malware

Malware Analysis – smokeloader – e2d2f8d3ce4b85cfa4fe4ed1558210ea

March 19, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: e2d2f8d3ce4b85cfa4fe4ed1558210eaSHA1: 38ce578e3f7bf9e44cd1d39f0428bfb0661c6516ANALYSIS DATE: 2023-03-19T18:41:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 458ea61b5eb9053e3c99e0370030fece

March 19, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 458ea61b5eb9053e3c99e0370030feceSHA1: c241bf248b0550a120dd95d69d6ea78e101005a3ANALYSIS DATE: 2023-03-19T18:06:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – 71515b54f8c857828314eac86d900e44

March 18, 2023

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 71515b54f8c857828314eac86d900e44SHA1: 2aebbcd2f22169737773c02e3b39d46d9eef1335ANALYSIS DATE: 2023-03-18T18:34:46ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – 4a840c4933e0b53e8176d9c6d4d5cf03

March 18, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: 4a840c4933e0b53e8176d9c6d4d5cf03SHA1: 1c4f48707754c66a3b7253d1d800c12be559d7acANALYSIS DATE: 2023-03-18T18:48:04ZTTPS: T1130, T1112, T1222, T1005,...

Malware Analysis – banker – 1a652905b726faeefc531904b2316102

March 18, 2023

Score: 8 MALWARE FAMILY: bankerTAGS:banker, evasion, ransomwareMD5: 1a652905b726faeefc531904b2316102SHA1: 6d8773ac17b703ee2e266681a7ee9f432232bd0cANALYSIS DATE: 2023-03-18T18:19:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – banker – a5dd75a7cc6640fe1be9323929dd5d00

March 18, 2023

Score: 8 MALWARE FAMILY: bankerTAGS:banker, evasion, ransomwareMD5: a5dd75a7cc6640fe1be9323929dd5d00SHA1: cc84b198042a7b6dee0448bfe92ca01f44815fe5ANALYSIS DATE: 2023-03-18T18:08:26ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – 778d2e97d2a7cc562fa58a9513eefdeb

March 18, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: 778d2e97d2a7cc562fa58a9513eefdebSHA1: 17fa33d8f906c419e727a8f897006a935b4ed2d8ANALYSIS DATE: 2023-03-18T18:53:05ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – smokeloader – e6652c1511ede9dfebfb0df34f969b45

March 18, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: e6652c1511ede9dfebfb0df34f969b45SHA1: 9afcff5870833214744feba664de65a14d824bc6ANALYSIS DATE: 2023-03-18T18:49:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 83c2df30653a05c396fe3ec54d40c136

March 18, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: 83c2df30653a05c396fe3ec54d40c136SHA1: d011e9ddb6dd044cab5aee2630b5904e72b87c04ANALYSIS DATE: 2023-03-18T18:50:03ZTTPS: T1005, T1081, T1130, T1112,...

Malware Analysis – djvu – 1830f8b1c1f66b27314673f8a42fdd57

March 18, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: 1830f8b1c1f66b27314673f8a42fdd57SHA1: cfab9bce032baf7292c23f1c928898d151d2f03eANALYSIS DATE: 2023-03-18T18:51:05ZTTPS: T1130, T1112, T1053, T1012,...

Malware Analysis – gafgyt – bb5ac3218b68aec33e16261196971d7f

March 17, 2023

Score: 10 MALWARE FAMILY: gafgytTAGS:family:gafgyt, family:plugx, family:redline, botnet, discovery, exploit, infostealer, persistence, trojanMD5: bb5ac3218b68aec33e16261196971d7fSHA1: 7df56150a22016e079c4b3e3a45446bffc2fcd9eANALYSIS DATE: 2023-03-17T16:30:04ZTTPS: T1082, T1050, T1060,...

Malware Analysis – djvu – 68b0f16d837d77eb7edb40ade07b3844

March 17, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: 68b0f16d837d77eb7edb40ade07b3844SHA1: e235b7725b1c1e5c7162f0010a7db46073b80040ANALYSIS DATE: 2023-03-17T16:15:06ZTTPS: T1060, T1112, T1012, T1082,...

Malware Analysis – djvu – ce3b3de5f62d393aeebd49c31bd29d41

March 17, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: ce3b3de5f62d393aeebd49c31bd29d41SHA1: 154ab2adc0f1921e0a2d6956e33d980e921a901fANALYSIS DATE: 2023-03-17T16:11:34ZTTPS: T1222, T1012, T1082, T1053,...

Malware Analysis – amadey – 06c1e142d1c9f438103774ec50d9b348

March 17, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:rhadamanthys, family:smokeloader, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, botnet:pub1, botnet:sprg, backdoor, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 06c1e142d1c9f438103774ec50d9b348SHA1:...

Malware Analysis – ransomware – 3b56fee645b36a022471189294485517

March 17, 2023

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 3b56fee645b36a022471189294485517SHA1: 90138e3902b096a89b03271ea664ccc6193b766cANALYSIS DATE: 2023-03-17T17:07:14ZTTPS: T1005, T1081, T1491, T1112, T1082 ScoreMeaningExample10Known badA malware family...

Malware Analysis – discovery – 7a42e24c7b1607887a49e5929d38f8f9

March 17, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 7a42e24c7b1607887a49e5929d38f8f9SHA1: 41f9462a8182758714761a839664f69d9d2c3b7eANALYSIS DATE: 2023-03-17T17:26:40ZTTPS: T1060, T1112, T1012, T1042, T1082, T1130 ScoreMeaningExample10Known badA malware...

