Malware Analysis

Malware Analysis – djvu – 6aff05293a29857132fb8d26079ccf10

March 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 6aff05293a29857132fb8d26079ccf10SHA1: 3c9e897e809a5cf7791c4c4466e086b4de6151e4ANALYSIS DATE: 2023-03-13T05:42:28ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – evasion – 2f82436e491b17c67a3ea0419f0b61de

March 13, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 2f82436e491b17c67a3ea0419f0b61deSHA1: 8e9e1a62762255f991df8d39d19f556d47debfeeANALYSIS DATE: 2023-03-13T05:55:10ZTTPS: T1082, T1012, T1107, T1490, T1112, T1120, T1031, T1562, T1489,...

Malware Analysis – evasion – efcfd5046a8d1a08dbcd6cc9e7fc42ef

March 13, 2023

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: efcfd5046a8d1a08dbcd6cc9e7fc42efSHA1: bc70fc4a300d68480cd04243524deede061b8668ANALYSIS DATE: 2023-03-13T05:37:41ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – 0bb361c2e737832052eaa517cd1e8525

March 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 0bb361c2e737832052eaa517cd1e8525SHA1: ff97a3b016e1fe5c62da7dbf028ac10e961c3c23ANALYSIS DATE: 2023-03-13T05:52:18ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – djvu – cecc648eb02909380c50591b77b7d3f5

March 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: cecc648eb02909380c50591b77b7d3f5SHA1: 7d28ca6aeb9240a7dfe727eee63a339e32f1dccaANALYSIS DATE: 2023-03-12T21:07:03ZTTPS: T1082, T1012, T1222, T1053,...

Malware Analysis – djvu – b130799726dabaaf72ac84f7f2d63d12

March 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: b130799726dabaaf72ac84f7f2d63d12SHA1: ed17fc6d8e4f3c135944d87af114873b94cf290aANALYSIS DATE: 2023-03-12T21:35:51ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – amadey – b2291621bf9facfa5e751ef3a25e661b

March 13, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:laplas, family:smokeloader, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, botnet:pub1, botnet:sprg, backdoor, clipper, discovery, persistence, ransomware, stealer, trojanMD5: b2291621bf9facfa5e751ef3a25e661bSHA1:...

Malware Analysis – djvu – 3caef158bc8153dabeb29bd182be014f

March 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 3caef158bc8153dabeb29bd182be014fSHA1: 9d59f28b84f6128a058076350692f51015792caeANALYSIS DATE: 2023-03-12T21:21:59ZTTPS: T1012, T1082, T1053, T1060,...

Malware Analysis – persistence – 51af19d91789adb15a320b1cd957de76

March 13, 2023

Score: 6 MALWARE FAMILY: persistenceTAGS:persistenceMD5: 51af19d91789adb15a320b1cd957de76SHA1: 38302244a37f533bbbe6a56b11927db36320a487ANALYSIS DATE: 2023-03-12T21:33:02ZTTPS: T1012, T1060, T1112, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – 7e92a06d32c57200219c0cc9d97a861d

March 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 7e92a06d32c57200219c0cc9d97a861dSHA1: da21b3e754ff8ca866888f25a264041e687c5193ANALYSIS DATE: 2023-03-12T22:03:19ZTTPS: T1060, T1112, T1222, T1082,...

Malware Analysis – djvu – 5cf63849b83b927ac72280efe35b181c

March 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 5cf63849b83b927ac72280efe35b181cSHA1: 6d4744697042fbe10bd0b82b767aac57673fc63eANALYSIS DATE: 2023-03-12T22:02:41ZTTPS: T1222, T1082, T1005, T1081,...

Malware Analysis – amadey – 1d6dab0fd592a665fb603479b4c06322

March 13, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:laplas, family:smokeloader, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, botnet:pub1, botnet:sprg, backdoor, clipper, discovery, evasion, ransomware, stealer, trojanMD5: 1d6dab0fd592a665fb603479b4c06322SHA1:...

Malware Analysis – evasion – 6c19c510b07618fcf0a30d18f7dcc64a

March 13, 2023

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 6c19c510b07618fcf0a30d18f7dcc64aSHA1: 1a615d575020cf6c7ea820ea638261c1af798fdbANALYSIS DATE: 2023-03-12T21:40:30ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – amadey – e8588889a5266696d152aefbe1003fb0

March 13, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:laplas, family:smokeloader, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, botnet:pub1, botnet:sprg, backdoor, clipper, discovery, evasion, ransomware, stealer, trojanMD5: e8588889a5266696d152aefbe1003fb0SHA1:...

Malware Analysis – djvu – 7cec9c11af7609a3d357889cb0fc3b9f

March 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 7cec9c11af7609a3d357889cb0fc3b9fSHA1: 6ceea7dc910dd061970fc8b7fa3106cb8739fcf7ANALYSIS DATE: 2023-03-12T23:31:28ZTTPS: T1005, T1081, T1082, T1012,...

