Malware Analysis

Malware Analysis – djvu – 17c79fc64187a8c5018aea159e24eff3

February 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:pseudomanuscrypt, family:smokeloader, family:vidar, backdoor, discovery, evasion, loader, persistence, ransomware, stealer, trojan, vmprotectMD5: 17c79fc64187a8c5018aea159e24eff3SHA1: 645f3055fbcdfbce587d3450e029cd2f8c4909c3ANALYSIS DATE:...

Malware Analysis – ransomware – 1d3d4986c9e45fe8d72c9c9eba7a0a3a

February 25, 2023

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 1d3d4986c9e45fe8d72c9c9eba7a0a3aSHA1: f076e92e41d1d8b18fbc85e6bd854b7eb860eba1ANALYSIS DATE: 2023-02-25T15:13:21ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – redline – 5b3b6822964b4151c6200ecd89722a86

February 25, 2023

Score: 10 MALWARE FAMILY: redlineTAGS:family:redline, botnet:ronur, evasion, infostealer, persistence, trojanMD5: 5b3b6822964b4151c6200ecd89722a86SHA1: ce7a11dae532b2ade1c96619bbdc8a8325582049ANALYSIS DATE: 2023-02-25T14:57:29ZTTPS: T1089, T1112, T1031, T1012, T1082, T1102,...

Malware Analysis – djvu – 27bd85a7b9ace93deda5449dbdaf5d68

February 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 27bd85a7b9ace93deda5449dbdaf5d68SHA1: bbe0da04ec70c48d65928a6102213962aef115edANALYSIS DATE: 2023-02-25T15:55:36ZTTPS: T1222, T1082, T1005, T1081, T1012,...

Malware Analysis – djvu – ee3db7bd963234e51246a341218b06e7

February 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: ee3db7bd963234e51246a341218b06e7SHA1: c90dec4a8c06172c265e44ca21a65d7b51b0a2c2ANALYSIS DATE: 2023-02-25T17:24:18ZTTPS: T1053, T1005, T1081, T1012, T1082,...

Malware Analysis – djvu – ab3c5f1f84e95c11d3bcba93f19b76df

February 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: ab3c5f1f84e95c11d3bcba93f19b76dfSHA1: 2c60f6600d446d73a398ba3542dabc4db40006c3ANALYSIS DATE: 2023-02-25T15:39:54ZTTPS: T1060, T1112, T1082, T1222, T1012,...

Malware Analysis – djvu – 30ea0ed492d95cec8baeedbf6d1e62f0

February 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 30ea0ed492d95cec8baeedbf6d1e62f0SHA1: d79ebcdf913f725ee8ada8f8ed379ae8e9c70f43ANALYSIS DATE: 2023-02-25T16:36:05ZTTPS: T1222, T1082, T1053, T1012, T1130,...

Malware Analysis – djvu – 4aceacc0ff479cea25d311326bbce89d

February 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 4aceacc0ff479cea25d311326bbce89dSHA1: e3d8e39cdade49720cc365dc8f7cedc361ec8e3fANALYSIS DATE: 2023-02-25T17:44:30ZTTPS: T1222, T1060, T1112, T1082, T1005,...

Malware Analysis – djvu – d377a439774611dde5416a3662e84c9e

February 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:pseudomanuscrypt, family:smokeloader, family:vidar, backdoor, discovery, evasion, loader, persistence, ransomware, stealer, trojan, vmprotectMD5: d377a439774611dde5416a3662e84c9eSHA1: 59368d88a4b9084997f8de8b6014a306fb46de86ANALYSIS DATE:...

Malware Analysis – djvu – 242a5bd17728897955589eb0bc5849ab

February 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 242a5bd17728897955589eb0bc5849abSHA1: 5f6fd9f4eda88306690b2d052495990a58d58d20ANALYSIS DATE: 2023-02-25T17:46:58ZTTPS: T1012, T1082, T1005, T1081, T1060,...

Malware Analysis – djvu – 576885276a687dcf7b55b6f09853fae7

February 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 576885276a687dcf7b55b6f09853fae7SHA1: c67d3ab4bcdef4e3da6917b853184c71e97e34d6ANALYSIS DATE: 2023-02-25T17:28:35ZTTPS: T1005, T1081, T1222, T1012, T1082,...

Malware Analysis – djvu – 6b5e1e3b7a369a9160c0248eb0250568

February 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, backdoor, discovery, evasion, persistence, ransomware, stealer, trojan, vmprotectMD5: 6b5e1e3b7a369a9160c0248eb0250568SHA1: 391842386166bfa74b59106ffb9a6bfb15429b48ANALYSIS DATE: 2023-02-25T09:35:25ZTTPS: T1012,...

Malware Analysis – djvu – 73c4dff369657cbaba4b2f6e9a2397c7

February 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 73c4dff369657cbaba4b2f6e9a2397c7SHA1: e323c9ef5e8f7e90c539551e742807c7455a56fbANALYSIS DATE: 2023-02-25T09:42:50ZTTPS: T1005, T1081, T1012, T1082, T1222,...

Malware Analysis – djvu – fc1ead7c27d8c4af3ee4684a615689c4

February 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: fc1ead7c27d8c4af3ee4684a615689c4SHA1: d821d2777cd30b10d87ed8315e4f643477170773ANALYSIS DATE: 2023-02-25T09:32:54ZTTPS: T1053, T1012, T1005, T1081, T1060,...

Malware Analysis – djvu – 08c55cefe844a3447f6cc89f4f6410f0

February 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:pseudomanuscrypt, family:smokeloader, family:vidar, backdoor, discovery, evasion, loader, persistence, ransomware, stealer, trojan, vmprotectMD5: 08c55cefe844a3447f6cc89f4f6410f0SHA1: 9e9514ef94066df1398f5c2f92a10f322e015e80ANALYSIS DATE:...

