Malware Analysis

Malware Analysis – smokeloader – 6bc7191f01f23be6ba8357774482f793

February 22, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 6bc7191f01f23be6ba8357774482f793SHA1: 0ab05f8739fc671bca7bad965a1d620685636e26ANALYSIS DATE: 2023-02-22T09:58:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – glupteba – 23f59ddcd11358b08e491b19a3f5bb53

February 22, 2023

Score: 10 MALWARE FAMILY: gluptebaTAGS:family:glupteba, discovery, dropper, evasion, loader, persistence, ransomware, rootkit, trojanMD5: 23f59ddcd11358b08e491b19a3f5bb53SHA1: 1820b968b20c4cc20ae9eb5013eb9ab1def75c60ANALYSIS DATE: 2023-02-22T10:01:53ZTTPS: T1012, T1031, T1082,...

Malware Analysis – djvu – ea746870e963dfa82938756374ca769b

February 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: ea746870e963dfa82938756374ca769bSHA1: a4ce68ec85dd371a8be61bb42409c9825a44432eANALYSIS DATE: 2023-02-22T10:03:04ZTTPS: T1012, T1082, T1222, T1053,...

Malware Analysis – djvu – 3ca2f51c8e5250840893415bb49031a6

February 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 3ca2f51c8e5250840893415bb49031a6SHA1: 4491dc36f7b2aed7ee61cde93803b7b1dee7f3a4ANALYSIS DATE: 2023-02-22T10:21:41ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – djvu – dae95ad4f51a6a765e8065a4d21ade1a

February 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, evasion, persistence, ransomware, stealer, trojan, vmprotectMD5: dae95ad4f51a6a765e8065a4d21ade1aSHA1: 443b5fe4e30839244962003b666c08b952fcaafeANALYSIS DATE: 2023-02-22T10:42:27ZTTPS:...

Malware Analysis – djvu – c0e4c0955f80dcbf2099c2ffb2fc8461

February 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: c0e4c0955f80dcbf2099c2ffb2fc8461SHA1: f9839880808345143a87a37ab2f6101f1f89edefANALYSIS DATE: 2023-02-22T10:33:16ZTTPS: T1060, T1112, T1005, T1081,...

Malware Analysis – djvu – 20fd15790c7efd6c9d1adea6a173c876

February 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, evasion, persistence, ransomware, stealer, trojan, vmprotectMD5: 20fd15790c7efd6c9d1adea6a173c876SHA1: 5cb377821a019ab0db82c9a493022ee083824a19ANALYSIS DATE: 2023-02-22T10:11:30ZTTPS:...

Malware Analysis – harly – b40f641da0c05fe97e558341d59236e2

February 22, 2023

Score: 10 MALWARE FAMILY: harlyTAGS:family:harly, infostealer, ransomware, trojanMD5: b40f641da0c05fe97e558341d59236e2SHA1: 65632a662c5478555cede3301ac46f55d33d7ac5ANALYSIS DATE: 2023-02-22T11:34:48ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – smokeloader – 145466b3234adf3b9745ea36d0531ec0

February 22, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 145466b3234adf3b9745ea36d0531ec0SHA1: 01a065a2cc04eb82f484e43f34cab6e921178559ANALYSIS DATE: 2023-02-22T11:11:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – octo – 71d5c5dc3b8c5ded7b005155b84e3b16

February 22, 2023

Score: 10 MALWARE FAMILY: octoTAGS:family:octo, banker, evasion, infostealer, ransomware, rat, trojanMD5: 71d5c5dc3b8c5ded7b005155b84e3b16SHA1: a5c267fd84f0594279a0cc4f1c609a61120a5fdbANALYSIS DATE: 2023-02-22T11:10:11ZTTPS: ScoreMeaningExample10Known badA malware family was...

Malware Analysis – smokeloader – f77d72707555a26065e33dc12449fd6f

February 22, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: f77d72707555a26065e33dc12449fd6fSHA1: a5ad0c808420aea73737299ba482797959835541ANALYSIS DATE: 2023-02-22T11:15:07ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – quantum – 78f011f6196ab070e05e7e363a0c02f1

February 22, 2023

Score: 10 MALWARE FAMILY: quantumTAGS:family:quantum, ransomwareMD5: 78f011f6196ab070e05e7e363a0c02f1SHA1: 8d31d3e523d1e11631d05f01c410340cef780bfcANALYSIS DATE: 2023-02-22T03:33:29ZTTPS: T1158 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – quantum – 1ac3f71feece118a03c9e23af063f6d1

February 22, 2023

Score: 10 MALWARE FAMILY: quantumTAGS:family:quantum, ransomwareMD5: 1ac3f71feece118a03c9e23af063f6d1SHA1: bbc3979075e0574e54a5ead497fcba95fcc78fc0ANALYSIS DATE: 2023-02-22T03:06:12ZTTPS: T1158 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – ransomware – 5a9a8e900606307943a468a8868bcf7d

February 22, 2023

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 5a9a8e900606307943a468a8868bcf7dSHA1: 2fe997248fbc19d2157de62b88ade74ac8768442ANALYSIS DATE: 2023-02-22T03:00:36ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – quantum – c53e027bf91d7e8c8da245ccd28279e5

February 22, 2023

Score: 10 MALWARE FAMILY: quantumTAGS:family:quantum, ransomwareMD5: c53e027bf91d7e8c8da245ccd28279e5SHA1: 4d1fb9ab277f997a63cd42fd76467715b67579e4ANALYSIS DATE: 2023-02-22T04:07:31ZTTPS: T1158, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – quantum – 47f3e71a1b1eb4a939d5f17639514334

