malware

Malware Analysis – djvu – 4d8f01c686b099f19366ee38ac8b423c

October 8, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:raccoon, family:smokeloader, family:vidar, botnet:17aad1e8aa2ca5164d7690cff1926390, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 4d8f01c686b099f19366ee38ac8b423cSHA1: 8b12aff95432b1a081a0ab98e8ac12f7a6b98787ANALYSIS...

Malware Analysis – smokeloader – 0a6d023a881a991889d17599933d54dc

October 8, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 0a6d023a881a991889d17599933d54dcSHA1: 1b76869811dc1454a02d8040b93c8f18235275a7ANALYSIS DATE: 2022-10-07T20:02:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 5a57749940203a2e3cf95db11cd5aa24

October 8, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 5a57749940203a2e3cf95db11cd5aa24SHA1: 9d515f5c1b69d8383c7ade501a8eaba614fec817ANALYSIS DATE: 2022-10-07T20:08:30ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – djvu – 5a8964c1736685a4722e620d684039a8

October 8, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 5a8964c1736685a4722e620d684039a8SHA1: ac4960c01594cbc5ca318e2750f4c3be8e6d3648ANALYSIS DATE: 2022-10-07T20:06:42ZTTPS: T1222, T1012, T1005, T1081,...

Malware Analysis – amadey – 202ed4dfaa2620644047a5352e4b4837

October 8, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:dcrat, family:djvu, family:raccoon, family:smokeloader, family:vidar, botnet:17aad1e8aa2ca5164d7690cff1926390, botnet:517, botnet:9333547b6d5c69ea798fd93c66d78435, backdoor, collection, discovery, infostealer, persistence, ransomware, rat,...

Malware Analysis – smokeloader – 202ed4dfaa2620644047a5352e4b4837

October 8, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 202ed4dfaa2620644047a5352e4b4837SHA1: b67aa9b87cd0bd54303e709081219b4a72484a80ANALYSIS DATE: 2022-10-07T21:01:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery –

October 8, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: SHA1: ANALYSIS DATE: 2022-10-07T20:43:33ZTTPS: T1060, T1012, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – dcrat – 0a6d023a881a991889d17599933d54dc

October 8, 2022

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, family:djvu, family:raccoon, family:smokeloader, family:vidar, botnet:517, botnet:9333547b6d5c69ea798fd93c66d78435, backdoor, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealer,...

Malware Analysis – redline –

October 8, 2022

Score: 10 MALWARE FAMILY: redlineTAGS:family:redline, discovery, infostealer, persistence, ransomware, spywareMD5: SHA1: ANALYSIS DATE: 2022-10-07T21:42:51ZTTPS: T1112, T1042, T1012, T1053, T1082, T1060,...

Malware Analysis – djvu – 1cddff2e62db2216a698dac1725cbf5a

October 8, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 1cddff2e62db2216a698dac1725cbf5aSHA1: ea7b217b1072045dae8ecf6900324ede5b63254cANALYSIS DATE: 2022-10-07T21:34:30ZTTPS: T1222, T1082, T1053, T1012,...

Malware Analysis – chaos – 7207ca74c41a0334f0d686efb3cb6adf

October 8, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, ransomwareMD5: 7207ca74c41a0334f0d686efb3cb6adfSHA1: aaeac974a5b9c87c7d533930ff3eac496c3e5f79ANALYSIS DATE: 2022-10-07T21:58:35ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – a355bf6cf3be6df5ae5b5bdd33167a79

October 8, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: a355bf6cf3be6df5ae5b5bdd33167a79SHA1: 737f5ff38ed8beef74d21744695222e6ff62de96ANALYSIS DATE: 2022-10-07T21:54:34ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – chaos – 7207ca74c41a0334f0d686efb3cb6adf

October 8, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, persistence, ransomwareMD5: 7207ca74c41a0334f0d686efb3cb6adfSHA1: aaeac974a5b9c87c7d533930ff3eac496c3e5f79ANALYSIS DATE: 2022-10-07T21:59:02ZTTPS: T1060, T1112, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – amadey – ab52d0e0c28f95e72dbb57892b79821d

October 8, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:dcrat, family:djvu, family:raccoon, family:smokeloader, family:vidar, botnet:17aad1e8aa2ca5164d7690cff1926390, botnet:517, backdoor, collection, discovery, infostealer, persistence, ransomware, rat, spyware,...

Malware Analysis – djvu – 15de1f9a2b55567830664ae564c30ef9

October 8, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 15de1f9a2b55567830664ae564c30ef9SHA1: 51bc75bf526b4be34f25b99e8d0c025c95dea9fbANALYSIS DATE: 2022-10-07T22:52:24ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – smokeloader – ab52d0e0c28f95e72dbb57892b79821d

October 8, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: ab52d0e0c28f95e72dbb57892b79821dSHA1: 57fa91bd1a4cbd66df19d6fcd7252a79355a8691ANALYSIS DATE: 2022-10-07T22:01:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – buran – 298dcc1285045bc397ef95ec583901da

October 7, 2022

Score: 10 MALWARE FAMILY: buranTAGS:family:buran, family:zeppelin, persistence, ransomwareMD5: 298dcc1285045bc397ef95ec583901daSHA1: 0b983d8948b282a76bece44d61e9ac73f10cfd31ANALYSIS DATE: 2022-10-07T14:07:19ZTTPS: T1060, T1112, T1082, T1012, T1120, T1107, T1490 ScoreMeaningExample10Known...

