Malware Analysis

Malware Analysis – amadey – 5bfc171751f4b4377118a9c73702fc5e

March 9, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, backdoor, discovery, evasion, persistence, ransomware, spyware, stealer, trojanMD5: 5bfc171751f4b4377118a9c73702fc5eSHA1: fe966b6589a850a20e9ae44dea26d7a6ba007732ANALYSIS DATE: 2023-03-09T03:32:31ZTTPS:...

Malware Analysis – blackmatter – e3269531cf93d040b08074bfb31b72a0

March 9, 2023

Score: 10 MALWARE FAMILY: blackmatterTAGS:family:blackmatter, ransomware, upxMD5: e3269531cf93d040b08074bfb31b72a0SHA1: 45b6d89dcea02cc90ae054d72ec80a2eb1036a7eANALYSIS DATE: 2023-03-09T04:43:37ZTTPS: T1130, T1112, T1491 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – db14d145295e8383cbc437402767c355

March 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: db14d145295e8383cbc437402767c355SHA1: 53f83db1fc44f62bdfcc4eb4f41aec716ffae554ANALYSIS DATE: 2023-03-09T03:54:27ZTTPS: T1005, T1081, T1012, T1222, T1082,...

Malware Analysis – amadey – 42e4c58d60abe9258d6d61c2c5f12c59

March 9, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:pseudomanuscrypt, family:smokeloader, family:vidar, backdoor, discovery, evasion, loader, persistence, ransomware, stealer, trojanMD5: 42e4c58d60abe9258d6d61c2c5f12c59SHA1: d27529007bd24a29b2e5180c022d9adf000b5080ANALYSIS DATE:...

Malware Analysis – djvu – 96cf6e0b838ee7ecfd36be7d34aa5a83

March 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 96cf6e0b838ee7ecfd36be7d34aa5a83SHA1: 8a6402d9779089906712f470aac462b3d2fd4a3aANALYSIS DATE: 2023-03-09T05:49:40ZTTPS: T1060, T1112, T1082, T1053, T1005,...

Malware Analysis – evasion – 991a487e6e1d4e1eb45684c65b2a82d3

March 9, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomware, trojanMD5: 991a487e6e1d4e1eb45684c65b2a82d3SHA1: b5e31fd6125709b27726d5d3d21d9beb46c6eba6ANALYSIS DATE: 2023-03-09T04:48:03ZTTPS: T1107, T1490, T1112, T1082, T1088, T1089, T1053 ScoreMeaningExample10Known badA...

Malware Analysis – evasion – 0f0da68ff311ce4a8f51a52678d6fdd8

March 9, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 0f0da68ff311ce4a8f51a52678d6fdd8SHA1: eb90356abbeea6f00551afcb25a613b91c3da516ANALYSIS DATE: 2023-03-09T04:54:03ZTTPS: T1059, T1107, T1490, T1012, T1120, T1082, T1112 ScoreMeaningExample10Known badA malware...

Malware Analysis – smokeloader – c4e426738efd206ac083c08f1273053a

March 9, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: c4e426738efd206ac083c08f1273053aSHA1: 1595aba27a57fd0155e190e03ba98b2081bf416aANALYSIS DATE: 2023-03-08T21:06:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 512fe8e475da3725a0da684d1baea381

March 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 512fe8e475da3725a0da684d1baea381SHA1: 3a9bc73a1b9ab1e5ffb617a3aca82a26812eb178ANALYSIS DATE: 2023-03-08T22:30:41ZTTPS: T1005, T1081, T1012, T1082, T1222,...

Malware Analysis – amadey – c8792c0775e11531dd1b415fdda7d117

March 9, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, backdoor, discovery, evasion, persistence, ransomware, stealer, trojanMD5: c8792c0775e11531dd1b415fdda7d117SHA1: 41edc4c828aaf7d32f96c502432a52b0d0dbd9f3ANALYSIS DATE: 2023-03-08T22:29:31ZTTPS: T1082,...

