Malware Analysis

Malware Analysis – evasion – 47bd2deca914a1687586f1532cd17c20

June 23, 2023

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealerMD5: 47bd2deca914a1687586f1532cd17c20SHA1: 4c698a81f7cd469276808c6f8244c9ccabc5291fANALYSIS DATE: 2023-06-23T17:13:58ZTTPS: T1490, T1031, T1562, T1489, T1082, T1005, T1081,...

Malware Analysis – egregor – 53370f3be23b9bed9d0e4f2992119448

June 23, 2023

Score: 10 MALWARE FAMILY: egregorTAGS:family:egregor, discovery, ransomwareMD5: 53370f3be23b9bed9d0e4f2992119448SHA1: 39e2162ef58f2e19f2b2af0e12d25fd1bcfe7691ANALYSIS DATE: 2023-06-23T16:07:59ZTTPS: T1012, T1082, T1057 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – 31ed190022685b6533d174fd5e042b83

June 23, 2023

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, upxMD5: 31ed190022685b6533d174fd5e042b83SHA1: 91fbb829f198afe9baae57b17bdb18a8ad487bc9ANALYSIS DATE: 2023-06-23T16:40:21ZTTPS: T1490, T1060, T1112, T1031, T1562, T1489,...

Malware Analysis – djvu – e0227bb951b0bd76d3a21ba42abd3574

June 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:153ce668f1e21829c936c2b11fa4d869, discovery, persistence, ransomware, spyware, stealerMD5: e0227bb951b0bd76d3a21ba42abd3574SHA1: d2c4f9ccaf0b92ebb9a6aba4179092f5df187da9ANALYSIS DATE: 2023-06-22T17:59:39ZTTPS: T1222, T1082, T1005, T1081,...

Malware Analysis – amadey – 14aa4c4bfae7b8b397572cd88870000e

June 22, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:fabookie, family:smokeloader, family:vidar, botnet:153ce668f1e21829c936c2b11fa4d869, botnet:pub1, backdoor, discovery, evasion, persistence, ransomware, spyware, stealer, trojanMD5: 14aa4c4bfae7b8b397572cd88870000eSHA1:...

Malware Analysis – djvu – 2a3f36cc1fd1f55dc98fd6592cd5d80a

June 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:153ce668f1e21829c936c2b11fa4d869, discovery, persistence, ransomware, spyware, stealerMD5: 2a3f36cc1fd1f55dc98fd6592cd5d80aSHA1: 9eabc031f809f6afd46f12de051a6b903952db7bANALYSIS DATE: 2023-06-22T18:54:29ZTTPS: T1060, T1112, T1005, T1081,...

Malware Analysis – evasion – 1b4e39e65dcc093252b4ddcf6951f258

June 22, 2023

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 1b4e39e65dcc093252b4ddcf6951f258SHA1: 36153e151d49ce560049a4e17d9118eac1bba135ANALYSIS DATE: 2023-06-22T19:18:20ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – 45841d5084e8b6dcb2cae5f631abf9d0

June 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:153ce668f1e21829c936c2b11fa4d869, discovery, persistence, ransomware, spyware, stealerMD5: 45841d5084e8b6dcb2cae5f631abf9d0SHA1: c9be8e5c7559dd9d623f94247cead30f3efaf231ANALYSIS DATE: 2023-06-22T18:16:28ZTTPS: T1082, T1012, T1053, T1005,...

Malware Analysis – discovery – ce900ddf20b2554e60cb17de79ddfa27

June 22, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, persistence, ransomware, trojanMD5: ce900ddf20b2554e60cb17de79ddfa27SHA1: 07b5f2d9e9683ca4bdf983f53b9726270094ffaaANALYSIS DATE: 2023-06-22T18:52:16ZTTPS: T1012, T1120, T1082, T1088, T1089, T1112, T1102,...

Malware Analysis – djvu – 9a978ce2ff697915c879d31785b37e16

June 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:153ce668f1e21829c936c2b11fa4d869, discovery, persistence, ransomware, spyware, stealerMD5: 9a978ce2ff697915c879d31785b37e16SHA1: bc58374ccf7bff13fb0bf0dfe17fb32c979979f4ANALYSIS DATE: 2023-06-22T15:58:08ZTTPS: T1060, T1112, T1222, T1082,...

