Malware Analysis

Malware Analysis – smokeloader – b02479a6c16c1571bf7b6bf934253d52

February 13, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: b02479a6c16c1571bf7b6bf934253d52SHA1: 716af19d87a39199273b8612b0adabe66cb9ec2cANALYSIS DATE: 2023-02-13T11:07:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – 56d6acb0c2d633d15c85b6076a777f52

February 13, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 56d6acb0c2d633d15c85b6076a777f52SHA1: 9b374eabfe300fc1aba7c90ddd184bf49cc9c475ANALYSIS DATE: 2023-02-13T11:15:09ZTTPS: T1012, T1082, T1112, T1042, T1060 ScoreMeaningExample10Known badA malware family...

Malware Analysis – – 244f46780caa83b92f7379239599440f

February 13, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: 244f46780caa83b92f7379239599440fSHA1: a4b8a6ff8ef0aeceac679a4da652b04d1ff3f033ANALYSIS DATE: 2023-02-13T11:25:50ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – smokeloader – 80b50e333e346fc877328d1ad3e2c0e4

February 13, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 80b50e333e346fc877328d1ad3e2c0e4SHA1: dc968b26bcd01cefb79a5865087b3f872394e29fANALYSIS DATE: 2023-02-13T03:02:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – octo – 229771c39436dc8dcf656b86021fa5a1

February 13, 2023

Score: 10 MALWARE FAMILY: octoTAGS:family:octo, banker, evasion, infostealer, ransomware, rat, trojanMD5: 229771c39436dc8dcf656b86021fa5a1SHA1: 61a94c8e576ad8f5efedebc3438b2cb67941fb33ANALYSIS DATE: 2023-02-13T02:58:17ZTTPS: ScoreMeaningExample10Known badA malware family was...

Malware Analysis – evasion – 11b95a7ff7a5bf4dd07ef50d9d2d55f1

February 13, 2023

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 11b95a7ff7a5bf4dd07ef50d9d2d55f1SHA1: 7b0929727f6ff913c6f24b19dd7ec13b00693894ANALYSIS DATE: 2023-02-13T03:18:34ZTTPS: T1012, T1082, T1060, T1112, T1491, T1120 ScoreMeaningExample10Known badA malware...

Malware Analysis – discovery – c9d398b0b57f099e4405d878f8cae4ec

February 13, 2023

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, persistenceMD5: c9d398b0b57f099e4405d878f8cae4ecSHA1: 0fcab4492c6a47d9846e905b573e6645bb062554ANALYSIS DATE: 2023-02-13T03:02:12ZTTPS: T1060, T1082, T1222, T1012 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – djvu – ee12a9d02f45005bf7b170b7c830803d

February 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:laplas, family:rhadamanthys, family:smokeloader, family:vidar, botnet:19, backdoor, clipper, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: ee12a9d02f45005bf7b170b7c830803dSHA1:...

Malware Analysis – djvu – 3ab1a1a239e014d563c3a9bbb0492f29

February 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 3ab1a1a239e014d563c3a9bbb0492f29SHA1: de619d9dd49163cf0be8cd777ec9666a6e5e3a23ANALYSIS DATE: 2023-02-13T03:24:35ZTTPS: T1012, T1082, T1222, T1053,...

Malware Analysis – ransomware – 5f8946681a31e505ae08bb52c759adb5

February 13, 2023

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 5f8946681a31e505ae08bb52c759adb5SHA1: 332fcdeffda7aa2927f59438d84038f3d4096f8fANALYSIS DATE: 2023-02-13T05:54:12ZTTPS: T1012, T1082, T1057 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – djvu – 4ab7e38f1d06c623036555954c3f1918

February 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 4ab7e38f1d06c623036555954c3f1918SHA1: 3599db93f3825bdf8a7b339c405c8194f9c3a675ANALYSIS DATE: 2023-02-13T05:23:52ZTTPS: T1012, T1082, T1222, T1005,...

Malware Analysis – smokeloader – 46de5533299ec397c04dabb10f3bb157

February 13, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 46de5533299ec397c04dabb10f3bb157SHA1: 764e0fa6f5db8e7f352a632a53e9632ee2fcc772ANALYSIS DATE: 2023-02-13T05:05:30ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – lockbit – e9cd8c321b68118611a0863b0b91b8f5

February 13, 2023

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, discovery, evasion, persistence, ransomwareMD5: e9cd8c321b68118611a0863b0b91b8f5SHA1: dde3509b41639f4ae7383bcd7b1c17db88b667cfANALYSIS DATE: 2023-02-13T05:20:04ZTTPS: T1490, T1046, T1107, T1491, T1112, T1060, T1018,...

Malware Analysis – banker – 757ecb313fa062bd376df95e00b64627

February 12, 2023

Score: 8 MALWARE FAMILY: bankerTAGS:banker, ransomwareMD5: 757ecb313fa062bd376df95e00b64627SHA1: 336fc4bf6a46e78c41b98cdace7348ff70e800f0ANALYSIS DATE: 2023-01-30T09:06:35ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – a7c1891fa46875989205d76567a8975f

February 12, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:rhadamanthys, family:smokeloader, backdoor, discovery, persistence, ransomware, stealer, trojan, vmprotectMD5: a7c1891fa46875989205d76567a8975fSHA1: 3ccbba1b2ec99f9d6e4eca2332f0d20cb22829dfANALYSIS DATE: 2023-02-12T09:11:04ZTTPS: T1082, T1012,...

