Malware Analysis

Malware Analysis – medusalocker – 19ddac9782acd73f66c5fe040e86ddee

March 11, 2023

Score: 10 MALWARE FAMILY: medusalockerTAGS:family:medusalocker, evasion, ransomware, spyware, stealer, trojanMD5: 19ddac9782acd73f66c5fe040e86ddeeSHA1: 24ceba1e2951cde8e41939da21c6ba3030fc531dANALYSIS DATE: 2023-03-11T04:46:04ZTTPS: T1107, T1490, T1082, T1088, T1089, T1112,...

Malware Analysis – dharma – 0880430c257ce49d7490099d2a8dd01a

March 11, 2023

Score: 10 MALWARE FAMILY: dharmaTAGS:family:dharma, persistence, ransomware, spyware, stealerMD5: 0880430c257ce49d7490099d2a8dd01aSHA1: 2720d2d386027b0036bfcf9f340e325cd348e0d0ANALYSIS DATE: 2023-03-11T04:58:03ZTTPS: T1060, T1112, T1107, T1490, T1005, T1081, T1082...

Malware Analysis – djvu – 7eb2367fe8b1c3d81e4a3698ca504201

March 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 7eb2367fe8b1c3d81e4a3698ca504201SHA1: 6435fc8cab12caa63c6f56c7c6c0f36f736af4dbANALYSIS DATE: 2023-03-11T05:16:57ZTTPS: T1082, T1053, T1005, T1081,...

Malware Analysis – djvu – fa3ffaf5e547407347b758edb0b959aa

March 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: fa3ffaf5e547407347b758edb0b959aaSHA1: 9eee56d3ac31365d806a7ecc45f6249dccfd2bd6ANALYSIS DATE: 2023-03-11T04:52:09ZTTPS: T1222, T1060, T1112, T1082,...

Malware Analysis – amadey – a01c6ec9fdd07310f4f04c2ecc1d2813

March 11, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:laplas, family:pseudomanuscrypt, family:smokeloader, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, botnet:pub1, botnet:sprg, backdoor, clipper, discovery, loader, persistence, ransomware, stealer,...

Malware Analysis – djvu – a67c30efdd7940f034852302dcbf493d

March 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: a67c30efdd7940f034852302dcbf493dSHA1: 118d9b5bfa530f65dec204bc075db6ec15c7cb43ANALYSIS DATE: 2023-03-10T22:10:12ZTTPS: T1012, T1082, T1053, T1060,...

Malware Analysis – djvu – 74660444c99b457537291dcac33f5307

March 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 74660444c99b457537291dcac33f5307SHA1: 8bcc8d0c6a57c51fc9c37cfc7c3a6b1bed7ba087ANALYSIS DATE: 2023-03-10T21:58:43ZTTPS: T1060, T1112, T1222, T1053,...

Malware Analysis – amadey – 5bf3877b8fd815085586d2de55398d00

March 11, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:pseudomanuscrypt, family:smokeloader, family:vidar, botnet:pub1, botnet:sprg, backdoor, discovery, loader, ransomware, stealer, trojanMD5: 5bf3877b8fd815085586d2de55398d00SHA1: c542cf69aee77009d8a4727e423a88900726979fANALYSIS DATE:...

Malware Analysis – amadey – deaf892bd1b4cbf1ff3a7f5449f4c4ea

March 11, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:pseudomanuscrypt, family:smokeloader, family:vidar, botnet:pub1, botnet:sprg, backdoor, discovery, loader, ransomware, stealer, trojanMD5: deaf892bd1b4cbf1ff3a7f5449f4c4eaSHA1: 73c21e3539ca408e21fc1e643e1a922d628825c7ANALYSIS DATE:...