Malware Analysis – djvu – 1ff718ea960ea5a8c5b30eabdcc88491

March 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 1ff718ea960ea5a8c5b30eabdcc88491SHA1: cfa7b5fb6c78edad28fd2cccc80b18e127201274ANALYSIS DATE: 2023-03-12T23:18:50ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – ransomware – 7b760f60fff500d3c7c408a8bc158e0e

March 13, 2023

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 7b760f60fff500d3c7c408a8bc158e0eSHA1: a4b41efc63460f980130b67eb33c0bd061206744ANALYSIS DATE: 2023-03-12T23:15:46ZTTPS: T1082, T1491, T1112, T1012, T1120 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – amadey – fd31ae787766e344e34a1dd85c3fb53f

March 12, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:laplas, family:pseudomanuscrypt, family:smokeloader, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, botnet:pub1, botnet:sprg, backdoor, clipper, discovery, loader, ransomware, stealer, trojanMD5:...

Malware Analysis – djvu – 3244be7d8e87184099e01ace7efbcd81

March 12, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 3244be7d8e87184099e01ace7efbcd81SHA1: 23dcea7a3d8b526087b3362fdd5211ab3e0d4836ANALYSIS DATE: 2023-03-12T15:16:05ZTTPS: T1130, T1112, T1222, T1005,...

Malware Analysis – djvu – 6fe770140bef2979d73853565fe9774b

March 12, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 6fe770140bef2979d73853565fe9774bSHA1: 23cc2ecd5d4f7fbd0f69efc956be47c4b8d17045ANALYSIS DATE: 2023-03-12T16:32:09ZTTPS: T1222, T1082, T1053, T1012,...

Malware Analysis – evasion – 31341194c4c92bc7dc0d15a21264d8d5

March 12, 2023

Score: 6 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 31341194c4c92bc7dc0d15a21264d8d5SHA1: 6b0b3ce270ea594165056d7b648d9aa8623d3678ANALYSIS DATE: 2023-03-12T17:15:12ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – a6687144b52fdbda555d37114f29daa5

March 12, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: a6687144b52fdbda555d37114f29daa5SHA1: b20f118974c0e194971c4430ec6aded92e74f180ANALYSIS DATE: 2023-03-12T15:19:04ZTTPS: T1130, T1112, T1222, T1053,...

Malware Analysis – amadey – ef4415b37586fbf3c2236705279604e4

March 12, 2023

Malware Analysis – smokeloader – a118a1e07e15162e77cce97c0f921e6a

March 12, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: a118a1e07e15162e77cce97c0f921e6aSHA1: 9c622225f69b6de41c8fb1868b630d7f60ae2550ANALYSIS DATE: 2023-03-12T17:38:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis

Malware Analysis – djvu – 6aff05293a29857132fb8d26079ccf10

Malware Analysis – evasion – 2f82436e491b17c67a3ea0419f0b61de

Malware Analysis – evasion – efcfd5046a8d1a08dbcd6cc9e7fc42ef

Malware Analysis – djvu – 0bb361c2e737832052eaa517cd1e8525

Malware Analysis – djvu – cecc648eb02909380c50591b77b7d3f5

Malware Analysis – djvu – b130799726dabaaf72ac84f7f2d63d12

Malware Analysis – amadey – b2291621bf9facfa5e751ef3a25e661b

Malware Analysis – djvu – 3caef158bc8153dabeb29bd182be014f

Malware Analysis – persistence – 51af19d91789adb15a320b1cd957de76

Malware Analysis – djvu – 7e92a06d32c57200219c0cc9d97a861d

Malware Analysis – djvu – 5cf63849b83b927ac72280efe35b181c

Malware Analysis – amadey – 1d6dab0fd592a665fb603479b4c06322

Malware Analysis – evasion – 6c19c510b07618fcf0a30d18f7dcc64a

Malware Analysis – amadey – e8588889a5266696d152aefbe1003fb0

Malware Analysis – djvu – 7cec9c11af7609a3d357889cb0fc3b9f

Malware Analysis – djvu – 1ff718ea960ea5a8c5b30eabdcc88491

Malware Analysis – ransomware – 7b760f60fff500d3c7c408a8bc158e0e

Malware Analysis – amadey – fd31ae787766e344e34a1dd85c3fb53f

Malware Analysis – djvu – 3244be7d8e87184099e01ace7efbcd81

Malware Analysis – djvu – 6fe770140bef2979d73853565fe9774b

Malware Analysis – evasion – 31341194c4c92bc7dc0d15a21264d8d5

Malware Analysis – djvu – a6687144b52fdbda555d37114f29daa5

Malware Analysis – amadey – ef4415b37586fbf3c2236705279604e4

Malware Analysis – smokeloader – a118a1e07e15162e77cce97c0f921e6a

Ivanti Products Multiple Vulnerabilities

CVE Alert: CVE-2025-0194

CVE Alert: CVE-2024-13189

CVE Alert: CVE-2024-13190

CVE Alert: CVE-2024-12431

You may have missed