Malware Analysis – djvu – 630717681fcc3eea95825d3fd0c489f1

February 12, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 630717681fcc3eea95825d3fd0c489f1SHA1: ba5a2c63e7c4a2ef7587da8c0dfbb5aefb6cef1dANALYSIS DATE: 2023-02-12T09:47:18ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – djvu – fcad46ff6a14f8bab7b7b22a93f3557a

February 12, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: fcad46ff6a14f8bab7b7b22a93f3557aSHA1: 91829e367a65b5d3cedac193235bf1871de922eaANALYSIS DATE: 2023-02-12T09:26:54ZTTPS: T1060, T1112, T1222, T1082, T1053 ScoreMeaningExample10Known badA malware...

Malware Analysis – smokeloader – 4252a5583234f80329ef453dfd253be4

February 12, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 4252a5583234f80329ef453dfd253be4SHA1: 87a8a128ce59ff461724eedde72fec288bcbba11ANALYSIS DATE: 2023-02-12T09:17:09ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 3b22e5432ed609b29d6f2620161debcd

February 12, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 3b22e5432ed609b29d6f2620161debcdSHA1: 3b40352996f3a9db62a39e82c7f92eefa4e73bd3ANALYSIS DATE: 2023-02-12T09:31:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – – d5671758956b39e048680b6a8275e96a

February 12, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: d5671758956b39e048680b6a8275e96aSHA1: 33c341130bf9c93311001a6284692c86fec200efANALYSIS DATE: 2023-02-12T10:29:50ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – a291f52688753bfec2f04434a6275823

February 12, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:rhadamanthys, family:smokeloader, backdoor, discovery, persistence, ransomware, stealer, trojan, vmprotectMD5: a291f52688753bfec2f04434a6275823SHA1: 56f088a229ca6e97b6f9bf97953d22eb0317d7caANALYSIS DATE: 2023-02-12T10:41:53ZTTPS: T1012, T1082,...

Malware Analysis – smokeloader – bf216a294f44d0e6ab8cf375867d0ccc

February 12, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: bf216a294f44d0e6ab8cf375867d0cccSHA1: 0f2c939a394bed4166500e37dfaf89c18211296aANALYSIS DATE: 2023-02-12T11:35:07ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – e8f4df71d5b432592e1773af5894a497

February 12, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: e8f4df71d5b432592e1773af5894a497SHA1: c1fbe81d2d02d340c85929b4b9b0e26c4deb2927ANALYSIS DATE: 2023-02-12T11:50:41ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – djvu – 546bd5b73d6424c4f1cab3f906dd208b

February 12, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 546bd5b73d6424c4f1cab3f906dd208bSHA1: 547cc739d50e2e10a673a08ceb64dfd612dc5f32ANALYSIS DATE: 2023-02-12T03:16:19ZTTPS: T1082, T1005, T1081, T1053,...

Malware Analysis

Malware Analysis – smokeloader – b02479a6c16c1571bf7b6bf934253d52

Malware Analysis – discovery – 56d6acb0c2d633d15c85b6076a777f52

Malware Analysis – – 244f46780caa83b92f7379239599440f

Malware Analysis – smokeloader – 80b50e333e346fc877328d1ad3e2c0e4

Malware Analysis – octo – 229771c39436dc8dcf656b86021fa5a1

Malware Analysis – evasion – 11b95a7ff7a5bf4dd07ef50d9d2d55f1

Malware Analysis – discovery – c9d398b0b57f099e4405d878f8cae4ec

Malware Analysis – djvu – ee12a9d02f45005bf7b170b7c830803d

Malware Analysis – djvu – 3ab1a1a239e014d563c3a9bbb0492f29

Malware Analysis – ransomware – 5f8946681a31e505ae08bb52c759adb5

Malware Analysis – djvu – 4ab7e38f1d06c623036555954c3f1918

Malware Analysis – smokeloader – 46de5533299ec397c04dabb10f3bb157

Malware Analysis – lockbit – e9cd8c321b68118611a0863b0b91b8f5

Malware Analysis – banker – 757ecb313fa062bd376df95e00b64627

Malware Analysis – djvu – a7c1891fa46875989205d76567a8975f

Malware Analysis – djvu – 630717681fcc3eea95825d3fd0c489f1

Malware Analysis – djvu – fcad46ff6a14f8bab7b7b22a93f3557a

Malware Analysis – smokeloader – 4252a5583234f80329ef453dfd253be4

Malware Analysis – smokeloader – 3b22e5432ed609b29d6f2620161debcd

Malware Analysis – – d5671758956b39e048680b6a8275e96a

Malware Analysis – djvu – a291f52688753bfec2f04434a6275823

Malware Analysis – smokeloader – bf216a294f44d0e6ab8cf375867d0ccc

Malware Analysis – djvu – e8f4df71d5b432592e1773af5894a497

Malware Analysis – djvu – 546bd5b73d6424c4f1cab3f906dd208b

Cobalt Strike Beacon Detected – 47[.]96[.]143[.]115:8086

Cobalt Strike Beacon Detected – 8[.]217[.]7[.]159:4321

[BLACKBASTA] – Ransomware Victim: bnext[.]nl

[BLACKBASTA] – Ransomware Victim: migonline[.]com

[CLOP] – Ransomware Victim: EKOMERCIO[.]COM

You may have missed