Malware Analysis

Malware Analysis – djvu – 4f3f6dcf9708921f89402fca1786ce69

February 28, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 4f3f6dcf9708921f89402fca1786ce69SHA1: b209a7639b33c4a143a1165cde74432e5e3ea9f0ANALYSIS DATE: 2023-02-27T22:16:54ZTTPS: T1053, T1012, T1082, T1005, T1081,...

Malware Analysis – djvu – 284188684107ced16015103e14cd8a43

February 28, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, backdoor, discovery, persistence, pyinstaller, ransomware, stealer, trojan, vmprotectMD5: 284188684107ced16015103e14cd8a43SHA1: 3b41c2744db958f5fa7951be4e60ad396699e4cbANALYSIS DATE: 2023-02-27T21:07:25ZTTPS: T1012,...

Malware Analysis – smokeloader – 917ec402257747008f49ca8ef2cbb68d

February 28, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 917ec402257747008f49ca8ef2cbb68dSHA1: 1e24cb0554b0889f8f738af9ca7f0ba3bbe08b9cANALYSIS DATE: 2023-02-27T23:56:02ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – b7f75322a5ae47dcbc0ae9c35930181f

February 27, 2023

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: b7f75322a5ae47dcbc0ae9c35930181fSHA1: c999e7c030a56b39090a5506413565cead8fa779ANALYSIS DATE: 2023-02-27T15:02:34ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – d68fc03f5679d210f0a3cd70cc8c13e1

February 27, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: d68fc03f5679d210f0a3cd70cc8c13e1SHA1: a4ad2eddb55670b99a2e628205911b5ba21686e4ANALYSIS DATE: 2023-02-27T15:39:56ZTTPS: T1222, T1053, T1005, T1081, T1082,...

Malware Analysis – djvu – 14e05bdb6fb15db02e5247582084999a

February 27, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 14e05bdb6fb15db02e5247582084999aSHA1: c462df95f587ad8e7ab3f703e912aaf12762d03dANALYSIS DATE: 2023-02-27T15:11:02ZTTPS: T1012, T1082, T1005, T1081, T1060,...

Malware Analysis – smokeloader – 32e664bc1683bf60db15e50df9d04d94

February 27, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 32e664bc1683bf60db15e50df9d04d94SHA1: 2f58984ab4b88eff4cf3271a9b3d9b8a0abed2ecANALYSIS DATE: 2023-02-27T15:50:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – f440f4b68d8a753de17f40da8067c74c

February 27, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, backdoor, discovery, persistence, ransomware, stealer, trojan, vmprotectMD5: f440f4b68d8a753de17f40da8067c74cSHA1: fec25fe57dae2be79962fa9a3f79e62472be6d00ANALYSIS DATE: 2023-02-27T16:10:02ZTTPS: T1060, T1112,...

Malware Analysis – smokeloader – 35ccb4adbce0d03c3409df6207401429

February 27, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 35ccb4adbce0d03c3409df6207401429SHA1: 525be7f6caed949ddfa929c0a2ee75b26ba57c64ANALYSIS DATE: 2023-02-27T16:29:08ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – bfc03a90243efb1bbb02f65bce3b02a2

February 27, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: bfc03a90243efb1bbb02f65bce3b02a2SHA1: 1f3d840f29f5595f7db3465fa4b09b397b38f009ANALYSIS DATE: 2023-02-27T16:30:56ZTTPS: T1060, T1112, T1053, T1005, T1081,...

Malware Analysis – smokeloader – aa058c705e64a433166d975f4e9a5261

February 27, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: aa058c705e64a433166d975f4e9a5261SHA1: d286ebd54477fef7a45cc12edfb05ae0197bbdaaANALYSIS DATE: 2023-02-27T16:29:08ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 4ee7170c8ae51589936baaa60bfca7b7

February 27, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 4ee7170c8ae51589936baaa60bfca7b7SHA1: 98eecd829b63e29452f6f9bb40c01303ed4d58e1ANALYSIS DATE: 2023-02-27T16:37:27ZTTPS: T1222, T1082, T1012, T1053, T1005,...

Malware Analysis – quantum – c1fbbf273c1e4094f6bf0cdde36d2764

February 27, 2023

Score: 10 MALWARE FAMILY: quantumTAGS:family:quantum, ransomwareMD5: c1fbbf273c1e4094f6bf0cdde36d2764SHA1: bcf4ed6e49e30c5ab9e0fdfcaf5ee8e2756cc98aANALYSIS DATE: 2023-02-27T17:25:04ZTTPS: T1158, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – quasar – 04c0f75fb7507ed1d87c6946698ec064

February 27, 2023

Score: 10 MALWARE FAMILY: quasarTAGS:family:quasar, evasion, persistence, ransomware, spyware, trojanMD5: 04c0f75fb7507ed1d87c6946698ec064SHA1: 577911bb677fbf7870209d4417e277e89b1263feANALYSIS DATE: 2023-02-27T16:44:51ZTTPS: T1082, T1088, T1089, T1112, T1031, T1060,...

Malware Analysis – smokeloader – 3423b310f4725f7d0954f38d346eff1e

February 27, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 3423b310f4725f7d0954f38d346eff1eSHA1: 475cdb695f781e4cbd29c5c601d52377d96503e9ANALYSIS DATE: 2023-02-27T17:00:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 5c1055bd70425b00ccdd27fb4568aa3b

February 27, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, backdoor, discovery, persistence, pyinstaller, ransomware, spyware, stealer, trojan, vmprotectMD5: 5c1055bd70425b00ccdd27fb4568aa3bSHA1: 5643011b8cc2ed9d83d5ed3d4f508bc7bbedf811ANALYSIS DATE: 2023-02-27T17:30:36ZTTPS:...