Malware Analysis – amadey – feb6ecd04a1ad4ea6336f1c5e0f7c07c

June 22, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:fabookie, family:smokeloader, family:vidar, botnet:153ce668f1e21829c936c2b11fa4d869, botnet:pub1, backdoor, discovery, persistence, ransomware, spyware, stealer, trojanMD5: feb6ecd04a1ad4ea6336f1c5e0f7c07cSHA1: 2b3e00704e2780d33f0ce72bbd8f61115f8c55dcANALYSIS...

Malware Analysis – djvu – 0fa8f9afbe4ca05578fbc00fe8fd1e45

June 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:153ce668f1e21829c936c2b11fa4d869, discovery, persistence, ransomware, spyware, stealerMD5: 0fa8f9afbe4ca05578fbc00fe8fd1e45SHA1: b41ce3a558f981cbcc4819654564c8c497607611ANALYSIS DATE: 2023-06-22T16:15:27ZTTPS: T1005, T1081, T1060, T1112,...

Malware Analysis – persistence – 52105eaff1b7b02bf950b80771e9bda9

June 22, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 52105eaff1b7b02bf950b80771e9bda9SHA1: e16ecdfebf018faa7d4cf92ea03de06e5aa3e861ANALYSIS DATE: 2023-06-22T17:04:09ZTTPS: T1107, T1490, T1112, T1057, T1060, T1082, T1012, T1120,...

Malware Analysis – amadey – 9c13d9bdb722f723067c315d716e8128

June 22, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, botnet:pub1, backdoor, discovery, ransomware, trojanMD5: 9c13d9bdb722f723067c315d716e8128SHA1: f3398068d3e4f085a9a44adee2ebca5f60082ab2ANALYSIS DATE: 2023-06-22T16:35:54ZTTPS: T1012, T1120, T1082, T1222...

Malware Analysis – djvu – d66da7cdb4b5e5f5b18d686da4ea9d5c

June 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:153ce668f1e21829c936c2b11fa4d869, discovery, persistence, ransomware, spyware, stealerMD5: d66da7cdb4b5e5f5b18d686da4ea9d5cSHA1: 763add994f6ca9f305dcc21487da30de5aeaeeb4ANALYSIS DATE: 2023-06-22T16:37:55ZTTPS: T1005, T1081, T1222, T1082,...

Malware Analysis – adware – d729bf541459730df3ed688e115be8c8

June 22, 2023

Score: 9 MALWARE FAMILY: adwareTAGS:adware, bootkit, discovery, evasion, persistence, spyware, stealer, trojanMD5: d729bf541459730df3ed688e115be8c8SHA1: 93874ffeed48a4a7b035c1e2593f7fde3560a531ANALYSIS DATE: 2023-06-22T17:35:31ZTTPS: T1060, T1112, T1012, T1120,...

Malware Analysis – persistence – a0aad92f585dfc6ac762b5fc829e6fba

June 22, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: a0aad92f585dfc6ac762b5fc829e6fbaSHA1: 9ad2ae2c7fda526131ad6d535b21fe55d027d3aaANALYSIS DATE: 2023-06-22T17:04:36ZTTPS: T1060, T1112, T1082, T1057 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – 642dbe8b752b0dc735e9422d903e0e97

June 22, 2023

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, ransomware, spyware, stealerMD5: 642dbe8b752b0dc735e9422d903e0e97SHA1: df40a22f138548f4af363766eec48a4ea8b11fafANALYSIS DATE: 2023-06-22T17:05:02ZTTPS: T1490, T1059, T1107, T1082, T1012, T1491, T1112, T1005,...

Malware Analysis – persistence – a84957660902eb17fd021f3d187fb787

June 22, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: a84957660902eb17fd021f3d187fb787SHA1: cb3700cb561a449e6ff88978fb4ce1495982fe95ANALYSIS DATE: 2023-06-22T17:04:24ZTTPS: T1112, T1060, T1005, T1081, T1107, T1490, T1012, T1120,...

