Malware Analysis

Malware Analysis – persistence – ad69026f0cf984eaef62389e9b8ab266

February 21, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: ad69026f0cf984eaef62389e9b8ab266SHA1: 29d3d01ce6827de4298c7bea23acd2b74053991dANALYSIS DATE: 2023-02-21T11:53:28ZTTPS: T1005, T1081, T1060, T1112 ScoreMeaningExample10Known badA malware family...

Malware Analysis – persistence – 13973e33f8be47f2d8fdc3f492ae2a3d

February 21, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 13973e33f8be47f2d8fdc3f492ae2a3dSHA1: 08415d3285d4a535d2b604c2831d5f181ec402c5ANALYSIS DATE: 2023-02-21T11:53:27ZTTPS: T1005, T1081, T1060, T1112 ScoreMeaningExample10Known badA malware family...

Malware Analysis – xorist – cb255677750b445152be5798a1382e38

February 21, 2023

Score: 10 MALWARE FAMILY: xoristTAGS:family:xorist, persistence, ransomware, spyware, stealer, upxMD5: cb255677750b445152be5798a1382e38SHA1: 498f445a465d22ab2c3cee7cdd36487068135569ANALYSIS DATE: 2023-02-21T11:53:25ZTTPS: T1060, T1112, T1012, T1005, T1081 ScoreMeaningExample10Known...

Malware Analysis – xorist – 0da42b36896f93a1a517f69c7fc19773

February 21, 2023

Score: 10 MALWARE FAMILY: xoristTAGS:family:xorist, persistence, ransomware, spyware, stealer, upxMD5: 0da42b36896f93a1a517f69c7fc19773SHA1: 2730de840fec2cb457db0329bb5d53794c48db6eANALYSIS DATE: 2023-02-21T11:53:23ZTTPS: T1005, T1081, T1060, T1112, T1091 ScoreMeaningExample10Known...

Malware Analysis – persistence – 08daf2314b45178ae2f161597f271958

February 21, 2023

Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 08daf2314b45178ae2f161597f271958SHA1: 5b762a27cda5e435b7e2c7de7734eef8a744c226ANALYSIS DATE: 2023-02-21T11:53:37ZTTPS: T1005, T1081, T1060, T1112 ScoreMeaningExample10Known badA malware family...

Malware Analysis – neshta – 7c68b6a3494c0f2d1197d8bb5d787494

February 21, 2023

Score: 10 MALWARE FAMILY: neshtaTAGS:family:neshta, family:xorist, persistence, ransomware, spyware, stealer, upxMD5: 7c68b6a3494c0f2d1197d8bb5d787494SHA1: 15292934b45b68f367e3a868fb71a7fa2d8a77b9ANALYSIS DATE: 2023-02-21T11:53:29ZTTPS: T1112, T1042, T1005, T1081, T1082,...

Malware Analysis – xorist – 4a5757268b4092888d356752f9c08c69

February 21, 2023

Score: 10 MALWARE FAMILY: xoristTAGS:family:xorist, persistence, ransomware, spyware, stealer, upxMD5: 4a5757268b4092888d356752f9c08c69SHA1: fe609e6a0b803a777cacd32313ab06ce36491293ANALYSIS DATE: 2023-02-21T11:53:35ZTTPS: T1060, T1112, T1005, T1081 ScoreMeaningExample10Known badA...

Malware Analysis – xorist – 17918fb06d51823743387d4d7a1c7e33

February 21, 2023

Score: 10 MALWARE FAMILY: xoristTAGS:family:xorist, persistence, ransomware, spyware, stealer, upxMD5: 17918fb06d51823743387d4d7a1c7e33SHA1: b5e38e285f983ed6b6065525f67b60c9e671517bANALYSIS DATE: 2023-02-21T11:53:31ZTTPS: T1060, T1112, T1005, T1081 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – ce97b8938c3342b78ee9f45c9cfa528f

February 21, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: ce97b8938c3342b78ee9f45c9cfa528fSHA1: 1cecd17eb48803c393e44b39b4f887ee57f19541ANALYSIS DATE: 2023-02-21T03:16:18ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – djvu – e19cb0a09fa6ad4162d2faed1772a2ea

February 21, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: e19cb0a09fa6ad4162d2faed1772a2eaSHA1: 0c5302720091348b33d5f21d76cc4df9bc7df503ANALYSIS DATE: 2023-02-21T03:04:11ZTTPS: T1082, T1005, T1081, T1012,...

