malware

Malware Analysis – chaos – 5e312e4f60bf214a45df187cc1cd5f5c

March 13, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, ransomware, spyware, stealerMD5: 5e312e4f60bf214a45df187cc1cd5f5cSHA1: 9bc19e38178a05eb39d579d979ac8520435b511cANALYSIS DATE: 2023-03-13T11:09:04ZTTPS: T1490, T1059, T1107, T1005, T1081, T1012, T1082,...

Malware Analysis – djvu – bed41626e3c2e63c2116b8a1ebdd0040

March 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: bed41626e3c2e63c2116b8a1ebdd0040SHA1: 65ffee674168fe776806ca1893fa23a33d728f4fANALYSIS DATE: 2023-03-13T04:22:58ZTTPS: T1060, T1112, T1005, T1081,...

Malware Analysis – djvu – db3b1259282cd38553edf7422ac9d94f

March 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: db3b1259282cd38553edf7422ac9d94fSHA1: 527fcb3da0e7f70d580e9d5f1e65ac83b16ef95dANALYSIS DATE: 2023-03-13T03:44:20ZTTPS: T1222, T1060, T1112, T1053,...

Malware Analysis – evasion – 4a1d88603b1007825a9c6b36d1e5de44

March 13, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealerMD5: 4a1d88603b1007825a9c6b36d1e5de44SHA1: 78a6e76ab32039576b52153b56f2e8bd035222c3ANALYSIS DATE: 2023-03-13T04:26:04ZTTPS: T1490, T1107, T1005, T1081, T1112, T1060, T1082...

Malware Analysis – djvu – 139bd947da6d9aae1a27aaad9f25b721

March 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 139bd947da6d9aae1a27aaad9f25b721SHA1: 2dc25ec38c0f2d9790d0b82009bd3f8e84beed65ANALYSIS DATE: 2023-03-13T03:03:25ZTTPS: T1082, T1005, T1081, T1012,...

Malware Analysis – neshta – 778607f5f1fd624ee1d4416ca564480c

March 13, 2023

Score: 10 MALWARE FAMILY: neshtaTAGS:family:neshta, evasion, persistence, ransomware, spyware, stealer, trojanMD5: 778607f5f1fd624ee1d4416ca564480cSHA1: 2efadc7b6cb0050028b93ce5b323b9134190c4cdANALYSIS DATE: 2023-03-13T04:35:03ZTTPS: T1107, T1490, T1112, T1042, T1005,...

Malware Analysis – djvu – 72cc285ac9110f915fe6717e29f90d93

March 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 72cc285ac9110f915fe6717e29f90d93SHA1: aba409cb226e570630e57430ff1d5b9a3ea63b1cANALYSIS DATE: 2023-03-13T05:17:54ZTTPS: T1005, T1081, T1222, T1082,...

Malware Analysis – amadey – c9d61c7680069f7915d24d65993fe18d

March 13, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:laplas, family:smokeloader, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, botnet:pub1, botnet:sprg, backdoor, clipper, discovery, ransomware, stealer, trojanMD5: c9d61c7680069f7915d24d65993fe18dSHA1: 0942de8a000fcad764f8a72386a2d3564c312414ANALYSIS...

Malware Analysis – amadey – 0dcd1571d3a66b2e1f3caf07b13be580

March 13, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:laplas, family:smokeloader, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, botnet:pub1, botnet:sprg, backdoor, clipper, discovery, evasion, persistence, ransomware, spyware, stealer,...

Malware Analysis – djvu – 6aff05293a29857132fb8d26079ccf10

March 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 6aff05293a29857132fb8d26079ccf10SHA1: 3c9e897e809a5cf7791c4c4466e086b4de6151e4ANALYSIS DATE: 2023-03-13T05:42:28ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – evasion – 2f82436e491b17c67a3ea0419f0b61de

March 13, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 2f82436e491b17c67a3ea0419f0b61deSHA1: 8e9e1a62762255f991df8d39d19f556d47debfeeANALYSIS DATE: 2023-03-13T05:55:10ZTTPS: T1082, T1012, T1107, T1490, T1112, T1120, T1031, T1562, T1489,...

Malware Analysis – evasion – efcfd5046a8d1a08dbcd6cc9e7fc42ef

March 13, 2023

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: efcfd5046a8d1a08dbcd6cc9e7fc42efSHA1: bc70fc4a300d68480cd04243524deede061b8668ANALYSIS DATE: 2023-03-13T05:37:41ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – 0bb361c2e737832052eaa517cd1e8525

March 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 0bb361c2e737832052eaa517cd1e8525SHA1: ff97a3b016e1fe5c62da7dbf028ac10e961c3c23ANALYSIS DATE: 2023-03-13T05:52:18ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – djvu – cecc648eb02909380c50591b77b7d3f5

March 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: cecc648eb02909380c50591b77b7d3f5SHA1: 7d28ca6aeb9240a7dfe727eee63a339e32f1dccaANALYSIS DATE: 2023-03-12T21:07:03ZTTPS: T1082, T1012, T1222, T1053,...

Malware Analysis – djvu – b130799726dabaaf72ac84f7f2d63d12

March 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: b130799726dabaaf72ac84f7f2d63d12SHA1: ed17fc6d8e4f3c135944d87af114873b94cf290aANALYSIS DATE: 2023-03-12T21:35:51ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – amadey – b2291621bf9facfa5e751ef3a25e661b

March 13, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:laplas, family:smokeloader, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, botnet:pub1, botnet:sprg, backdoor, clipper, discovery, persistence, ransomware, stealer, trojanMD5: b2291621bf9facfa5e751ef3a25e661bSHA1:...