Malware Analysis – – aa50eeda9cc63c13cebfa138b2bdd626

June 17, 2023

Score: 7 MALWARE FAMILY: TAGS:MD5: aa50eeda9cc63c13cebfa138b2bdd626SHA1: 87c6e1f7726adfe88337f20acd2ff793cd22e346ANALYSIS DATE: 2023-06-17T16:16:52ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – discovery – 0c07a2e27d8ebbb10fd908f60a9a20d4

June 17, 2023

Score: 9 MALWARE FAMILY: discoveryTAGS:discovery, evasion, persistence, ransomwareMD5: 0c07a2e27d8ebbb10fd908f60a9a20d4SHA1: 863d0d533e3b5d6987a3d955a8894f2f26113bf3ANALYSIS DATE: 2023-06-17T15:46:05ZTTPS: T1490, T1112, T1060, T1222, T1082, T1059, T1012, T1120,...

Malware Analysis – ransomware – d0208c5f0aa7b445f4d3698824ccb935

June 17, 2023

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: d0208c5f0aa7b445f4d3698824ccb935SHA1: 4bdb2ec4f176a5795eb03986d6383f6379139232ANALYSIS DATE: 2023-06-17T15:31:26ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – banker – a5188ba8047225ba1e3d5d83d442a930

June 17, 2023

Score: 9 MALWARE FAMILY: bankerTAGS:banker, evasion, ransomwareMD5: a5188ba8047225ba1e3d5d83d442a930SHA1: 124b037ea265c9e13ccbe88695fa12a0c0648b03ANALYSIS DATE: 2023-06-17T17:14:16ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – e88948bf9115d1096f89bb4bf131bff0

June 17, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:a129a8292a021d62796bfced1018aa1f, discovery, persistence, ransomware, spyware, stealerMD5: e88948bf9115d1096f89bb4bf131bff0SHA1: 8134e8606ca1e42e17f18a5715db6d09c2941d26ANALYSIS DATE: 2023-06-17T17:10:39ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis

Malware Analysis – evasion – 47bd2deca914a1687586f1532cd17c20

Malware Analysis – egregor – 53370f3be23b9bed9d0e4f2992119448

Malware Analysis – evasion – 31ed190022685b6533d174fd5e042b83

Malware Analysis – djvu – e0227bb951b0bd76d3a21ba42abd3574

Malware Analysis – amadey – 14aa4c4bfae7b8b397572cd88870000e

Malware Analysis – djvu – 2a3f36cc1fd1f55dc98fd6592cd5d80a

Malware Analysis – evasion – 1b4e39e65dcc093252b4ddcf6951f258

Malware Analysis – djvu – 45841d5084e8b6dcb2cae5f631abf9d0

Malware Analysis – discovery – ce900ddf20b2554e60cb17de79ddfa27

Malware Analysis – djvu – 9a978ce2ff697915c879d31785b37e16

Malware Analysis – amadey – feb6ecd04a1ad4ea6336f1c5e0f7c07c

Malware Analysis – djvu – 0fa8f9afbe4ca05578fbc00fe8fd1e45

Malware Analysis – persistence – 52105eaff1b7b02bf950b80771e9bda9

Malware Analysis – amadey – 9c13d9bdb722f723067c315d716e8128

Malware Analysis – djvu – d66da7cdb4b5e5f5b18d686da4ea9d5c

Malware Analysis – adware – d729bf541459730df3ed688e115be8c8

Malware Analysis – persistence – a0aad92f585dfc6ac762b5fc829e6fba

Malware Analysis – evasion – 642dbe8b752b0dc735e9422d903e0e97

Malware Analysis – persistence – a84957660902eb17fd021f3d187fb787

Malware Analysis – – aa50eeda9cc63c13cebfa138b2bdd626

Malware Analysis – discovery – 0c07a2e27d8ebbb10fd908f60a9a20d4

Malware Analysis – ransomware – d0208c5f0aa7b445f4d3698824ccb935

Malware Analysis – banker – a5188ba8047225ba1e3d5d83d442a930

Malware Analysis – djvu – e88948bf9115d1096f89bb4bf131bff0

Cobalt Strike Beacon Detected – 198[.]181[.]32[.]32:80

Cobalt Strike Beacon Detected – 101[.]126[.]18[.]76:7979

Cobalt Strike Beacon Detected – 1[.]117[.]72[.]208:8080

Cobalt Strike Beacon Detected – 103[.]231[.]74[.]38:8443

Cobalt Strike Beacon Detected – 147[.]182[.]192[.]11:443

You may have missed