Malware Analysis – djvu – 6a4db9167cb6ae1dbdb0516bc394d427

February 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 6a4db9167cb6ae1dbdb0516bc394d427SHA1: c3a4997d48b4136086323501468b963a0ab7a2faANALYSIS DATE: 2023-02-25T11:31:59ZTTPS: T1060, T1112, T1222, T1082, T1012, T1053 ScoreMeaningExample10Known badA...

Malware Analysis – discovery – 12d36f901366740c1da210d62e05b98a

February 25, 2023

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 12d36f901366740c1da210d62e05b98aSHA1: 8d13b7aef049bdda83a390f2c7b022914defc15bANALYSIS DATE: 2023-02-25T09:58:50ZTTPS: T1222, T1012, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – 92712260bd169a57dc97ca60777714fc

February 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:pseudomanuscrypt, family:smokeloader, family:vidar, backdoor, discovery, evasion, loader, persistence, ransomware, stealer, trojan, vmprotectMD5: 92712260bd169a57dc97ca60777714fcSHA1: f681cba7d6305d9a2adce37bb358c8024a1c9bdbANALYSIS DATE:...

Malware Analysis – djvu – 3ad617705eb60bea01b35ebfdec9387c

February 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 3ad617705eb60bea01b35ebfdec9387cSHA1: 37ba7d4428f89d2065d07e0dea412f507cdb7438ANALYSIS DATE: 2023-02-25T10:35:16ZTTPS: T1005, T1081, T1053, T1012, T1060,...

Malware Analysis – evasion – 7f69d92f19de9be2619fed5db58746fa

February 25, 2023

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 7f69d92f19de9be2619fed5db58746faSHA1: 5a5136169cd457f13a31a6c31689411bb2da3d5fANALYSIS DATE: 2023-02-25T03:41:53ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – ransomware – 991d95ad7e805503138249b5bec398d5

February 25, 2023

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 991d95ad7e805503138249b5bec398d5SHA1: 98846f854c0a2ecbbaaecbf43abeed9077e8b49fANALYSIS DATE: 2023-02-25T03:51:07ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – lockbit – 41687e58130c8bdca248e1403e565afb

February 25, 2023

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, discovery, evasion, persistence, ransomwareMD5: 41687e58130c8bdca248e1403e565afbSHA1: 6eda5da62e5073a67ff89dd89b85328dd2df73d1ANALYSIS DATE: 2023-02-25T04:13:03ZTTPS: T1490, T1046, T1082, T1107, T1018, T1491, T1112,...

Malware Analysis – djvu – fc50d6268244b5ab8ab7bd8070e6b028

February 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: fc50d6268244b5ab8ab7bd8070e6b028SHA1: 8810d6b6e50d87582148779d11784d1aa85a4098ANALYSIS DATE: 2023-02-25T04:41:27ZTTPS: T1222, T1082, T1053, T1005, T1081,...

Malware Analysis – ransomware – d38dc12e74c6d7d1305c4c92df8e3a80

February 25, 2023

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: d38dc12e74c6d7d1305c4c92df8e3a80SHA1: a6ba97470fca8dba3bc1e2a8bb6678dd79a4a473ANALYSIS DATE: 2023-02-25T04:49:35ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis

Malware Analysis – djvu – 17c79fc64187a8c5018aea159e24eff3

Malware Analysis – ransomware – 1d3d4986c9e45fe8d72c9c9eba7a0a3a

Malware Analysis – redline – 5b3b6822964b4151c6200ecd89722a86

Malware Analysis – djvu – 27bd85a7b9ace93deda5449dbdaf5d68

Malware Analysis – djvu – ee3db7bd963234e51246a341218b06e7

Malware Analysis – djvu – ab3c5f1f84e95c11d3bcba93f19b76df

Malware Analysis – djvu – 30ea0ed492d95cec8baeedbf6d1e62f0

Malware Analysis – djvu – 4aceacc0ff479cea25d311326bbce89d

Malware Analysis – djvu – d377a439774611dde5416a3662e84c9e

Malware Analysis – djvu – 242a5bd17728897955589eb0bc5849ab

Malware Analysis – djvu – 576885276a687dcf7b55b6f09853fae7

Malware Analysis – djvu – 6b5e1e3b7a369a9160c0248eb0250568

Malware Analysis – djvu – 73c4dff369657cbaba4b2f6e9a2397c7

Malware Analysis – djvu – fc1ead7c27d8c4af3ee4684a615689c4

Malware Analysis – djvu – 08c55cefe844a3447f6cc89f4f6410f0

Malware Analysis – djvu – 6a4db9167cb6ae1dbdb0516bc394d427

Malware Analysis – discovery – 12d36f901366740c1da210d62e05b98a

Malware Analysis – djvu – 92712260bd169a57dc97ca60777714fc

Malware Analysis – djvu – 3ad617705eb60bea01b35ebfdec9387c

Malware Analysis – evasion – 7f69d92f19de9be2619fed5db58746fa

Malware Analysis – ransomware – 991d95ad7e805503138249b5bec398d5

Malware Analysis – lockbit – 41687e58130c8bdca248e1403e565afb

Malware Analysis – djvu – fc50d6268244b5ab8ab7bd8070e6b028

Malware Analysis – ransomware – d38dc12e74c6d7d1305c4c92df8e3a80

[SARCOMA] – Ransomware Victim: Sheyenne Tooling & Manufacturing

[AKIRA] – Ransomware Victim: Peikko

CVE Alert: CVE-2025-22808

CVE Alert: CVE-2025-22806

CVE Alert: CVE-2025-22818

You may have missed