Malware Analysis

Malware Analysis – djvu – ed4fdb6a9120b4374f34ddb3585a8a7f

January 20, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: ed4fdb6a9120b4374f34ddb3585a8a7fSHA1: a6bb894ef720e4bb28def834cb03f503e7dd86abANALYSIS DATE: 2023-01-20T10:35:29ZTTPS: T1005, T1081, T1060, T1112,...

Malware Analysis – discovery – 12beb77b2c450a09e5de50f46b07a627

January 20, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 12beb77b2c450a09e5de50f46b07a627SHA1: 88d0b5c0036b913f981253ab97390af4afc5d70dANALYSIS DATE: 2023-01-20T03:01:17ZTTPS: T1060, T1012, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – f6bcf480cc1e928ab55ad9c3310919e6

January 20, 2023

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: f6bcf480cc1e928ab55ad9c3310919e6SHA1: dc21c53fee3dd49773fd2bd145ef57760b564b6bANALYSIS DATE: 2023-01-20T04:52:36ZTTPS: T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – ac76af59f88fe2a2ee090c7cd846a4df

January 20, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: ac76af59f88fe2a2ee090c7cd846a4dfSHA1: 8c8c4560e971d282291add3d902c5e3c69008c2eANALYSIS DATE: 2023-01-20T05:43:05ZTTPS: T1005, T1081, T1060, T1112,...

Malware Analysis – eternity – dafc8e7ccd381af36f19267a2a9b3f9b

January 20, 2023

Score: 10 MALWARE FAMILY: eternityTAGS:family:eternity, evasion, ransomwareMD5: dafc8e7ccd381af36f19267a2a9b3f9bSHA1: 742c9021f4f0fb264c32a59a66e3ac514b8e166bANALYSIS DATE: 2023-01-20T04:15:13ZTTPS: T1053, T1018, T1107, T1490, T1082 ScoreMeaningExample10Known badA malware family...

Malware Analysis – wannacry – 7339a0efc768310a86b6d4f61d88b910

January 20, 2023

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: 7339a0efc768310a86b6d4f61d88b910SHA1: 05cebfdb6729ed57ca111ae18b645335af7cf006ANALYSIS DATE: 2023-01-20T03:37:13ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – c266d56f0bbea899b2cfa58f192a9f86

January 19, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: c266d56f0bbea899b2cfa58f192a9f86SHA1: 0f2191d9571e04ed4cf14188b9eab8f210f6c652ANALYSIS DATE: 2023-01-19T16:59:57ZTTPS: T1222, T1082, T1005, T1081,...

Malware Analysis – persistence – da8e21489a2c6c01ee676c304c8541c1

January 19, 2023

Score: 8 MALWARE FAMILY: persistenceTAGS:persistenceMD5: da8e21489a2c6c01ee676c304c8541c1SHA1: 40e6d3aa1f0fa21fae1a9563174b45b432aa3306ANALYSIS DATE: 2023-01-19T17:42:31ZTTPS: T1060, T1112, T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 50fee0fee96a3c681b9c47eada3fffdf

January 19, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 50fee0fee96a3c681b9c47eada3fffdfSHA1: db64c7d74705e4a3c08ca50c140fa84d3c4fce09ANALYSIS DATE: 2023-01-19T17:22:07ZTTPS: T1012, T1222, T1082, T1005,...

Malware Analysis – locky – fb6ca1cd232151d667f6cd2484fee8c8

January 19, 2023

Score: 10 MALWARE FAMILY: lockyTAGS:family:locky, ransomwareMD5: fb6ca1cd232151d667f6cd2484fee8c8SHA1: f7bb52767afd2cd32ede8b5f83012eb99ba1ce28ANALYSIS DATE: 2023-01-19T17:42:29ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – discovery – 133af41cfec522b7f583fcf77be37b1a

January 19, 2023

Score: 8 MALWARE FAMILY: discoveryTAGS:discoveryMD5: 133af41cfec522b7f583fcf77be37b1aSHA1: 50fde70e193eeea8d15c13dfc62cdcb4cbc2bcd0ANALYSIS DATE: 2023-01-19T17:13:15ZTTPS: T1082, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – 1e12ef6d811ea006a932860cd74b0282

January 19, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, stealerMD5: 1e12ef6d811ea006a932860cd74b0282SHA1: fcbef26773b2ef3a41bf1a74f4ed59233283321dANALYSIS DATE: 2023-01-19T09:27:14ZTTPS: T1130, T1112, T1060, T1222, T1082,...

Malware Analysis – vidar – 6fb6025c04ba6fa3d4820aea944e3667

January 19, 2023

Score: 10 MALWARE FAMILY: vidarTAGS:family:vidar, botnet:408, discovery, persistence, ransomware, spyware, stealerMD5: 6fb6025c04ba6fa3d4820aea944e3667SHA1: b5fa73ed8561665ddaa9b9baecb427dd166d034bANALYSIS DATE: 2023-01-19T09:28:45ZTTPS: T1005, T1081, T1130, T1112, T1082,...

Malware Analysis – djvu – 892865bd136926da1ef72498bb1fb355

January 19, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 892865bd136926da1ef72498bb1fb355SHA1: 53103a535dd72d6156b0a2ba739071b98ec549a8ANALYSIS DATE: 2023-01-19T11:02:44ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – djvu – 30f074e92a9351c582e31b3be1e4a6c3

January 19, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:rhadamanthys, family:smokeloader, family:vidar, botnet:19, botnet:test, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5:...

