Malware Analysis

Malware Analysis – djvu – c0904e41ae1b556e10c96b0bb560c3a3

February 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: c0904e41ae1b556e10c96b0bb560c3a3SHA1: 42f10936c427306bb9dd573d2b8269ea9abd0e06ANALYSIS DATE: 2023-02-21T22:11:42ZTTPS: T1060, T1112, T1222, T1005,...

Malware Analysis – discovery – aaa0a4c3e66a85daa7f5d639e4cbb569

February 22, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, persistence, ransomwareMD5: aaa0a4c3e66a85daa7f5d639e4cbb569SHA1: 7cd22ae424f29b1aa127c8b19c215bdca57a3921ANALYSIS DATE: 2023-02-21T22:26:45ZTTPS: T1112, T1107, T1490, T1089, T1060, T1012, T1102, T1158,...

Malware Analysis – – 8bf945bbf9308d79875d4000db5272e2

February 22, 2023

Score: 7 MALWARE FAMILY: TAGS:MD5: 8bf945bbf9308d79875d4000db5272e2SHA1: 92f9abadb7ebc187304da07ec01469ad6958d220ANALYSIS DATE: 2023-02-21T22:33:10ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – 57a2bb0db2912fc739932cd12df7bc65

February 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:pseudomanuscrypt, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, evasion, loader, persistence, ransomware, stealer, trojan, vmprotectMD5: 57a2bb0db2912fc739932cd12df7bc65SHA1: 4d4491b07ced2422c14af94a87aec540d94a3e35ANALYSIS...

Malware Analysis – ransomware – 3907c7fbd4148395284d8e6e3c1dba5d

February 22, 2023

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 3907c7fbd4148395284d8e6e3c1dba5dSHA1: a67205dc84ec29eb71bb259b19c1a1783865c0fcANALYSIS DATE: 2023-02-21T23:41:14ZTTPS: T1005, T1081, T1018 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 45f9335fcefc8ff05db68a33b618b079

February 21, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 45f9335fcefc8ff05db68a33b618b079SHA1: 1928b38120ab18f78619fc4b2b477e406bfb10cfANALYSIS DATE: 2023-02-21T09:31:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – – e1ddaabd6670e833268511839fdc9fa4

February 21, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: e1ddaabd6670e833268511839fdc9fa4SHA1: ab90a6db6e088ad5c6b1ab0f095255e6e10e122aANALYSIS DATE: 2023-02-21T09:43:33ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – smokeloader – b63f8a61fb95a0186241e5fcf517434a

February 21, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: b63f8a61fb95a0186241e5fcf517434aSHA1: 7e8bc5300560f9b0614a96b33016ff3dbb389b61ANALYSIS DATE: 2023-02-21T09:06:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 57bea51fa7d68734cd7d73f4adf78995

February 21, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 57bea51fa7d68734cd7d73f4adf78995SHA1: 451b2cb0928cf1397b101954797d6a714bba0359ANALYSIS DATE: 2023-02-21T10:11:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 3a02e44029ea6e83d55d28f386addd12

February 21, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 3a02e44029ea6e83d55d28f386addd12SHA1: 117eac938bffbfeb4b8c7c2c56a127e62c10b904ANALYSIS DATE: 2023-02-21T10:13:55ZTTPS: T1082, T1012, T1005, T1081,...

Malware Analysis – djvu – 13ac56707b9294519be6f69d193aab58

February 21, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:pseudomanuscrypt, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, evasion, loader, persistence, ransomware, stealer, trojan, vmprotectMD5: 13ac56707b9294519be6f69d193aab58SHA1: 0d9b4a06e0ee67aff16f4e58f86d2d07c1a7198dANALYSIS...

Malware Analysis – djvu – f52a9a82201e80b74d883d82e651b264

February 21, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: f52a9a82201e80b74d883d82e651b264SHA1: 71c911801a0419b1e023b9f02215b3c8352d0028ANALYSIS DATE: 2023-02-21T10:13:33ZTTPS: T1060, T1112, T1222, T1012,...

Malware Analysis – djvu – aa427a05fe7f08184f2d67e55ce5a979

February 21, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, backdoor, discovery, persistence, ransomware, trojan, vmprotectMD5: aa427a05fe7f08184f2d67e55ce5a979SHA1: 3927895dfbbae47cbb01ff589095f4cf22556d69ANALYSIS DATE: 2023-02-21T11:19:15ZTTPS: T1012, T1082, T1060, T1112,...

Malware Analysis – djvu – c1da85373dedb8932a7c3c67cf5acd7f

February 21, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: c1da85373dedb8932a7c3c67cf5acd7fSHA1: b3b9a8171c37d0d90b030842bf57c5b52aef86eaANALYSIS DATE: 2023-02-21T10:45:32ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – djvu – e2bea73993c9fa4a45dea11c7decd890

February 21, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: e2bea73993c9fa4a45dea11c7decd890SHA1: c22c715f915d04362567f28b6c08d843937a10edANALYSIS DATE: 2023-02-21T11:05:40ZTTPS: T1053, T1060, T1112, T1082,...

Malware Analysis – smokeloader – 00f4a48364a6b7dda4bf98e3847fd94c

February 21, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 00f4a48364a6b7dda4bf98e3847fd94cSHA1: f5287134ebc11785912f8c44a3c709233a8f7facANALYSIS DATE: 2023-02-21T11:16:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 46be31fc9c8e72c15148145e04694436

February 21, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 46be31fc9c8e72c15148145e04694436SHA1: a820d2e760fb9b5983ec4d40883be9daed9d9fbeANALYSIS DATE: 2023-02-21T11:21:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – persistence – eb5b75b1fad5aa53d127788b17d3b275

February 21, 2023

Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: eb5b75b1fad5aa53d127788b17d3b275SHA1: cb59283379a2fc7e63faa713c637dd3e7dfc80fbANALYSIS DATE: 2023-02-21T11:44:58ZTTPS: T1060, T1112, T1005, T1081 ScoreMeaningExample10Known badA malware family...