Malware Analysis – djvu – 57bea51fa7d68734cd7d73f4adf78995

February 21, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:pseudomanuscrypt, family:rhadamanthys, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, evasion, loader, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5:...

Malware Analysis – djvu – 0725ad29651b7b0a49f213dc38f73185

February 21, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:rhadamanthys, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, evasion, persistence, ransomware, stealer, trojan, vmprotectMD5: 0725ad29651b7b0a49f213dc38f73185SHA1: 05597deb81686634992d0e2546a70dd1d24fc5daANALYSIS DATE:...

Malware Analysis – djvu – ea2f8aa6c71ea98450efdf5d62d4660a

February 21, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: ea2f8aa6c71ea98450efdf5d62d4660aSHA1: cc2f3e843d8be20b2e40a59f65f0a141b7c626a9ANALYSIS DATE: 2023-02-21T05:48:05ZTTPS: T1012, T1082, T1053, T1060,...

Malware Analysis – djvu – 45f9335fcefc8ff05db68a33b618b079

February 21, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:rhadamanthys, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, evasion, persistence, ransomware, stealer, trojan, vmprotectMD5: 45f9335fcefc8ff05db68a33b618b079SHA1: 1928b38120ab18f78619fc4b2b477e406bfb10cfANALYSIS DATE:...

Malware Analysis – djvu – 0baa2b5fe7fdcf60eac072abc8a3f846

February 21, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 0baa2b5fe7fdcf60eac072abc8a3f846SHA1: e6db234e2d4c281864b1917603431d37fc1d9ccaANALYSIS DATE: 2023-02-21T05:38:39ZTTPS: T1082, T1005, T1081, T1012,...

Malware Analysis – djvu – e703fdec53502a33899a69a88033a1e9

February 21, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: e703fdec53502a33899a69a88033a1e9SHA1: 8df68f60069eadcd4a039d8a87f9c88ba7aba327ANALYSIS DATE: 2023-02-21T04:52:37ZTTPS: T1060, T1112, T1053, T1005,...

Malware Analysis – djvu – 145466b3234adf3b9745ea36d0531ec0

February 21, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:rhadamanthys, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, evasion, persistence, ransomware, stealer, trojan, vmprotectMD5: 145466b3234adf3b9745ea36d0531ec0SHA1: 01a065a2cc04eb82f484e43f34cab6e921178559ANALYSIS DATE:...

Malware Analysis – azorult – 95c07f579072736d838d64806fd67ca8

February 21, 2023

Score: 10 MALWARE FAMILY: azorultTAGS:family:azorult, family:nemty, infostealer, persistence, ransomware, trojanMD5: 95c07f579072736d838d64806fd67ca8SHA1: 68831bd4c5f6d05f39f18ea2d759b106d328f982ANALYSIS DATE: 2023-02-20T21:38:01ZTTPS: T1107, T1490, T1130, T1112, T1082, T1060...

Malware Analysis – djvu – a277bc6dc30196870c6fe05164c1ea2c

February 21, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: a277bc6dc30196870c6fe05164c1ea2cSHA1: e352a9c79393e857c080b13c64f9bfd477b6a2c9ANALYSIS DATE: 2023-02-20T23:42:45ZTTPS: T1222, T1012, T1005, T1081,...

Malware Analysis – djvu – b63f8a61fb95a0186241e5fcf517434a

February 21, 2023

Malware Analysis – djvu – 89686a2a2c7fc145a54f12c3d5fdf735

February 21, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 89686a2a2c7fc145a54f12c3d5fdf735SHA1: 2e70fe844424a67e66560b070220a141080af5a2ANALYSIS DATE: 2023-02-20T23:36:04ZTTPS: T1012, T1082, T1060, T1112,...

