Security

Malware Analysis – amadey – 0ca5cd39526bb33fca90e5cdf0d0ac5d

March 15, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:pseudomanuscrypt, family:rhadamanthys, family:smokeloader, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, botnet:pub1, botnet:sprg, backdoor, discovery, loader, persistence, ransomware, spyware, stealer,...

Malware Analysis – ransomware – df4ccdcc93d82240feeb83abf41683d7

March 15, 2023

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: df4ccdcc93d82240feeb83abf41683d7SHA1: 0d48b5dc98e65ceed2a99448a8df3e2f4702250aANALYSIS DATE: 2023-03-15T09:11:36ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – discovery – 3b02025002ceb06c4ce1c9c778232664

March 15, 2023

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, evasion, exploit, persistenceMD5: 3b02025002ceb06c4ce1c9c778232664SHA1: 2aeb8b0adb9cc4f198a9f4d907a28ffd2961caf5ANALYSIS DATE: 2023-03-15T10:51:32ZTTPS: T1031, T1562, T1489, T1012, T1112, T1082, T1222, T1060...

Malware Analysis – amadey – 3fa6103e5d25ff85e7dfe9e61d2b1d2a

March 15, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, botnet:pub1, botnet:sprg, backdoor, discovery, persistence, ransomware, stealer, trojanMD5: 3fa6103e5d25ff85e7dfe9e61d2b1d2aSHA1: 1a8fd33ce1a619beee47b2798dcfbeadbcd17419ANALYSIS DATE:...

Malware Analysis – djvu – 198676e50dabce25f8bdb7f6e1ecbec9

March 15, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: 198676e50dabce25f8bdb7f6e1ecbec9SHA1: 79973d12b610dc0787260180b368487d3ce67213ANALYSIS DATE: 2023-03-15T11:45:06ZTTPS: T1130, T1112, T1060, T1053,...

Malware Analysis – djvu – 70d66d43809da468071f45d812aac404

March 15, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: 70d66d43809da468071f45d812aac404SHA1: cba1c347b410a77c8ff3066052d870a8f1505c4cANALYSIS DATE: 2023-03-15T11:22:06ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – smokeloader – 1cb2590e0e278ac08f7b350e278d02be

March 15, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 1cb2590e0e278ac08f7b350e278d02beSHA1: d31d69d7e761ef7ef59c57703d8337a2df800693ANALYSIS DATE: 2023-03-15T11:41:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – – 03272cfc7159f032e97bc1a792895115

March 15, 2023

Score: 7 MALWARE FAMILY: TAGS:MD5: 03272cfc7159f032e97bc1a792895115SHA1: 96c28d99e70beff0c5d4f86005d7273230e3f9a4ANALYSIS DATE: 2023-03-15T03:03:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – djvu – db8b00bc6ed976ed0fe41f358669ea76

March 15, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: db8b00bc6ed976ed0fe41f358669ea76SHA1: d0f4b3244c98e04c9d53d3ddb5588e3b8cedcbb7ANALYSIS DATE: 2023-03-15T03:23:04ZTTPS: T1012, T1005, T1081, T1082,...

Malware Analysis – djvu – 43a81388da97a601232b351fb4cca79e

March 15, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: 43a81388da97a601232b351fb4cca79eSHA1: 8d17063e0fd37eefb514e67917c25bfc3066cf78ANALYSIS DATE: 2023-03-15T03:28:03ZTTPS: T1222, T1082, T1130, T1112,...

Malware Analysis – smokeloader – 5b175d9d5bf5a9afde2e24951c633660

March 15, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 5b175d9d5bf5a9afde2e24951c633660SHA1: e553b3f0bb1a63ae4f44cde44dda666ff0f7d1b4ANALYSIS DATE: 2023-03-15T03:27:02ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 6cf045e41470cd3550df9fc6a3d23130

March 15, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: 6cf045e41470cd3550df9fc6a3d23130SHA1: 652c212e2b4bdfb22b3fbdd3d123a68374724df2ANALYSIS DATE: 2023-03-15T03:25:04ZTTPS: T1060, T1112, T1222, T1082,...

Malware Analysis – smokeloader – 069efa0c9e52f73ff4893fc283d72bb3

March 15, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 069efa0c9e52f73ff4893fc283d72bb3SHA1: 03a5e39bfc863241ef87a806e729e2ed5199f8a1ANALYSIS DATE: 2023-03-15T03:26:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – d4d57efdb95f1a0479e5a084a1a306ba

March 15, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: d4d57efdb95f1a0479e5a084a1a306baSHA1: 7eae8b9c068c27a1d2d5ff7668b0f4b46198f0f1ANALYSIS DATE: 2023-03-15T03:34:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 6d2cb2a0fa078a6473f09589efff93cf

March 15, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, stealerMD5: 6d2cb2a0fa078a6473f09589efff93cfSHA1: 93a8342629e733823489c315f3f30f39f735fff0ANALYSIS DATE: 2023-03-15T03:30:07ZTTPS: T1060, T1112, T1222, T1082, T1053,...

Malware Analysis – djvu – 920be486068763e91ed2e5128e0af6d9

March 15, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, stealerMD5: 920be486068763e91ed2e5128e0af6d9SHA1: df377dd754ee54e9f947caf336c179b5c94361b9ANALYSIS DATE: 2023-03-15T03:49:04ZTTPS: T1060, T1112, T1222, T1082, T1053,...

Malware Analysis – djvu – 0561ceda4fda0f05bd696ada346e5d49

March 15, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: 0561ceda4fda0f05bd696ada346e5d49SHA1: d44be00c0c324b716e82df52861a7a3fe25c9adaANALYSIS DATE: 2023-03-15T03:29:05ZTTPS: T1005, T1081, T1130, T1112,...

