Security

Malware Analysis – evasion – 185fba63c25db9d2d63cd4ce519c35b7

October 12, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, ransomware, spyware, stealer, upxMD5: 185fba63c25db9d2d63cd4ce519c35b7SHA1: c4d034ede11dcd493ee28f7fc632a4795d7bf665ANALYSIS DATE: 2022-10-11T19:55:02ZTTPS: T1057, T1158, T1112, T1005, T1081, T1107, T1490,...

Malware Analysis – djvu – 8f7da1f9d1716d1850448b0dcb52c03f

October 12, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 8f7da1f9d1716d1850448b0dcb52c03fSHA1: ccd7d15c3f0b57ee1a6cfd5e75505c768d4c445fANALYSIS DATE: 2022-10-12T02:10:46ZTTPS: T1005, T1081, T1082, T1053,...

Malware Analysis – spyware – 644399a0aff07bd4f7dc1eb5aa5c0236

October 12, 2022

Score: 8 MALWARE FAMILY: spywareTAGS:spyware, stealerMD5: 644399a0aff07bd4f7dc1eb5aa5c0236SHA1: 243f1f7bb95af8d3c44a270772f408c6febb06afANALYSIS DATE: 2022-10-12T02:30:33ZTTPS: T1012, T1082, T1112, T1005, T1081 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – ransomware – 21bc1c5e98d4bf41365a44e88086c31f

October 12, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 21bc1c5e98d4bf41365a44e88086c31fSHA1: 9ecb76a713e8f29541766ea894bc0c62fadc7424ANALYSIS DATE: 2022-10-12T03:39:07ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – smokeloader – f24080143671873e32f7c8ec1b118208

October 12, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: f24080143671873e32f7c8ec1b118208SHA1: 303041ee15dd2f2e65d8a9989a7477a709e95ec8ANALYSIS DATE: 2022-10-12T03:06:11ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – e808bb23350d08b14a9119b692c8ee58

October 12, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: e808bb23350d08b14a9119b692c8ee58SHA1: 6aa51612791dee2862fe36cab58b1bbfa4513df9ANALYSIS DATE: 2022-10-12T02:32:58ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 725475ddc9e0b4faa9bbc1fdb10f85d2

October 12, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 725475ddc9e0b4faa9bbc1fdb10f85d2SHA1: cf772b4bab641ba2245b03423ac385b0691d567eANALYSIS DATE: 2022-10-12T03:40:05ZTTPS: T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – ec7478f1351f6452b6e15d14217a3a62

October 12, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: ec7478f1351f6452b6e15d14217a3a62SHA1: 3dfa5c4361d89807a45ba6e60dfe8fe6a167e00aANALYSIS DATE: 2022-10-12T03:39:33ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 9ab7e303b8526e80304d3efd4e9ef066

October 12, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 9ab7e303b8526e80304d3efd4e9ef066SHA1: a20e4f6e4f6a72f65885b562bd13c2648954d5b1ANALYSIS DATE: 2022-10-12T03:40:09ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 8c9c8c78ef28d02eef8264809cec0f11

October 12, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 8c9c8c78ef28d02eef8264809cec0f11SHA1: f767f65d272ac322dd2c6a6a075f216aece2a1b0ANALYSIS DATE: 2022-10-12T03:40:09ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – wannacry – 8a6b804142e22265de773a3abf0bd047

October 12, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 8a6b804142e22265de773a3abf0bd047SHA1: 10ff8adbc4d1a8302e31cee6913c8f14d0a78387ANALYSIS DATE: 2022-10-12T03:42:03ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – – 6d309b5782e0aa8ee536188b9038341d

October 12, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 6d309b5782e0aa8ee536188b9038341dSHA1: 530380931c3bc4093073c61a2e8939bf3fabe994ANALYSIS DATE: 2022-10-12T03:40:54ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – wannacry – a51beb6c0ac1650cc9161d77a7b4ffe4

October 12, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: a51beb6c0ac1650cc9161d77a7b4ffe4SHA1: 140e7d3e026ed3e9372630792966943cafdf7d8cANALYSIS DATE: 2022-10-12T03:41:04ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – 05ea8a5639a077d9a930b4651f97a5e4

October 12, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, collection, discovery, persistence, ransomware, spyware, stealer, vmprotectMD5: 05ea8a5639a077d9a930b4651f97a5e4SHA1: 9c65d4a9da6f52b1deacd09bd45b9f2a8453ce20ANALYSIS DATE: 2022-10-12T03:40:56ZTTPS: T1114, T1012,...

Malware Analysis – ransomware – 771cd68a3b03318fabd9112733cf589b

October 12, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 771cd68a3b03318fabd9112733cf589bSHA1: 5eff34f55cb1cf311bfa2bf7b6f7d47c99ef87eeANALYSIS DATE: 2022-10-12T04:19:24ZTTPS: T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – 0030061143793e596dacd17918e0fdb0

October 12, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 0030061143793e596dacd17918e0fdb0SHA1: 7d2c097a367b58be0ba233a025778b2b57c078c8ANALYSIS DATE: 2022-10-12T04:20:05ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 41b2eb48ece8309621624bdc00a5b84e

October 12, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 41b2eb48ece8309621624bdc00a5b84eSHA1: 5fb468319040b0f2aeb89b3534130ccf96999850ANALYSIS DATE: 2022-10-12T04:02:06ZTTPS: T1082, T1012, T1060, T1112,...

