Security

Malware Analysis – djvu – 8c17dca7ea605fc37a624331ac72e65e

April 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5df88deb5dde677ba658b77ad5f60248, discovery, persistence, ransomware, spyware, stealerMD5: 8c17dca7ea605fc37a624331ac72e65eSHA1: 71ca72354c3d42866992a9b6620067cf898909eeANALYSIS DATE: 2023-04-01T15:01:35ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – evasion – fd31bb7ea1ad81b4570011952008d009

April 1, 2023

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: fd31bb7ea1ad81b4570011952008d009SHA1: 2ab1014b079df5c4507d69d41b92fbc574156811ANALYSIS DATE: 2023-04-01T15:53:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – c84ad96950dc9a5ccab4ad204c46e359

April 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5df88deb5dde677ba658b77ad5f60248, discovery, persistence, ransomware, spyware, stealerMD5: c84ad96950dc9a5ccab4ad204c46e359SHA1: d4672aad001462d79ec1719faa87593a26383926ANALYSIS DATE: 2023-04-01T16:08:42ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – djvu – cf9172551150d9e54626a48bc4d7a196

April 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5df88deb5dde677ba658b77ad5f60248, discovery, persistence, ransomware, spyware, stealerMD5: cf9172551150d9e54626a48bc4d7a196SHA1: 21f10d5aa693242d354a49a4b55f99ccbc9c3c82ANALYSIS DATE: 2023-04-01T16:02:19ZTTPS: T1060, T1112, T1082, T1053,...

Malware Analysis – smokeloader – 98c02acb0401448098dc6c09911c7053

April 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 98c02acb0401448098dc6c09911c7053SHA1: 5611794292c3214d0ffb0491c23377e866ccbd46ANALYSIS DATE: 2023-04-01T16:10:41ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – f1a4fadf22886ea65120de4d9a227d78

April 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5df88deb5dde677ba658b77ad5f60248, discovery, persistence, ransomware, spyware, stealerMD5: f1a4fadf22886ea65120de4d9a227d78SHA1: f6fa9b1c2010638a4a939774d2b0090d03e08d8eANALYSIS DATE: 2023-04-01T16:40:50ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – evasion – 807740e3472484d420667e6c0fcfb515

April 1, 2023

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 807740e3472484d420667e6c0fcfb515SHA1: 9df328dee54e0865376efc4ab90b7cd419c1784cANALYSIS DATE: 2023-04-01T16:28:46ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – brand:microsoft – 0a1d0cb632a7f7cde057b8c11c1248a2

April 1, 2023

Score: 10 MALWARE FAMILY: brand:microsoftTAGS:brand:microsoft, evasion, persistence, phishing, ransomware, trojanMD5: 0a1d0cb632a7f7cde057b8c11c1248a2SHA1: 651caf0aa2637d0b56411f1679eb68f43a7b00b2ANALYSIS DATE: 2023-04-01T16:19:08ZTTPS: T1012, T1120, T1082, T1088, T1089, T1112,...

Malware Analysis – evasion – 9871e57a53d3a334aca306c4321a7d07

April 1, 2023

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 9871e57a53d3a334aca306c4321a7d07SHA1: 5cc48c673d0205a1335f28e687d4b66b5b7d8b97ANALYSIS DATE: 2023-04-01T16:31:59ZTTPS: T1012, T1120, T1082, T1491, T1112 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – evasion – 660708319a500f1865fa9d2fadfa712d

April 1, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 660708319a500f1865fa9d2fadfa712dSHA1: b2ae3aef17095ab26410e0f1792a379a4a2966f8ANALYSIS DATE: 2023-04-01T16:52:30ZTTPS: T1004, T1112, T1082, T1491, T1088, T1089 ScoreMeaningExample10Known badA...

Malware Analysis – brand:pubg – f7b8cff13de0de32fa0f438c3aab7eae

April 1, 2023

Score: 10 MALWARE FAMILY: brand:pubgTAGS:brand:pubg, evasion, phishing, ransomwareMD5: f7b8cff13de0de32fa0f438c3aab7eaeSHA1: a6c449f9a3e1bce13c54159e9575aa66c4462b4eANALYSIS DATE: 2023-04-01T16:46:16ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – djvu – 61804db8a814f17f5cdc8243e6c609cf

April 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5df88deb5dde677ba658b77ad5f60248, discovery, persistence, ransomware, spyware, stealerMD5: 61804db8a814f17f5cdc8243e6c609cfSHA1: 815b35ca9dba75b0f8906b8e838599c757c3ab77ANALYSIS DATE: 2023-04-01T16:54:11ZTTPS: T1082, T1012, T1053, T1005,...

Malware Analysis – – 7866d944436d7983d61024fbbf38256b

April 1, 2023

Score: 3 MALWARE FAMILY: TAGS:MD5: 7866d944436d7983d61024fbbf38256bSHA1: 7e79db996465dfe542fc2d16f14fb8e92da7b75dANALYSIS DATE: 2023-04-01T16:58:41ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – evasion – 26533eb236f3fb7aeef82f4920fd7af4

April 1, 2023

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 26533eb236f3fb7aeef82f4920fd7af4SHA1: 9af1504717b3a2f80f399407c660961a55bf1870ANALYSIS DATE: 2023-04-01T17:56:12ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – amadey – b27b89b27b109e38cbf776096847b093

April 1, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:5df88deb5dde677ba658b77ad5f60248, botnet:pub1, backdoor, discovery, evasion, persistence, ransomware, spyware, stealer, trojanMD5: b27b89b27b109e38cbf776096847b093SHA1: d22ae194c0244a5791171972b4e17e03b65a74e2ANALYSIS...

