7e51c9470943c52935f3d0a809fANALYSIS DATE: 2023-03-14T22:51:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – amadey – d844a54f0d86c0619610b351df687584

March 14, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:laplas, family:redline, family:smokeloader, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, botnet:pub1, botnet:sprg, backdoor, clipper, discovery, infostealer, persistence, ransomware, stealer,...

Malware Analysis – amadey – 2ef801d555a259ea3bf16ab19503fe9a

March 14, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:laplas, family:redline, family:smokeloader, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, botnet:pub1, backdoor, clipper, discovery, infostealer, persistence, ransomware, stealer, trojanMD5:...

Malware Analysis – djvu – 6c1b9d3127434a51d7f4ec7f7426b43f

March 14, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: 6c1b9d3127434a51d7f4ec7f7426b43fSHA1: b23a2aeaae3cabf5372b7b930b5b425c405c02ceANALYSIS DATE: 2023-03-14T15:05:37ZTTPS: T1012, T1222, T1060, T1112,...

Malware Analysis – djvu – 671e14fe8fe1898e7776a5bdb1dd0859

March 14, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: 671e14fe8fe1898e7776a5bdb1dd0859SHA1: 04c5ea53dedd6bcdada4b610526db9deaa17a7a9ANALYSIS DATE: 2023-03-14T15:01:56ZTTPS: T1005, T1081, T1053, T1012,...

Malware Analysis – djvu – 9da6a797e028bba7f21f9426b6069fdb

March 14, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: 9da6a797e028bba7f21f9426b6069fdbSHA1: 45f326d5662222eaf9a8ec79cabec4c93c127febANALYSIS DATE: 2023-03-14T16:14:20ZTTPS: T1082, T1005, T1081, T1222,...

Malware Analysis – djvu – 350ddb993eeaef8bcc59e9f4060171fd

March 14, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: 350ddb993eeaef8bcc59e9f4060171fdSHA1: 7b96c39f47dd6fac9a8ff27a69c8e6b4c17be4c6ANALYSIS DATE: 2023-03-14T17:30:36ZTTPS: T1082, T1012, T1005, T1081,...

Malware Analysis – amadey – 335afcfcfd2f9eba963d8dd9654dfbbf

March 14, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:laplas, family:smokeloader, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, botnet:pub1, backdoor, clipper, discovery, persistence, ransomware, stealer, trojanMD5: 335afcfcfd2f9eba963d8dd9654dfbbfSHA1: d58422baf11b90e93fea3201092cb1b5b80e21f4ANALYSIS...

Malware Analysis – djvu – 36c3dcf2cfcf9ceb5eaa7f252aa440f5

March 14, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: 36c3dcf2cfcf9ceb5eaa7f252aa440f5SHA1: e327c4da990f929b315ea97b6cb2740aa4db8711ANALYSIS DATE: 2023-03-14T16:50:10ZTTPS: T1005, T1081, T1222, T1082,...

Malware Analysis

Malware Analysis – makop – 7a668b5ec9a34afa512e471a20b8f932

Malware Analysis – djvu – f94d991791731fad369fdce4e4d93e5c

Malware Analysis – amadey – e4ed5e35900f50a92b2c02a76e398df9

Malware Analysis – evasion – b69ce219f7cbe3caf5787ced0f1de7a6

Malware Analysis – lockbit – 6316bb1e8a5c4fadbbce5a0a7e26498a

Malware Analysis – dharma – 6b86ff8665b1ad95feec45d33fd603cf

Malware Analysis – djvu – 5de37d761e18d2226401b394a843b138

Malware Analysis – djvu – ddad9e2374144a91ab7397cf59ef7820

Malware Analysis – persistence – 71852d35ddc0e13d2d830fcf6d185171

Malware Analysis – amadey – 0335a8ded38025006fb90549e43348cb

Malware Analysis – persistence – 0ced87772881b63caf95f1d828ba40c5

Malware Analysis – amadey – d4d57efdb95f1a0479e5a084a1a306ba

Malware Analysis – djvu – c2c302b1bcd3cdac9c68cdb6ce61ff78

Malware Analysis – amadey – d0bff8baa2746fc0ea5123044539d329

Malware Analysis – djvu – b4f3db2b75b05734fe2f9fa10db7efcd

Malware Analysis – smokeloader – f36de975e9bad6eb88ecc77bad774bf4

Malware Analysis – amadey – d844a54f0d86c0619610b351df687584

Malware Analysis – amadey – 2ef801d555a259ea3bf16ab19503fe9a

Malware Analysis – djvu – 6c1b9d3127434a51d7f4ec7f7426b43f

Malware Analysis – djvu – 671e14fe8fe1898e7776a5bdb1dd0859

Malware Analysis – djvu – 9da6a797e028bba7f21f9426b6069fdb

Malware Analysis – djvu – 350ddb993eeaef8bcc59e9f4060171fd

Malware Analysis – amadey – 335afcfcfd2f9eba963d8dd9654dfbbf

Malware Analysis – djvu – 36c3dcf2cfcf9ceb5eaa7f252aa440f5

[MORPHEUS] – Ransomware Victim: Pus Gmbh

[MORPHEUS] – Ransomware Victim: Arrotex Pharmaceuticals

HackerOne Bug Bounty Disclosure: bypass-email-verification-on-add-email-monitoring-dotxml

[AKIRA] – Ransomware Victim: AAA Environmental

[AKIRA] – Ransomware Victim: Drywall Partitions

You may have missed