Malware Analysis – lockbit – b985ad429f39836ea6b1783c2f14fd1d

March 15, 2023

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, discovery, evasion, persistence, ransomwareMD5: b985ad429f39836ea6b1783c2f14fd1dSHA1: 32b177b54d4a47dcb7c2343a5e23f21a433ad3f3ANALYSIS DATE: 2023-03-15T04:07:05ZTTPS: T1490, T1046, T1060, T1112, T1082, T1107 ScoreMeaningExample10Known...

Malware Analysis – chaos – a5b6f4205c64588d3ce31497895d9599

March 15, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, ransomware, spyware, stealerMD5: a5b6f4205c64588d3ce31497895d9599SHA1: 94c7af750f5e8c2eb601945aa764f6fbe3be3db6ANALYSIS DATE: 2023-03-15T04:04:04ZTTPS: T1005, T1081, T1082 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – chaos – ba7e505385f3729c280dba1b7174f5a6

March 15, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, ransomwareMD5: ba7e505385f3729c280dba1b7174f5a6SHA1: 5d5f3ad4211f14caaa6497cd494eefe34c03469aANALYSIS DATE: 2023-03-15T04:04:04ZTTPS: T1490, T1059, T1107, T1012, T1082 ScoreMeaningExample10Known badA malware family...

Malware Analysis – chaos – baba28ddc7e456cc77377fc427d8a9c0

March 15, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, persistence, ransomware, spyware, stealerMD5: baba28ddc7e456cc77377fc427d8a9c0SHA1: cbc0a583e7b6a11b76982cf525eb43abf7f35f25ANALYSIS DATE: 2023-03-15T04:04:04ZTTPS: T1490, T1059, T1107, T1082, T1491, T1112,...

Malware Analysis – phobos – cebe17fcdfe9daf1438d2ba986fac811

March 15, 2023

Score: 10 MALWARE FAMILY: phobosTAGS:family:phobos, evasion, persistence, ransomware, spyware, stealerMD5: cebe17fcdfe9daf1438d2ba986fac811SHA1: d906ad344a57663efbbe291bccd74ba4061f119bANALYSIS DATE: 2023-03-15T04:12:58ZTTPS: T1490, T1059, T1107, T1005, T1081, T1012,...

Malware Analysis – djvu – da9b9e3174536876f9f484cf28f3d354

March 15, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: da9b9e3174536876f9f484cf28f3d354SHA1: 84d657de467c0aa6d24f81e272bc6a46eb3f20daANALYSIS DATE: 2023-03-15T04:09:41ZTTPS: T1005, T1081, T1222, T1082,...

Malware Analysis – makop – 7a668b5ec9a34afa512e471a20b8f932

March 15, 2023

Score: 10 MALWARE FAMILY: makopTAGS:family:makop, ransomwareMD5: 7a668b5ec9a34afa512e471a20b8f932SHA1: e53653edc907842c577b3c6dda208a60b409ced8ANALYSIS DATE: 2023-03-15T04:14:03ZTTPS: T1059, T1107, T1490, T1082, T1012 ScoreMeaningExample10Known badA malware family was...

Security

Malware Analysis – amadey – 0ca5cd39526bb33fca90e5cdf0d0ac5d

Malware Analysis – ransomware – df4ccdcc93d82240feeb83abf41683d7

Malware Analysis – discovery – 3b02025002ceb06c4ce1c9c778232664

Malware Analysis – amadey – 3fa6103e5d25ff85e7dfe9e61d2b1d2a

Malware Analysis – djvu – 198676e50dabce25f8bdb7f6e1ecbec9

Malware Analysis – djvu – 70d66d43809da468071f45d812aac404

Malware Analysis – smokeloader – 1cb2590e0e278ac08f7b350e278d02be

Malware Analysis – – 03272cfc7159f032e97bc1a792895115

Malware Analysis – djvu – db8b00bc6ed976ed0fe41f358669ea76

Malware Analysis – djvu – 43a81388da97a601232b351fb4cca79e

Malware Analysis – smokeloader – 5b175d9d5bf5a9afde2e24951c633660

Malware Analysis – djvu – 6cf045e41470cd3550df9fc6a3d23130

Malware Analysis – smokeloader – 069efa0c9e52f73ff4893fc283d72bb3

Malware Analysis – smokeloader – d4d57efdb95f1a0479e5a084a1a306ba

Malware Analysis – djvu – 6d2cb2a0fa078a6473f09589efff93cf

Malware Analysis – djvu – 920be486068763e91ed2e5128e0af6d9

Malware Analysis – djvu – 0561ceda4fda0f05bd696ada346e5d49

Malware Analysis – lockbit – b985ad429f39836ea6b1783c2f14fd1d

Malware Analysis – chaos – a5b6f4205c64588d3ce31497895d9599

Malware Analysis – chaos – ba7e505385f3729c280dba1b7174f5a6

Malware Analysis – chaos – baba28ddc7e456cc77377fc427d8a9c0

Malware Analysis – phobos – cebe17fcdfe9daf1438d2ba986fac811

Malware Analysis – djvu – da9b9e3174536876f9f484cf28f3d354

Malware Analysis – makop – 7a668b5ec9a34afa512e471a20b8f932

Cobalt Strike Beacon Detected – 45[.]143[.]233[.]205:80

Cobalt Strike Beacon Detected – 141[.]164[.]59[.]23:80

Cobalt Strike Beacon Detected – 43[.]143[.]253[.]205:8888

Cobalt Strike Beacon Detected – 47[.]92[.]211[.]202:4321

Cobalt Strike Beacon Detected – 172[.]187[.]169[.]1:443

You may have missed