Malware Analysis – djvu – 4dc20f9e8a797dac6a43de2b18975aef

April 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5df88deb5dde677ba658b77ad5f60248, discovery, persistence, ransomware, spyware, stealerMD5: 4dc20f9e8a797dac6a43de2b18975aefSHA1: 0bc513fa63bb285ecca914a144d40d27d3e485deANALYSIS DATE: 2023-04-01T17:34:23ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – evasion – e13f0908d3f295ba5c61081ca835734f

April 1, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: e13f0908d3f295ba5c61081ca835734fSHA1: fe7972cbfde692e199017f39870032ecbe464138ANALYSIS DATE: 2023-04-01T17:01:08ZTTPS: T1491, T1112, T1012, T1120, T1082, T1060, T1158 ScoreMeaningExample10Known badA...

Malware Analysis – persistence – f755a44bbb97e9ba70bf38f1bdc67722

March 30, 2023

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: f755a44bbb97e9ba70bf38f1bdc67722SHA1: f70331eb64fd893047f263623ffb1e74e6fe4187ANALYSIS DATE: 2023-03-30T15:05:37ZTTPS: T1491, T1112, T1005, T1081, T1060, T1082, T1107, T1490...

Malware Analysis – djvu – ca4c8c98cbf461f832cbf2764c82a5bd

March 30, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5df88deb5dde677ba658b77ad5f60248, discovery, persistence, ransomware, spyware, stealerMD5: ca4c8c98cbf461f832cbf2764c82a5bdSHA1: 67154ad8db949e4a23eb725f47842ff5d045f02fANALYSIS DATE: 2023-03-30T15:15:00ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – ransomware – 1ace926cf826999d3aa1e63372d009c8

March 30, 2023

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 1ace926cf826999d3aa1e63372d009c8SHA1: 0ac145c53c1c3bcb14a428f943309c5c5dc7aa62ANALYSIS DATE: 2023-03-30T15:24:49ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – amadey – 32962e720a69b0ea507f89962cdacfac

March 30, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, family:socelars, family:vidar, botnet:5df88deb5dde677ba658b77ad5f60248, botnet:frtrack, botnet:pub1, backdoor, discovery, evasion, infostealer, persistence, ransomware, spyware,...

Malware Analysis – amadey – 404a7c5c03a53b10f0eed922316e6681

March 30, 2023

Malware Analysis – djvu – 1413865f4a87f28b94e00396de7459d2

March 30, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5df88deb5dde677ba658b77ad5f60248, discovery, persistence, ransomware, spyware, stealerMD5: 1413865f4a87f28b94e00396de7459d2SHA1: 549c641578f2dd01c2b257fe4cb5625977da8574ANALYSIS DATE: 2023-03-30T15:27:08ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – ransomware – 53586770fa7c3483b5b6b626ad7130e8

March 30, 2023

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 53586770fa7c3483b5b6b626ad7130e8SHA1: 36e3f72106c29c83a87ad69d58375038d0b6a326ANALYSIS DATE: 2023-03-30T16:24:25ZTTPS: T1082, T1012, T1120, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Security

Malware Analysis – djvu – 8c17dca7ea605fc37a624331ac72e65e

Malware Analysis – evasion – fd31bb7ea1ad81b4570011952008d009

Malware Analysis – djvu – c84ad96950dc9a5ccab4ad204c46e359

Malware Analysis – djvu – cf9172551150d9e54626a48bc4d7a196

Malware Analysis – smokeloader – 98c02acb0401448098dc6c09911c7053

Malware Analysis – djvu – f1a4fadf22886ea65120de4d9a227d78

Malware Analysis – evasion – 807740e3472484d420667e6c0fcfb515

Malware Analysis – brand:microsoft – 0a1d0cb632a7f7cde057b8c11c1248a2

Malware Analysis – evasion – 9871e57a53d3a334aca306c4321a7d07

Malware Analysis – evasion – 660708319a500f1865fa9d2fadfa712d

Malware Analysis – brand:pubg – f7b8cff13de0de32fa0f438c3aab7eae

Malware Analysis – djvu – 61804db8a814f17f5cdc8243e6c609cf

Malware Analysis – – 7866d944436d7983d61024fbbf38256b

Malware Analysis – evasion – 26533eb236f3fb7aeef82f4920fd7af4

Malware Analysis – amadey – b27b89b27b109e38cbf776096847b093

Malware Analysis – djvu – 4dc20f9e8a797dac6a43de2b18975aef

Malware Analysis – evasion – e13f0908d3f295ba5c61081ca835734f

Malware Analysis – persistence – f755a44bbb97e9ba70bf38f1bdc67722

Malware Analysis – djvu – ca4c8c98cbf461f832cbf2764c82a5bd

Malware Analysis – ransomware – 1ace926cf826999d3aa1e63372d009c8

Malware Analysis – amadey – 32962e720a69b0ea507f89962cdacfac

Malware Analysis – amadey – 404a7c5c03a53b10f0eed922316e6681

Malware Analysis – djvu – 1413865f4a87f28b94e00396de7459d2

Malware Analysis – ransomware – 53586770fa7c3483b5b6b626ad7130e8

CISA: CISA Releases Three Industrial Control Systems Advisories

CISA: CISA Adds One Known Exploited Vulnerability to Catalog

CISA: CISA and FBI Release Advisory on How Threat Actors Chained Vulnerabilities in Ivanti Cloud Service Applications

CISA: CISA and FBI Release Updated Guidance on Product Security Bad Practices

CISA: CISA Releases Six Industrial Control Systems Advisories

You may have missed