Malware Analysis – ransomware – 5764e41fede27bf9c984242c2b7bfd33

March 9, 2023

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 5764e41fede27bf9c984242c2b7bfd33SHA1: e5b4178bdebf7a59e97c56235cff472b18440359ANALYSIS DATE: 2023-03-08T22:00:24ZTTPS: T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – – 59c1dfcf5cc3b76c961fe08f163dbb02

March 9, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: 59c1dfcf5cc3b76c961fe08f163dbb02SHA1: 12d002783acc1fe8573abf8f07e7fc79d2769f27ANALYSIS DATE: 2023-03-08T22:25:43ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 9f2ec0841038ab71e92b9cca25130539

March 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 9f2ec0841038ab71e92b9cca25130539SHA1: 02e3dc0bd19823321bdc9ab0b5686f55b457ae93ANALYSIS DATE: 2023-03-08T22:43:05ZTTPS: T1005, T1081, T1053, T1060, T1112,...

Malware Analysis – azorult – 020a7bb6359b2f3081bb72de64c34fdc

March 9, 2023

Score: 10 MALWARE FAMILY: azorultTAGS:family:azorult, family:njrat, collection, discovery, evasion, infostealer, persistence, pyinstaller, ransomware, spyware, stealer, trojan, upxMD5: 020a7bb6359b2f3081bb72de64c34fdcSHA1: 523ca74230a889b717c621c2f2f9165f6408360eANALYSIS DATE:...

Malware Analysis – amadey – 1c714b99500321bb1aa328a03df52338

March 9, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, family:vidar, backdoor, discovery, infostealer, persistence, ransomware, stealer, trojanMD5: 1c714b99500321bb1aa328a03df52338SHA1: d47e154a3fed5dbad4e37f017a0bb166b7e6f51eANALYSIS DATE: 2023-03-08T23:10:51ZTTPS:...

Malware Analysis – evasion – 9a0a35be77414e4384489b634847fd27

March 9, 2023

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 9a0a35be77414e4384489b634847fd27SHA1: 759791b8efe785680e5804b45aede00581bb6906ANALYSIS DATE: 2023-03-08T22:38:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – ransomware – fe311cbf28e46b0bbfbd7e848ac6867b

March 8, 2023

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: fe311cbf28e46b0bbfbd7e848ac6867bSHA1: 14b231291b8370fa08da5fec80cf96ac713971f6ANALYSIS DATE: 2023-03-08T15:20:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – discovery – cf5d70e9da8dd67bc9d9fb9e0d60a9d6

March 8, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomware, upxMD5: cf5d70e9da8dd67bc9d9fb9e0d60a9d6SHA1: 13b699cc65af670fc51b117a8344648840eefaddANALYSIS DATE: 2023-03-08T15:32:17ZTTPS: T1012, T1120, T1082, T1050 ScoreMeaningExample10Known badA malware family...

Malware Analysis – djvu – 9f8de64b1ae31558a70d0915c545064b

March 8, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 9f8de64b1ae31558a70d0915c545064bSHA1: 17f748ecd0c5badc7a8da0025ce1d6b394ce60dbANALYSIS DATE: 2023-03-08T16:15:25ZTTPS: T1005, T1081, T1082, T1222, T1012,...

Malware Analysis – chaos – b431bf2649aee55b729f1668a7bc4b12

March 8, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, ransomware, spyware, stealerMD5: b431bf2649aee55b729f1668a7bc4b12SHA1: f618c191798cd8a809120bbf6b09ff79d8877138ANALYSIS DATE: 2023-03-08T15:39:05ZTTPS: T1490, T1059, T1107, T1491, T1112, T1012, T1082,...