Malware Analysis – djvu – cd584418ce391a1196c4d4363d974705

March 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: cd584418ce391a1196c4d4363d974705SHA1: 2a5aa89caf43a27d66e9f66395527f3c6072374fANALYSIS DATE: 2023-03-10T23:22:24ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – blackcat – 8f2b7a45a93ee6f4806918aaa99c1b1b

March 11, 2023

Score: 10 MALWARE FAMILY: blackcatTAGS:family:blackcat, ransomwareMD5: 8f2b7a45a93ee6f4806918aaa99c1b1bSHA1: 3a71e11a742a1ba1b7c088ce1377bd9eeb0f63f0ANALYSIS DATE: 2023-03-10T23:29:48ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – 6d825cec46935a1b76c26bcb752053c9

March 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 6d825cec46935a1b76c26bcb752053c9SHA1: 6740dff3a6b49ac67778753ce6a7e452a1445f98ANALYSIS DATE: 2023-03-10T23:47:09ZTTPS: T1012, T1082, T1053, T1005,...

Malware Analysis – amadey – 2051792209ae3e2fc7dc07de18c52235

March 10, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, botnet:pub1, botnet:sprg, backdoor, discovery, persistence, ransomware, stealer, trojanMD5: 2051792209ae3e2fc7dc07de18c52235SHA1: 7620a99286b5b508b1f1a6a0019cba33d5be277bANALYSIS DATE:...

Malware Analysis – djvu – 9d9e1f1da9553e70bcf9f9f21b99167f

March 10, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 9d9e1f1da9553e70bcf9f9f21b99167fSHA1: 5b9f1b9c7216b7215d2604eeda8282f0acd959b6ANALYSIS DATE: 2023-03-10T16:15:34ZTTPS: T1005, T1081, T1060, T1112,...

Malware Analysis – djvu – 7cefb72243c731675df371bb892b40b9

March 10, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 7cefb72243c731675df371bb892b40b9SHA1: 64543f0ae0994f2e80fd1b355f3e7e5ca5e9036dANALYSIS DATE: 2023-03-10T16:21:40ZTTPS: T1082, T1053, T1005, T1081,...

Malware Analysis – djvu – ff05365f6a607f44f30f0e926f2d08ec

March 10, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: ff05365f6a607f44f30f0e926f2d08ecSHA1: a8e020dd7e64c16e9af8444aa005341082d5bebbANALYSIS DATE: 2023-03-10T16:21:19ZTTPS: T1222, T1053, T1012, T1082,...

Malware Analysis – amadey – f16dd161b9394a75a981df03662e61d8

March 10, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, botnet:sprg, backdoor, discovery, ransomware, trojanMD5: f16dd161b9394a75a981df03662e61d8SHA1: e011edf5e79f12d715d497a5a699edfcf0de4918ANALYSIS DATE: 2023-03-10T17:04:11ZTTPS: T1012, T1053, T1082, T1120,...

Malware Analysis – amadey – 92f5a6a4e0cb84ba8c8f640ff44b5af4

March 10, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:pseudomanuscrypt, family:smokeloader, botnet:pub1, botnet:sprg, backdoor, discovery, loader, ransomware, trojanMD5: 92f5a6a4e0cb84ba8c8f640ff44b5af4SHA1: e9f2e6f2060c62e4afe4c1bc71836947dcf6bea2ANALYSIS DATE: 2023-03-10T16:32:20ZTTPS: T1222,...

Malware Analysis – djvu – 479babeb495794837bc83b21222d2fd2

March 10, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 479babeb495794837bc83b21222d2fd2SHA1: 693be18d689a4674698488150f11b7f1052db0efANALYSIS DATE: 2023-03-10T16:46:17ZTTPS: T1012, T1082, T1053, T1005,...

Malware Analysis – djvu – 2210099924266e5ba46da6e8329c2881

March 10, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 2210099924266e5ba46da6e8329c2881SHA1: ec0dd5b5e535fc9960b87f5f037c4af02be5d96aANALYSIS DATE: 2023-03-10T16:44:51ZTTPS: T1005, T1081, T1060, T1112,...