Malware Analysis – dmalocker – 6b8dcb09a6f8e836b5dcc600d11c6223

February 21, 2023

Score: 10 MALWARE FAMILY: dmalockerTAGS:family:dmalocker, family:hawkeye, family:locky, family:locky_osiris, family:modiloader, family:wannacry, discovery, keylogger, persistence, ransomware, spyware, stealer, trojan, upx, wormMD5: 6b8dcb09a6f8e836b5dcc600d11c6223SHA1:...

Malware Analysis – djvu – cd4aeb1380ba490dc8526d9a2bf3af60

February 20, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: cd4aeb1380ba490dc8526d9a2bf3af60SHA1: 2c2376140cb62b7156399e819bce3fc001a74245ANALYSIS DATE: 2023-02-20T09:17:45ZTTPS: T1060, T1112, T1053, T1005,...

Malware Analysis – persistence – 4d1590f74f68d5588d17fdb24c156bf0

February 20, 2023

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, upxMD5: 4d1590f74f68d5588d17fdb24c156bf0SHA1: ec3efeaa2ffd2f154bd9c62c3289a52f2ea1843fANALYSIS DATE: 2023-02-20T09:57:47ZTTPS: T1082, T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family...

Malware Analysis

Malware Analysis – persistence – ad69026f0cf984eaef62389e9b8ab266

Malware Analysis – persistence – 13973e33f8be47f2d8fdc3f492ae2a3d

Malware Analysis – xorist – cb255677750b445152be5798a1382e38

Malware Analysis – xorist – 0da42b36896f93a1a517f69c7fc19773

Malware Analysis – persistence – 08daf2314b45178ae2f161597f271958

Malware Analysis – neshta – 7c68b6a3494c0f2d1197d8bb5d787494

Malware Analysis – xorist – 4a5757268b4092888d356752f9c08c69

Malware Analysis – xorist – 17918fb06d51823743387d4d7a1c7e33

Malware Analysis – djvu – ce97b8938c3342b78ee9f45c9cfa528f

Malware Analysis – djvu – e19cb0a09fa6ad4162d2faed1772a2ea

Malware Analysis – djvu – 57bea51fa7d68734cd7d73f4adf78995

Malware Analysis – djvu – 0725ad29651b7b0a49f213dc38f73185

Malware Analysis – djvu – ea2f8aa6c71ea98450efdf5d62d4660a

Malware Analysis – djvu – 45f9335fcefc8ff05db68a33b618b079

Malware Analysis – djvu – 0baa2b5fe7fdcf60eac072abc8a3f846

Malware Analysis – djvu – e703fdec53502a33899a69a88033a1e9

Malware Analysis – djvu – 145466b3234adf3b9745ea36d0531ec0

Malware Analysis – azorult – 95c07f579072736d838d64806fd67ca8

Malware Analysis – djvu – a277bc6dc30196870c6fe05164c1ea2c

Malware Analysis – djvu – b63f8a61fb95a0186241e5fcf517434a

Malware Analysis – djvu – 89686a2a2c7fc145a54f12c3d5fdf735

Malware Analysis – dmalocker – 6b8dcb09a6f8e836b5dcc600d11c6223

Malware Analysis – djvu – cd4aeb1380ba490dc8526d9a2bf3af60

Malware Analysis – persistence – 4d1590f74f68d5588d17fdb24c156bf0

CISA: CISA Releases Fact Sheet Detailing Embedded Backdoor Function of Contec CMS8000 Firmware

CISA: CISA Releases Nine Industrial Control Systems Advisories

CISA: CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA: CISA Partners with ASD’s ACSC, CCCS, NCSC-UK, and Other International and US Organizations to Release Guidance on Edge Devices

CISA: CISA Adds One Known Exploited Vulnerability to Catalog

You may have missed