February 22, 2023

Score: 10 MALWARE FAMILY: quantumTAGS:family:quantum, ransomwareMD5: 47f3e71a1b1eb4a939d5f17639514334SHA1: d0c6afe81342ee81389864791c67e9b29e2939f2ANALYSIS DATE: 2023-02-22T04:05:47ZTTPS: T1158, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – quantum – ee9c6e60027c8ce65003de32d6125914

February 22, 2023

Score: 10 MALWARE FAMILY: quantumTAGS:family:quantum, ransomwareMD5: ee9c6e60027c8ce65003de32d6125914SHA1: 97872dbc8df6d6c4cc6419e81994336503c748f9ANALYSIS DATE: 2023-02-22T03:46:06ZTTPS: T1158 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – quantum – 87940b01f02d85d033dae35f8d01348f

February 22, 2023

Score: 10 MALWARE FAMILY: quantumTAGS:family:quantum, ransomwareMD5: 87940b01f02d85d033dae35f8d01348fSHA1: 152dd7098b2b7409669b1a5ba1e997ddeb622734ANALYSIS DATE: 2023-02-22T04:01:52ZTTPS: T1158, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – djvu – 2626279a3e0fa86062f70eb41c454931

February 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 2626279a3e0fa86062f70eb41c454931SHA1: 7e274a190cb4dbaeba62dbcd6def09f7c1197ad9ANALYSIS DATE: 2023-02-22T04:31:44ZTTPS: T1222, T1005, T1081, T1012,...

Malware Analysis – djvu – 0e27d37229646c4a68d258f19513bab2

February 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 0e27d37229646c4a68d258f19513bab2SHA1: 868e81e01cfdefebef662003fb1569d1c8634f55ANALYSIS DATE: 2023-02-22T05:35:54ZTTPS: T1005, T1081, T1012, T1222,...

Malware Analysis – djvu – 21b2fa42134d031de96e30172badfe1f

February 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 21b2fa42134d031de96e30172badfe1fSHA1: 1b43a994e943bd0dcb4c37b824908c6d49815450ANALYSIS DATE: 2023-02-22T05:35:08ZTTPS: T1012, T1082, T1053, T1005,...

Malware Analysis – djvu – eb3a93b87aeebce36ef2c599a8a6dfbc

February 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, evasion, persistence, ransomware, stealer, trojan, vmprotectMD5: eb3a93b87aeebce36ef2c599a8a6dfbcSHA1: d8f67ac9a52e9300fbce7d667ea2f3d3e0bf65e0ANALYSIS DATE: 2023-02-22T04:31:20ZTTPS:...

Malware Analysis – djvu – c0904e41ae1b556e10c96b0bb560c3a3

February 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: c0904e41ae1b556e10c96b0bb560c3a3SHA1: 42f10936c427306bb9dd573d2b8269ea9abd0e06ANALYSIS DATE: 2023-02-21T22:11:42ZTTPS: T1060, T1112, T1222, T1005,...

Malware Analysis – djvu – 65265918b765429783ce5fa95a0622a2

February 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 65265918b765429783ce5fa95a0622a2SHA1: 1d703e95d884410e5877e90607cdaed2153acd27ANALYSIS DATE: 2023-02-21T22:20:06ZTTPS: T1060, T1112, T1082, T1012,...

Malware Analysis

Malware Analysis – smokeloader – 6bc7191f01f23be6ba8357774482f793

Malware Analysis – glupteba – 23f59ddcd11358b08e491b19a3f5bb53

Malware Analysis – djvu – ea746870e963dfa82938756374ca769b

Malware Analysis – djvu – 3ca2f51c8e5250840893415bb49031a6

Malware Analysis – djvu – dae95ad4f51a6a765e8065a4d21ade1a

Malware Analysis – djvu – c0e4c0955f80dcbf2099c2ffb2fc8461

Malware Analysis – djvu – 20fd15790c7efd6c9d1adea6a173c876

Malware Analysis – harly – b40f641da0c05fe97e558341d59236e2

Malware Analysis – smokeloader – 145466b3234adf3b9745ea36d0531ec0

Malware Analysis – octo – 71d5c5dc3b8c5ded7b005155b84e3b16

Malware Analysis – smokeloader – f77d72707555a26065e33dc12449fd6f

Malware Analysis – quantum – 78f011f6196ab070e05e7e363a0c02f1

Malware Analysis – quantum – 1ac3f71feece118a03c9e23af063f6d1

Malware Analysis – ransomware – 5a9a8e900606307943a468a8868bcf7d

Malware Analysis – quantum – c53e027bf91d7e8c8da245ccd28279e5

Malware Analysis – quantum – 47f3e71a1b1eb4a939d5f17639514334

Malware Analysis – quantum – ee9c6e60027c8ce65003de32d6125914

Malware Analysis – quantum – 87940b01f02d85d033dae35f8d01348f

Malware Analysis – djvu – 2626279a3e0fa86062f70eb41c454931

Malware Analysis – djvu – 0e27d37229646c4a68d258f19513bab2

Malware Analysis – djvu – 21b2fa42134d031de96e30172badfe1f

Malware Analysis – djvu – eb3a93b87aeebce36ef2c599a8a6dfbc

Malware Analysis – djvu – c0904e41ae1b556e10c96b0bb560c3a3

Malware Analysis – djvu – 65265918b765429783ce5fa95a0622a2

[EVEREST] – Ransomware Victim: Protected: Title Hidden

Empire C2 Detected – 45[.]60[.]39[.]14:8880

CISA: ASD’s ACSC, CISA, and US and International Partners Release Guidance on Choosing Secure and Verifiable Technologies

CISA: Cisco Releases Security Updates for NX-OS Software

CISA: Ivanti Releases Security Updates for Multiple Products

You may have missed