Malware Analysis – djvu – c4f3002f464ea20138a60555160f7d1c

October 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: c4f3002f464ea20138a60555160f7d1cSHA1: 1a96c10736b4d96cc9b1fd8a8d5b0f3eeae46949ANALYSIS DATE: 2022-10-07T14:17:01ZTTPS:...

Malware Analysis – persistence – 7918a614a2c0f30c7f1db6ee1cb49e08

October 7, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 7918a614a2c0f30c7f1db6ee1cb49e08SHA1: 81f27dd1fee271b51d253ca862d4712dbd5e2b78ANALYSIS DATE: 2022-10-07T14:20:53ZTTPS: T1107, T1490, T1060, T1112, T1491, T1082, T1012, T1120 ScoreMeaningExample10Known badA...

Malware Analysis – globeimposter – 59e3542c4d5293a1a12b2bb6cb357d92

October 7, 2022

Score: 10 MALWARE FAMILY: globeimposterTAGS:family:globeimposter, family:medusalocker, persistence, ransomware, spyware, stealerMD5: 59e3542c4d5293a1a12b2bb6cb357d92SHA1: f31322bc47eec5f5c7da0e46f23fb868c982daa1ANALYSIS DATE: 2022-10-07T14:25:21ZTTPS: T1060, T1112, T1005, T1081, T1082 ScoreMeaningExample10Known...

Malware Analysis – djvu – 1ff3d11cc1370a5d2cbb78b3f296a3ac

October 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 1ff3d11cc1370a5d2cbb78b3f296a3acSHA1: e5944dcb4ba10c8358ca625680d4ed8ec2cfdae6ANALYSIS DATE: 2022-10-07T14:40:34ZTTPS: T1012, T1082, T1222, T1053,...

Malware Analysis – smokeloader – c4f3002f464ea20138a60555160f7d1c

October 7, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: c4f3002f464ea20138a60555160f7d1cSHA1: 1a96c10736b4d96cc9b1fd8a8d5b0f3eeae46949ANALYSIS DATE: 2022-10-07T14:41:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – a45bf5a897a017bfd0ba54be36b2be78

October 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: a45bf5a897a017bfd0ba54be36b2be78SHA1: fa54653817ff04a1dc06970602eab8e626f6885eANALYSIS DATE: 2022-10-07T15:22:49ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – djvu – 83584c13cb7552c9457896335da9fcfd

October 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 83584c13cb7552c9457896335da9fcfdSHA1: 7df13451b370887175457d72b18354400450bd90ANALYSIS DATE: 2022-10-07T15:20:35ZTTPS: T1222, T1082, T1012, T1005,...

malware

Malware Analysis – djvu – 4d8f01c686b099f19366ee38ac8b423c

Malware Analysis – smokeloader – 0a6d023a881a991889d17599933d54dc

Malware Analysis – djvu – 5a57749940203a2e3cf95db11cd5aa24

Malware Analysis – djvu – 5a8964c1736685a4722e620d684039a8

Malware Analysis – amadey – 202ed4dfaa2620644047a5352e4b4837

Malware Analysis – smokeloader – 202ed4dfaa2620644047a5352e4b4837

Malware Analysis – discovery –

Malware Analysis – dcrat – 0a6d023a881a991889d17599933d54dc

Malware Analysis – redline –

Malware Analysis – djvu – 1cddff2e62db2216a698dac1725cbf5a

Malware Analysis – chaos – 7207ca74c41a0334f0d686efb3cb6adf

Malware Analysis – djvu – a355bf6cf3be6df5ae5b5bdd33167a79

Malware Analysis – chaos – 7207ca74c41a0334f0d686efb3cb6adf

Malware Analysis – amadey – ab52d0e0c28f95e72dbb57892b79821d

Malware Analysis – djvu – 15de1f9a2b55567830664ae564c30ef9

Malware Analysis – smokeloader – ab52d0e0c28f95e72dbb57892b79821d

Malware Analysis – buran – 298dcc1285045bc397ef95ec583901da

Malware Analysis – djvu – c4f3002f464ea20138a60555160f7d1c

Malware Analysis – persistence – 7918a614a2c0f30c7f1db6ee1cb49e08

Malware Analysis – globeimposter – 59e3542c4d5293a1a12b2bb6cb357d92

Malware Analysis – djvu – 1ff3d11cc1370a5d2cbb78b3f296a3ac

Malware Analysis – smokeloader – c4f3002f464ea20138a60555160f7d1c

Malware Analysis – djvu – a45bf5a897a017bfd0ba54be36b2be78

Malware Analysis – djvu – 83584c13cb7552c9457896335da9fcfd

[RANSOMHUB] – Ransomware Victim: drive-lines[.]com

[RANSOMHUB] – Ransomware Victim: castlehillha[.]co[.]uk

[MEDUSA] – Ransomware Victim: Rent-2-Own

[APT73] – Ransomware Victim: pnp[.]co[.]za

[EMBARGO] – Ransomware Victim: alansarioman[.]com

You may have missed