Malware Analysis – djvu – 1c7c18d59d23a9901b0e2b8e48dcde2c

January 19, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, stealerMD5: 1c7c18d59d23a9901b0e2b8e48dcde2cSHA1: 4579072148edd252a0a6eaa87eea1a0f73599258ANALYSIS DATE: 2023-01-19T11:39:45ZTTPS: T1222, T1082, T1130, T1112, T1060...

Malware Analysis – – bf9859562a838793808f162f59a451a6

January 19, 2023

Score: 3 MALWARE FAMILY: TAGS:MD5: bf9859562a838793808f162f59a451a6SHA1: 6edf259df3a9031428ca8a2e56c4da1caff643afANALYSIS DATE: 2023-01-19T03:46:06ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – smokeloader – 0ed65c594991f0a57f7209966ce2c081

January 19, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 0ed65c594991f0a57f7209966ce2c081SHA1: 101e646cddf7eb518ed185e1946b3a2715b21057ANALYSIS DATE: 2023-01-19T03:05:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 1e61d2b0a41e30bb734ddbe53bb66880

January 19, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 1e61d2b0a41e30bb734ddbe53bb66880SHA1: 26dc0624b6d0286043cf55c3299bd14161f9e19fANALYSIS DATE: 2023-01-19T03:00:52ZTTPS: T1060, T1112, T1012, T1082,...

Malware Analysis – discovery – e2c876ff5b1f24b59d928e595234cdef

January 19, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, exploit, vmprotectMD5: e2c876ff5b1f24b59d928e595234cdefSHA1: 82d06b09b2a8c514929aab293242d4796d4ee39fANALYSIS DATE: 2023-01-19T04:56:27ZTTPS: T1031, T1562, T1489, T1222, T1112, T1082, T1053, T1102,...

Malware Analysis – – 6e5b443ec0bb37d7d7a332ee1de244b0

January 19, 2023

Score: 3 MALWARE FAMILY: TAGS:MD5: 6e5b443ec0bb37d7d7a332ee1de244b0SHA1: 0973b62f00138342e2f605fd04fe66a408611ab5ANALYSIS DATE: 2023-01-19T03:49:06ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – 1aef2be1b15c67a54cbc186937e4066d

January 19, 2023

Malware Analysis – djvu – 3ab3ff502bb6d6cda926109ce676fcbe

January 19, 2023

Malware Analysis – djvu – 81df0f3908f65a7a45c7a927a846f0c0

January 19, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, stealerMD5: 81df0f3908f65a7a45c7a927a846f0c0SHA1: 721c8a579f4cd376f2e286d29f517b0eb99aa018ANALYSIS DATE: 2023-01-19T05:35:02ZTTPS: T1082, T1053, T1130, T1112, T1060,...

Malware Analysis

Malware Analysis – djvu – ed4fdb6a9120b4374f34ddb3585a8a7f

Malware Analysis – discovery – 12beb77b2c450a09e5de50f46b07a627

Malware Analysis – ransomware – f6bcf480cc1e928ab55ad9c3310919e6

Malware Analysis – djvu – ac76af59f88fe2a2ee090c7cd846a4df

Malware Analysis – eternity – dafc8e7ccd381af36f19267a2a9b3f9b

Malware Analysis – wannacry – 7339a0efc768310a86b6d4f61d88b910

Malware Analysis – djvu – c266d56f0bbea899b2cfa58f192a9f86

Malware Analysis – persistence – da8e21489a2c6c01ee676c304c8541c1

Malware Analysis – djvu – 50fee0fee96a3c681b9c47eada3fffdf

Malware Analysis – locky – fb6ca1cd232151d667f6cd2484fee8c8

Malware Analysis – discovery – 133af41cfec522b7f583fcf77be37b1a

Malware Analysis – djvu – 1e12ef6d811ea006a932860cd74b0282

Malware Analysis – vidar – 6fb6025c04ba6fa3d4820aea944e3667

Malware Analysis – djvu – 892865bd136926da1ef72498bb1fb355

Malware Analysis – djvu – 30f074e92a9351c582e31b3be1e4a6c3

Malware Analysis – djvu – 1c7c18d59d23a9901b0e2b8e48dcde2c

Malware Analysis – – bf9859562a838793808f162f59a451a6

Malware Analysis – smokeloader – 0ed65c594991f0a57f7209966ce2c081

Malware Analysis – djvu – 1e61d2b0a41e30bb734ddbe53bb66880

Malware Analysis – discovery – e2c876ff5b1f24b59d928e595234cdef

Malware Analysis – – 6e5b443ec0bb37d7d7a332ee1de244b0

Malware Analysis – djvu – 1aef2be1b15c67a54cbc186937e4066d

Malware Analysis – djvu – 3ab3ff502bb6d6cda926109ce676fcbe

Malware Analysis – djvu – 81df0f3908f65a7a45c7a927a846f0c0

Brute Ratel C4 Detected – 43[.]206[.]86[.]29:80

[CACTUS] – Ransomware Victim: urban1[.]com

[CACTUS] – Ransomware Victim: rocketstores[.]com

[AKIRA] – Ransomware Victim: Helmut Hölbling Spedition GmbH

[RANSOMHUB] – Ransomware Victim: www[.]visualisation[.]one

You may have missed