Malware Analysis – smokeloader – 3e59d07d7af4a0b0314ffcbff5fd12d8

March 17, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 3e59d07d7af4a0b0314ffcbff5fd12d8SHA1: fc32ffaf265d7b38adc59092c967babf1fd92baaANALYSIS DATE: 2023-03-17T17:31:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – bea14d484e11b88a5a1f76233f52f732

March 17, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: bea14d484e11b88a5a1f76233f52f732SHA1: 0c391495bc75c4926b52b14fdd27bd3f7e410911ANALYSIS DATE: 2023-03-17T17:52:32ZTTPS: T1222, T1060, T1112, T1005,...

Malware Analysis – amadey – a480e4bf51162bfd63ed718149a4a608

March 17, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:rhadamanthys, family:smokeloader, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, botnet:pub1, botnet:sprg, backdoor, discovery, persistence, ransomware, stealer, trojanMD5: a480e4bf51162bfd63ed718149a4a608SHA1: 16b9d95ce72eceef41e51df9c30c1f84e63d9d72ANALYSIS...

Malware Analysis – djvu – 26551b9c3dbace2dd837828f85d078bd

March 17, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: 26551b9c3dbace2dd837828f85d078bdSHA1: 52ca324a5cf64db3586f4b2d5f9607144b044c74ANALYSIS DATE: 2023-03-17T17:50:19ZTTPS: T1012, T1222, T1082, T1053,...

Malware Analysis – ransomware – 2e7a4354b997f086db89e1a28ca60816

March 17, 2023

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 2e7a4354b997f086db89e1a28ca60816SHA1: ee98de0cbeefd9df93c364719b2ae69696f32382ANALYSIS DATE: 2023-03-17T18:12:54ZTTPS: T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – amadey – 0467ee15f3d5c79b87072154404b778a

March 16, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:laplas, family:redline, family:smokeloader, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, botnet:fronx2, botnet:pub1, botnet:sprg, backdoor, clipper, discovery, infostealer, persistence, ransomware,...

Malware Analysis – djvu – 4b8dcfeef9843f465a21b69037359414

March 16, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: 4b8dcfeef9843f465a21b69037359414SHA1: cedd04d7d3f268b1486ee6096f2fdcc22e20d735ANALYSIS DATE: 2023-03-16T16:45:21ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – amadey – a6ffaf58c5eecf62f76e64c7ce96579f

March 16, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, botnet:pub1, backdoor, discovery, ransomware, trojanMD5: a6ffaf58c5eecf62f76e64c7ce96579fSHA1: 2f0f6319c08605806a6df43b63b40fec14b7758bANALYSIS DATE: 2023-03-16T16:42:16ZTTPS: T1222, T1053, T1012, T1120,...

malware

Malware Analysis – smokeloader – e2d2f8d3ce4b85cfa4fe4ed1558210ea

Malware Analysis – smokeloader – 458ea61b5eb9053e3c99e0370030fece

Malware Analysis – evasion – 71515b54f8c857828314eac86d900e44

Malware Analysis – djvu – 4a840c4933e0b53e8176d9c6d4d5cf03

Malware Analysis – banker – 1a652905b726faeefc531904b2316102

Malware Analysis – banker – a5dd75a7cc6640fe1be9323929dd5d00

Malware Analysis – djvu – 778d2e97d2a7cc562fa58a9513eefdeb

Malware Analysis – smokeloader – e6652c1511ede9dfebfb0df34f969b45

Malware Analysis – djvu – 83c2df30653a05c396fe3ec54d40c136

Malware Analysis – djvu – 1830f8b1c1f66b27314673f8a42fdd57

Malware Analysis – gafgyt – bb5ac3218b68aec33e16261196971d7f

Malware Analysis – djvu – 68b0f16d837d77eb7edb40ade07b3844

Malware Analysis – djvu – ce3b3de5f62d393aeebd49c31bd29d41

Malware Analysis – amadey – 06c1e142d1c9f438103774ec50d9b348

Malware Analysis – ransomware – 3b56fee645b36a022471189294485517

Malware Analysis – discovery – 7a42e24c7b1607887a49e5929d38f8f9

Malware Analysis – smokeloader – 3e59d07d7af4a0b0314ffcbff5fd12d8

Malware Analysis – djvu – bea14d484e11b88a5a1f76233f52f732

Malware Analysis – amadey – a480e4bf51162bfd63ed718149a4a608

Malware Analysis – djvu – 26551b9c3dbace2dd837828f85d078bd

Malware Analysis – ransomware – 2e7a4354b997f086db89e1a28ca60816

Malware Analysis – amadey – 0467ee15f3d5c79b87072154404b778a

Malware Analysis – djvu – 4b8dcfeef9843f465a21b69037359414

Malware Analysis – amadey – a6ffaf58c5eecf62f76e64c7ce96579f

[EMBARGO] – Ransomware Victim: backyarddiscovery[.]com

[APT73] – Ransomware Victim: www[.]sansirostadium[.]com

[SARCOMA] – Ransomware Victim: Chema Per

[SARCOMA] – Ransomware Victim: EP:Schuller

CVE Alert: CVE-2024-53865

You may have missed