Malware Analysis – djvu – d65e8623c52eadbd5d75a1f515d49500

March 8, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: d65e8623c52eadbd5d75a1f515d49500SHA1: 750dc8abea1f81ba18baa69d714a5df070dd6d00ANALYSIS DATE: 2023-03-08T15:22:25ZTTPS: T1060, T1112, T1082, T1005, T1081,...

Malware Analysis – djvu – 012cb286ce81b404dc70c71a82269f9d

March 8, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 012cb286ce81b404dc70c71a82269f9dSHA1: 50433747e0eab4fcd9c9ae59b2b60b4174ab2a62ANALYSIS DATE: 2023-03-08T16:16:13ZTTPS: T1005, T1081, T1012, T1082, T1060,...

Malware Analysis – djvu – f87d7f832564c394452812cea1e4329a

March 8, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: f87d7f832564c394452812cea1e4329aSHA1: b3d889c87a05799fc1f40b70799a15470712d589ANALYSIS DATE: 2023-03-08T16:23:18ZTTPS: T1012, T1082, T1053, T1005, T1081,...

Malware Analysis – discovery – baabd73bcc36410b8ac2c583256daea4

March 8, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, exploit, ransomware, spyware, stealer, trojan, upxMD5: baabd73bcc36410b8ac2c583256daea4SHA1: 8cff0fd52aea3e2f4f1e0613a6a37b9c7efa88fbANALYSIS DATE: 2023-03-08T16:31:39ZTTPS: T1005, T1081, T1082, T1031,...

Malware Analysis

Malware Analysis – amadey – 5bfc171751f4b4377118a9c73702fc5e

Malware Analysis – blackmatter – e3269531cf93d040b08074bfb31b72a0

Malware Analysis – djvu – db14d145295e8383cbc437402767c355

Malware Analysis – amadey – 42e4c58d60abe9258d6d61c2c5f12c59

Malware Analysis – djvu – 96cf6e0b838ee7ecfd36be7d34aa5a83

Malware Analysis – evasion – 991a487e6e1d4e1eb45684c65b2a82d3

Malware Analysis – evasion – 0f0da68ff311ce4a8f51a52678d6fdd8

Malware Analysis – smokeloader – c4e426738efd206ac083c08f1273053a

Malware Analysis – djvu – 512fe8e475da3725a0da684d1baea381

Malware Analysis – amadey – c8792c0775e11531dd1b415fdda7d117

Malware Analysis – ransomware – 5764e41fede27bf9c984242c2b7bfd33

Malware Analysis – – 59c1dfcf5cc3b76c961fe08f163dbb02

Malware Analysis – djvu – 9f2ec0841038ab71e92b9cca25130539

Malware Analysis – azorult – 020a7bb6359b2f3081bb72de64c34fdc

Malware Analysis – amadey – 1c714b99500321bb1aa328a03df52338

Malware Analysis – evasion – 9a0a35be77414e4384489b634847fd27

Malware Analysis – ransomware – fe311cbf28e46b0bbfbd7e848ac6867b

Malware Analysis – discovery – cf5d70e9da8dd67bc9d9fb9e0d60a9d6

Malware Analysis – djvu – 9f8de64b1ae31558a70d0915c545064b

Malware Analysis – chaos – b431bf2649aee55b729f1668a7bc4b12

Malware Analysis – djvu – d65e8623c52eadbd5d75a1f515d49500

Malware Analysis – djvu – 012cb286ce81b404dc70c71a82269f9d

Malware Analysis – djvu – f87d7f832564c394452812cea1e4329a

Malware Analysis – discovery – baabd73bcc36410b8ac2c583256daea4

[INCRANSOM] – Ransomware Victim: Naples Heritage Golf & Country Club

[LYNX] – Ransomware Victim: Dynamic Closures

[QILIN] – Ransomware Victim: Connekted, Inc[.]

[FOG] – Ransomware Victim: WJCC Public Schools (wjccschools[.]org)

CVE Alert: CVE-2025-0954

You may have missed