Malware Analysis – djvu – 3caef158bc8153dabeb29bd182be014f

March 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 3caef158bc8153dabeb29bd182be014fSHA1: 9d59f28b84f6128a058076350692f51015792caeANALYSIS DATE: 2023-03-12T21:21:59ZTTPS: T1012, T1082, T1053, T1060,...

Malware Analysis – persistence – 51af19d91789adb15a320b1cd957de76

March 13, 2023

Score: 6 MALWARE FAMILY: persistenceTAGS:persistenceMD5: 51af19d91789adb15a320b1cd957de76SHA1: 38302244a37f533bbbe6a56b11927db36320a487ANALYSIS DATE: 2023-03-12T21:33:02ZTTPS: T1012, T1060, T1112, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – 7e92a06d32c57200219c0cc9d97a861d

March 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 7e92a06d32c57200219c0cc9d97a861dSHA1: da21b3e754ff8ca866888f25a264041e687c5193ANALYSIS DATE: 2023-03-12T22:03:19ZTTPS: T1060, T1112, T1222, T1082,...

Malware Analysis – djvu – 5cf63849b83b927ac72280efe35b181c

March 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 5cf63849b83b927ac72280efe35b181cSHA1: 6d4744697042fbe10bd0b82b767aac57673fc63eANALYSIS DATE: 2023-03-12T22:02:41ZTTPS: T1222, T1082, T1005, T1081,...

Malware Analysis – amadey – 1d6dab0fd592a665fb603479b4c06322

March 13, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:laplas, family:smokeloader, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, botnet:pub1, botnet:sprg, backdoor, clipper, discovery, evasion, ransomware, stealer, trojanMD5: 1d6dab0fd592a665fb603479b4c06322SHA1:...

Malware Analysis – evasion – 6c19c510b07618fcf0a30d18f7dcc64a

March 13, 2023

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 6c19c510b07618fcf0a30d18f7dcc64aSHA1: 1a615d575020cf6c7ea820ea638261c1af798fdbANALYSIS DATE: 2023-03-12T21:40:30ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – amadey – e8588889a5266696d152aefbe1003fb0

March 13, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:laplas, family:smokeloader, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, botnet:pub1, botnet:sprg, backdoor, clipper, discovery, evasion, ransomware, stealer, trojanMD5: e8588889a5266696d152aefbe1003fb0SHA1:...

Malware Analysis – djvu – 7cec9c11af7609a3d357889cb0fc3b9f

March 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 7cec9c11af7609a3d357889cb0fc3b9fSHA1: 6ceea7dc910dd061970fc8b7fa3106cb8739fcf7ANALYSIS DATE: 2023-03-12T23:31:28ZTTPS: T1005, T1081, T1082, T1012,...

malware

Malware Analysis – chaos – 5e312e4f60bf214a45df187cc1cd5f5c

Malware Analysis – djvu – bed41626e3c2e63c2116b8a1ebdd0040

Malware Analysis – djvu – db3b1259282cd38553edf7422ac9d94f

Malware Analysis – evasion – 4a1d88603b1007825a9c6b36d1e5de44

Malware Analysis – djvu – 139bd947da6d9aae1a27aaad9f25b721

Malware Analysis – neshta – 778607f5f1fd624ee1d4416ca564480c

Malware Analysis – djvu – 72cc285ac9110f915fe6717e29f90d93

Malware Analysis – amadey – c9d61c7680069f7915d24d65993fe18d

Malware Analysis – amadey – 0dcd1571d3a66b2e1f3caf07b13be580

Malware Analysis – djvu – 6aff05293a29857132fb8d26079ccf10

Malware Analysis – evasion – 2f82436e491b17c67a3ea0419f0b61de

Malware Analysis – evasion – efcfd5046a8d1a08dbcd6cc9e7fc42ef

Malware Analysis – djvu – 0bb361c2e737832052eaa517cd1e8525

Malware Analysis – djvu – cecc648eb02909380c50591b77b7d3f5

Malware Analysis – djvu – b130799726dabaaf72ac84f7f2d63d12

Malware Analysis – amadey – b2291621bf9facfa5e751ef3a25e661b

Malware Analysis – djvu – 3caef158bc8153dabeb29bd182be014f

Malware Analysis – persistence – 51af19d91789adb15a320b1cd957de76

Malware Analysis – djvu – 7e92a06d32c57200219c0cc9d97a861d

Malware Analysis – djvu – 5cf63849b83b927ac72280efe35b181c

Malware Analysis – amadey – 1d6dab0fd592a665fb603479b4c06322

Malware Analysis – evasion – 6c19c510b07618fcf0a30d18f7dcc64a

Malware Analysis – amadey – e8588889a5266696d152aefbe1003fb0

Malware Analysis – djvu – 7cec9c11af7609a3d357889cb0fc3b9f

[EVEREST] – Ransomware Victim: Protected: Title Hidden

Empire C2 Detected – 45[.]60[.]39[.]14:8880

CISA: ASD’s ACSC, CISA, and US and International Partners Release Guidance on Choosing Secure and Verifiable Technologies

CISA: Cisco Releases Security Updates for NX-OS Software

CISA: Ivanti Releases Security Updates for Multiple Products

You may have missed