Malware Analysis – djvu – 2186de1adb99ec7f627b208335f64ee0

March 10, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:laplas, family:smokeloader, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, botnet:pub1, botnet:sprg, backdoor, clipper, discovery, persistence, ransomware, stealer, trojanMD5: 2186de1adb99ec7f627b208335f64ee0SHA1: fa04f1f30e08fc5ce27f6cc0154a7d7685f1d2b0ANALYSIS...

Malware Analysis – djvu – 0517ca72b4d6d2fc34404a94419287bb

March 10, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 0517ca72b4d6d2fc34404a94419287bbSHA1: 5422f205d8a3c01e9399440be9c546ff719f373eANALYSIS DATE: 2023-03-10T02:59:25ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – spyware – 0bd2a86516a4ebcc88f37f77dc618a0b

March 10, 2023

Score: 7 MALWARE FAMILY: spywareTAGS:spyware, stealerMD5: 0bd2a86516a4ebcc88f37f77dc618a0bSHA1: 2da8e9f1ce74cfc6a3a7f70742d37829fa23ee9cANALYSIS DATE: 2023-03-10T04:33:56ZTTPS: T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – djvu – f30bde6d0a2e5e74772892751f9eb26d

March 10, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: f30bde6d0a2e5e74772892751f9eb26dSHA1: 493c39cbfb9d2e814efd5f25e2fc3aa675bceb46ANALYSIS DATE: 2023-03-10T04:19:56ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis

Malware Analysis – medusalocker – 19ddac9782acd73f66c5fe040e86ddee

Malware Analysis – dharma – 0880430c257ce49d7490099d2a8dd01a

Malware Analysis – djvu – 7eb2367fe8b1c3d81e4a3698ca504201

Malware Analysis – djvu – fa3ffaf5e547407347b758edb0b959aa

Malware Analysis – amadey – a01c6ec9fdd07310f4f04c2ecc1d2813

Malware Analysis – djvu – a67c30efdd7940f034852302dcbf493d

Malware Analysis – djvu – 74660444c99b457537291dcac33f5307

Malware Analysis – amadey – 5bf3877b8fd815085586d2de55398d00

Malware Analysis – amadey – deaf892bd1b4cbf1ff3a7f5449f4c4ea

Malware Analysis – djvu – cd584418ce391a1196c4d4363d974705

Malware Analysis – blackcat – 8f2b7a45a93ee6f4806918aaa99c1b1b

Malware Analysis – djvu – 6d825cec46935a1b76c26bcb752053c9

Malware Analysis – amadey – 2051792209ae3e2fc7dc07de18c52235

Malware Analysis – djvu – 9d9e1f1da9553e70bcf9f9f21b99167f

Malware Analysis – djvu – 7cefb72243c731675df371bb892b40b9

Malware Analysis – djvu – ff05365f6a607f44f30f0e926f2d08ec

Malware Analysis – amadey – f16dd161b9394a75a981df03662e61d8

Malware Analysis – amadey – 92f5a6a4e0cb84ba8c8f640ff44b5af4

Malware Analysis – djvu – 479babeb495794837bc83b21222d2fd2

Malware Analysis – djvu – 2210099924266e5ba46da6e8329c2881

Malware Analysis – djvu – 2186de1adb99ec7f627b208335f64ee0

Malware Analysis – djvu – 0517ca72b4d6d2fc34404a94419287bb

Malware Analysis – spyware – 0bd2a86516a4ebcc88f37f77dc618a0b

Malware Analysis – djvu – f30bde6d0a2e5e74772892751f9eb26d

Cobalt Strike Beacon Detected – 162[.]128[.]74[.]109:4433

Cobalt Strike Beacon Detected – 120[.]24[.]62[.]81:443

Cobalt Strike Beacon Detected – 162[.]128[.]74[.]109:443

Cobalt Strike Beacon Detected – 156[.]245[.]28[.]97:80

Cobalt Strike Beacon Detected – 23[.]27[.]48[.]179:443

You may have missed