Malware Analysis – ransomware – 46a201b8e6764adcb3163d49c0a7881b

October 12, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 46a201b8e6764adcb3163d49c0a7881bSHA1: 98d40fa0e4c39b3ecc04f71b1f952d6677107986ANALYSIS DATE: 2022-10-12T04:20:05ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – wannacry – 2eda905ddece5a601ce82ad106707697

October 12, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: 2eda905ddece5a601ce82ad106707697SHA1: 73f8b1f266cc7bd575261290a9b01537d11d41b3ANALYSIS DATE: 2022-10-12T04:22:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – persistence – 7c88843932ed5fca7c04eb20ff322ab6

October 12, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 7c88843932ed5fca7c04eb20ff322ab6SHA1: 247b25a926ab2bc863c8f2bc1aa28705edb044afANALYSIS DATE: 2022-10-12T04:22:03ZTTPS: T1107, T1490, T1082, T1012, T1120, T1005, T1081, T1060,...

Malware Analysis – wannacry – f59c100dc24aee439206d9a3989232ce

October 12, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: f59c100dc24aee439206d9a3989232ceSHA1: 371e747153587bde7a8efb12f9484e4e23174f1fANALYSIS DATE: 2022-10-12T04:22:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – ransomware – c0a95f24ae226e0e55e23bf623bccad6

October 12, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: c0a95f24ae226e0e55e23bf623bccad6SHA1: 3ac93a6cdc0b7e8ade586a19a64f97eb9e6a9a0bANALYSIS DATE: 2022-10-12T04:20:06ZTTPS: T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – wannacry – 1d38638153085a0a0f0a4f7174e52a9b

October 12, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: 1d38638153085a0a0f0a4f7174e52a9bSHA1: f0bb8179052451ac327e6fff048bc27c73bf7310ANALYSIS DATE: 2022-10-12T04:22:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – smokeloader – 041397972137dba410b074da3f72f700

October 12, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 041397972137dba410b074da3f72f700SHA1: 932d1dbadd55b612e40f8d9e9487201e8a493814ANALYSIS DATE: 2022-10-12T04:33:38ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Security

Malware Analysis – evasion – 185fba63c25db9d2d63cd4ce519c35b7

Malware Analysis – djvu – 8f7da1f9d1716d1850448b0dcb52c03f

Malware Analysis – spyware – 644399a0aff07bd4f7dc1eb5aa5c0236

Malware Analysis – ransomware – 21bc1c5e98d4bf41365a44e88086c31f

Malware Analysis – smokeloader – f24080143671873e32f7c8ec1b118208

Malware Analysis – smokeloader – e808bb23350d08b14a9119b692c8ee58

Malware Analysis – ransomware – 725475ddc9e0b4faa9bbc1fdb10f85d2

Malware Analysis – ransomware – ec7478f1351f6452b6e15d14217a3a62

Malware Analysis – ransomware – 9ab7e303b8526e80304d3efd4e9ef066

Malware Analysis – ransomware – 8c9c8c78ef28d02eef8264809cec0f11

Malware Analysis – wannacry – 8a6b804142e22265de773a3abf0bd047

Malware Analysis – – 6d309b5782e0aa8ee536188b9038341d

Malware Analysis – wannacry – a51beb6c0ac1650cc9161d77a7b4ffe4

Malware Analysis – djvu – 05ea8a5639a077d9a930b4651f97a5e4

Malware Analysis – ransomware – 771cd68a3b03318fabd9112733cf589b

Malware Analysis – ransomware – 0030061143793e596dacd17918e0fdb0

Malware Analysis – djvu – 41b2eb48ece8309621624bdc00a5b84e

Malware Analysis – ransomware – 46a201b8e6764adcb3163d49c0a7881b

Malware Analysis – wannacry – 2eda905ddece5a601ce82ad106707697

Malware Analysis – persistence – 7c88843932ed5fca7c04eb20ff322ab6

Malware Analysis – wannacry – f59c100dc24aee439206d9a3989232ce

Malware Analysis – ransomware – c0a95f24ae226e0e55e23bf623bccad6

Malware Analysis – wannacry – 1d38638153085a0a0f0a4f7174e52a9b

Malware Analysis – smokeloader – 041397972137dba410b074da3f72f700

[KAIROS] – Ransomware Victim: usarice[.]com

[ARCUSMEDIA] – Ransomware Victim: Itapeseg

[KAIROS] – Ransomware Victim: drvitenas[.]com

[AKIRA] – Ransomware Victim: Sunnking SustainableSolutions

[ARCUSMEDIA] – Ransomware Victim: LINKGROUP

You may have missed