Malware Analysis – smokeloader – 52c84c3173a4681cce7fc7bc5d8042db

February 27, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 52c84c3173a4681cce7fc7bc5d8042dbSHA1: d63990866ef6a285a6a18c2c3527ee547934ca5aANALYSIS DATE: 2023-02-27T09:07:19ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 0791d4fdb3ab94c236568ac890a16a5a

February 27, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 0791d4fdb3ab94c236568ac890a16a5aSHA1: 3ae812bc7977181c578867dbe5a43a4b84ceead0ANALYSIS DATE: 2023-02-27T09:06:13ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – troldesh – 63210f8f1dde6c40a7f3643ccf0ff313

February 27, 2023

Score: 10 MALWARE FAMILY: troldeshTAGS:family:troldesh, persistence, ransomware, trojan, upxMD5: 63210f8f1dde6c40a7f3643ccf0ff313SHA1: 57edd72391d710d71bead504d44389d0462ccec9ANALYSIS DATE: 2023-02-27T09:11:05ZTTPS: T1060, T1112, T1082 ScoreMeaningExample10Known badA malware family...

Malware Analysis – smokeloader – b7d558b62705bb9da3e9154d81eddc6c

February 27, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: b7d558b62705bb9da3e9154d81eddc6cSHA1: a54d91fb7224a9bd32b13d13a1bc259f631decfbANALYSIS DATE: 2023-02-27T09:07:20ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 10c1d309a43c0ae8c867d445f0983a7c

February 27, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 10c1d309a43c0ae8c867d445f0983a7cSHA1: 7e81c65fa44afac85129806815dc422e42e7f421ANALYSIS DATE: 2023-02-27T09:07:20ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – b3f4fcfb20dc2d65bc7355f744cc471a

February 27, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: b3f4fcfb20dc2d65bc7355f744cc471aSHA1: 9768b327aa6be677923550e9d949b0606eb3f116ANALYSIS DATE: 2023-02-27T09:07:20ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – ef701a28f6a0f6c47bbeb9075bfdbb17

February 27, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, backdoor, discovery, persistence, ransomware, stealer, trojan, vmprotectMD5: ef701a28f6a0f6c47bbeb9075bfdbb17SHA1: d8d7540d7aa77ab65a808114ab968245901fc6b0ANALYSIS DATE: 2023-02-27T10:05:24ZTTPS: T1012, T1120,...

Malware Analysis – djvu – 5c99ee62a7e7bdd30257f2af5af760eb

February 27, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 5c99ee62a7e7bdd30257f2af5af760ebSHA1: 4273c64a6dd3cdc41689d3fe84063a64b3444fc7ANALYSIS DATE: 2023-02-27T10:02:29ZTTPS: T1060, T1112, T1012, T1082, T1005,...

Malware Analysis

Malware Analysis – djvu – 4f3f6dcf9708921f89402fca1786ce69

Malware Analysis – djvu – 284188684107ced16015103e14cd8a43

Malware Analysis – smokeloader – 917ec402257747008f49ca8ef2cbb68d

Malware Analysis – evasion – b7f75322a5ae47dcbc0ae9c35930181f

Malware Analysis – djvu – d68fc03f5679d210f0a3cd70cc8c13e1

Malware Analysis – djvu – 14e05bdb6fb15db02e5247582084999a

Malware Analysis – smokeloader – 32e664bc1683bf60db15e50df9d04d94

Malware Analysis – djvu – f440f4b68d8a753de17f40da8067c74c

Malware Analysis – smokeloader – 35ccb4adbce0d03c3409df6207401429

Malware Analysis – djvu – bfc03a90243efb1bbb02f65bce3b02a2

Malware Analysis – smokeloader – aa058c705e64a433166d975f4e9a5261

Malware Analysis – djvu – 4ee7170c8ae51589936baaa60bfca7b7

Malware Analysis – quantum – c1fbbf273c1e4094f6bf0cdde36d2764

Malware Analysis – quasar – 04c0f75fb7507ed1d87c6946698ec064

Malware Analysis – smokeloader – 3423b310f4725f7d0954f38d346eff1e

Malware Analysis – djvu – 5c1055bd70425b00ccdd27fb4568aa3b

Malware Analysis – smokeloader – 52c84c3173a4681cce7fc7bc5d8042db

Malware Analysis – smokeloader – 0791d4fdb3ab94c236568ac890a16a5a

Malware Analysis – troldesh – 63210f8f1dde6c40a7f3643ccf0ff313

Malware Analysis – smokeloader – b7d558b62705bb9da3e9154d81eddc6c

Malware Analysis – smokeloader – 10c1d309a43c0ae8c867d445f0983a7c

Malware Analysis – smokeloader – b3f4fcfb20dc2d65bc7355f744cc471a

Malware Analysis – djvu – ef701a28f6a0f6c47bbeb9075bfdbb17

Malware Analysis – djvu – 5c99ee62a7e7bdd30257f2af5af760eb

[AKIRA] – Ransomware Victim: Ichikawa North America Corporation

[RANSOMHUB] – Ransomware Victim: www[.]wisesocon[.]com

[AKIRA] – Ransomware Victim: Thomas J[.] Henry Law

[RANSOMHUB] – Ransomware Victim: amerplumb[.]com

[RHYSIDA] – Ransomware Victim: Qualinet

You may have missed