Malware Analysis – smokeloader – 4e1d3b852081588e65fa84fa25c24de3

February 21, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 4e1d3b852081588e65fa84fa25c24de3SHA1: 58b384db9659fc8f6aefb70a288addccc27da330ANALYSIS DATE: 2023-02-21T11:36:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – – 2075566e7855679d66705741dabe82b4

February 21, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: 2075566e7855679d66705741dabe82b4SHA1: 136443e2746558b403ae6fc9d9b40bfa92b23420ANALYSIS DATE: 2023-02-21T11:34:42ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – xorist – 55b1eeeb199b4210063c1bb7a77abb25

February 21, 2023

Score: 10 MALWARE FAMILY: xoristTAGS:family:xorist, persistence, ransomware, spyware, stealer, upxMD5: 55b1eeeb199b4210063c1bb7a77abb25SHA1: 35f1491934e585fdf2df1a8276d8aa303c4594bdANALYSIS DATE: 2023-02-21T11:48:30ZTTPS: T1005, T1081, T1060, T1112 ScoreMeaningExample10Known badA...

Malware Analysis – xorist – 1887e84a16365a8de7522804b86dac25

February 21, 2023

Score: 10 MALWARE FAMILY: xoristTAGS:family:xorist, persistence, ransomware, spyware, stealer, upxMD5: 1887e84a16365a8de7522804b86dac25SHA1: f2f6edd89efa30cf81ce77e7b5b6787ef5401824ANALYSIS DATE: 2023-02-21T11:47:28ZTTPS: T1060, T1112, T1005, T1081 ScoreMeaningExample10Known badA...

Malware Analysis – xorist – 80d330fd5fe1eb4229a0c0505cbad070

February 21, 2023

Score: 10 MALWARE FAMILY: xoristTAGS:family:xorist, persistence, ransomware, spyware, stealer, upxMD5: 80d330fd5fe1eb4229a0c0505cbad070SHA1: 872a0059726d7354d0197ba209733e195b16623bANALYSIS DATE: 2023-02-21T11:53:20ZTTPS: T1060, T1112, T1005, T1081 ScoreMeaningExample10Known badA...

Malware Analysis – persistence – 8a17c0c50660056bce6a0292d302ebbe

February 21, 2023

Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 8a17c0c50660056bce6a0292d302ebbeSHA1: 57a42db01fd1ad220012f3bcb824181b1b275ce6ANALYSIS DATE: 2023-02-21T11:53:18ZTTPS: T1060, T1112, T1005, T1081 ScoreMeaningExample10Known badA malware family...

Malware Analysis

Malware Analysis – djvu – c0904e41ae1b556e10c96b0bb560c3a3

Malware Analysis – discovery – aaa0a4c3e66a85daa7f5d639e4cbb569

Malware Analysis – – 8bf945bbf9308d79875d4000db5272e2

Malware Analysis – djvu – 57a2bb0db2912fc739932cd12df7bc65

Malware Analysis – ransomware – 3907c7fbd4148395284d8e6e3c1dba5d

Malware Analysis – smokeloader – 45f9335fcefc8ff05db68a33b618b079

Malware Analysis – – e1ddaabd6670e833268511839fdc9fa4

Malware Analysis – smokeloader – b63f8a61fb95a0186241e5fcf517434a

Malware Analysis – smokeloader – 57bea51fa7d68734cd7d73f4adf78995

Malware Analysis – djvu – 3a02e44029ea6e83d55d28f386addd12

Malware Analysis – djvu – 13ac56707b9294519be6f69d193aab58

Malware Analysis – djvu – f52a9a82201e80b74d883d82e651b264

Malware Analysis – djvu – aa427a05fe7f08184f2d67e55ce5a979

Malware Analysis – djvu – c1da85373dedb8932a7c3c67cf5acd7f

Malware Analysis – djvu – e2bea73993c9fa4a45dea11c7decd890

Malware Analysis – smokeloader – 00f4a48364a6b7dda4bf98e3847fd94c

Malware Analysis – smokeloader – 46be31fc9c8e72c15148145e04694436

Malware Analysis – persistence – eb5b75b1fad5aa53d127788b17d3b275

Malware Analysis – smokeloader – 4e1d3b852081588e65fa84fa25c24de3

Malware Analysis – – 2075566e7855679d66705741dabe82b4

Malware Analysis – xorist – 55b1eeeb199b4210063c1bb7a77abb25

Malware Analysis – xorist – 1887e84a16365a8de7522804b86dac25

Malware Analysis – xorist – 80d330fd5fe1eb4229a0c0505cbad070

Malware Analysis – persistence – 8a17c0c50660056bce6a0292d302ebbe

CISA: CISA Releases Fact Sheet Detailing Embedded Backdoor Function of Contec CMS8000 Firmware

CISA: CISA Releases Nine Industrial Control Systems Advisories

CISA: CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA: CISA Partners with ASD’s ACSC, CCCS, NCSC-UK, and Other International and US Organizations to Release Guidance on Edge Devices

CISA: CISA Adds One Known Exploited Vulnerability to Catalog

You may have missed