Security

Malware Analysis – djvu – d68fc03f5679d210f0a3cd70cc8c13e1

February 27, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: d68fc03f5679d210f0a3cd70cc8c13e1SHA1: a4ad2eddb55670b99a2e628205911b5ba21686e4ANALYSIS DATE: 2023-02-27T15:39:56ZTTPS: T1222, T1053, T1005, T1081, T1082,...

Malware Analysis – djvu – 14e05bdb6fb15db02e5247582084999a

February 27, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 14e05bdb6fb15db02e5247582084999aSHA1: c462df95f587ad8e7ab3f703e912aaf12762d03dANALYSIS DATE: 2023-02-27T15:11:02ZTTPS: T1012, T1082, T1005, T1081, T1060,...

Malware Analysis – smokeloader – 32e664bc1683bf60db15e50df9d04d94

February 27, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 32e664bc1683bf60db15e50df9d04d94SHA1: 2f58984ab4b88eff4cf3271a9b3d9b8a0abed2ecANALYSIS DATE: 2023-02-27T15:50:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – f440f4b68d8a753de17f40da8067c74c

February 27, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, backdoor, discovery, persistence, ransomware, stealer, trojan, vmprotectMD5: f440f4b68d8a753de17f40da8067c74cSHA1: fec25fe57dae2be79962fa9a3f79e62472be6d00ANALYSIS DATE: 2023-02-27T16:10:02ZTTPS: T1060, T1112,...

Malware Analysis – djvu – 4ee7170c8ae51589936baaa60bfca7b7

February 27, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 4ee7170c8ae51589936baaa60bfca7b7SHA1: 98eecd829b63e29452f6f9bb40c01303ed4d58e1ANALYSIS DATE: 2023-02-27T16:37:27ZTTPS: T1222, T1082, T1012, T1053, T1005,...

Malware Analysis – smokeloader – 35ccb4adbce0d03c3409df6207401429

February 27, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 35ccb4adbce0d03c3409df6207401429SHA1: 525be7f6caed949ddfa929c0a2ee75b26ba57c64ANALYSIS DATE: 2023-02-27T16:29:08ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – bfc03a90243efb1bbb02f65bce3b02a2

February 27, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: bfc03a90243efb1bbb02f65bce3b02a2SHA1: 1f3d840f29f5595f7db3465fa4b09b397b38f009ANALYSIS DATE: 2023-02-27T16:30:56ZTTPS: T1060, T1112, T1053, T1005, T1081,...

Malware Analysis – smokeloader – aa058c705e64a433166d975f4e9a5261

February 27, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: aa058c705e64a433166d975f4e9a5261SHA1: d286ebd54477fef7a45cc12edfb05ae0197bbdaaANALYSIS DATE: 2023-02-27T16:29:08ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – quantum – c1fbbf273c1e4094f6bf0cdde36d2764

February 27, 2023

Score: 10 MALWARE FAMILY: quantumTAGS:family:quantum, ransomwareMD5: c1fbbf273c1e4094f6bf0cdde36d2764SHA1: bcf4ed6e49e30c5ab9e0fdfcaf5ee8e2756cc98aANALYSIS DATE: 2023-02-27T17:25:04ZTTPS: T1158, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – quasar – 04c0f75fb7507ed1d87c6946698ec064

February 27, 2023

Score: 10 MALWARE FAMILY: quasarTAGS:family:quasar, evasion, persistence, ransomware, spyware, trojanMD5: 04c0f75fb7507ed1d87c6946698ec064SHA1: 577911bb677fbf7870209d4417e277e89b1263feANALYSIS DATE: 2023-02-27T16:44:51ZTTPS: T1082, T1088, T1089, T1112, T1031, T1060,...

Malware Analysis – smokeloader – 3423b310f4725f7d0954f38d346eff1e

February 27, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 3423b310f4725f7d0954f38d346eff1eSHA1: 475cdb695f781e4cbd29c5c601d52377d96503e9ANALYSIS DATE: 2023-02-27T17:00:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 5c1055bd70425b00ccdd27fb4568aa3b

February 27, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, backdoor, discovery, persistence, pyinstaller, ransomware, spyware, stealer, trojan, vmprotectMD5: 5c1055bd70425b00ccdd27fb4568aa3bSHA1: 5643011b8cc2ed9d83d5ed3d4f508bc7bbedf811ANALYSIS DATE: 2023-02-27T17:30:36ZTTPS:...

Malware Analysis – smokeloader – 52c84c3173a4681cce7fc7bc5d8042db

February 27, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 52c84c3173a4681cce7fc7bc5d8042dbSHA1: d63990866ef6a285a6a18c2c3527ee547934ca5aANALYSIS DATE: 2023-02-27T09:07:19ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 0791d4fdb3ab94c236568ac890a16a5a

February 27, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 0791d4fdb3ab94c236568ac890a16a5aSHA1: 3ae812bc7977181c578867dbe5a43a4b84ceead0ANALYSIS DATE: 2023-02-27T09:06:13ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – troldesh – 63210f8f1dde6c40a7f3643ccf0ff313

February 27, 2023

Score: 10 MALWARE FAMILY: troldeshTAGS:family:troldesh, persistence, ransomware, trojan, upxMD5: 63210f8f1dde6c40a7f3643ccf0ff313SHA1: 57edd72391d710d71bead504d44389d0462ccec9ANALYSIS DATE: 2023-02-27T09:11:05ZTTPS: T1060, T1112, T1082 ScoreMeaningExample10Known badA malware family...

Malware Analysis – smokeloader – b7d558b62705bb9da3e9154d81eddc6c

February 27, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: b7d558b62705bb9da3e9154d81eddc6cSHA1: a54d91fb7224a9bd32b13d13a1bc259f631decfbANALYSIS DATE: 2023-02-27T09:07:20ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 10c1d309a43c0ae8c867d445f0983a7c

February 27, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 10c1d309a43c0ae8c867d445f0983a7cSHA1: 7e81c65fa44afac85129806815dc422e42e7f421ANALYSIS DATE: 2023-02-27T09:07:20ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – b3f4fcfb20dc2d65bc7355f744cc471a

February 27, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: b3f4fcfb20dc2d65bc7355f744cc471aSHA1: 9768b327aa6be677923550e9d949b0606eb3f116ANALYSIS DATE: 2023-02-27T09:07:20ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – ef701a28f6a0f6c47bbeb9075bfdbb17

February 27, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, backdoor, discovery, persistence, ransomware, stealer, trojan, vmprotectMD5: ef701a28f6a0f6c47bbeb9075bfdbb17SHA1: d8d7540d7aa77ab65a808114ab968245901fc6b0ANALYSIS DATE: 2023-02-27T10:05:24ZTTPS: T1012, T1120,...

Malware Analysis – djvu – 5c99ee62a7e7bdd30257f2af5af760eb

February 27, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 5c99ee62a7e7bdd30257f2af5af760ebSHA1: 4273c64a6dd3cdc41689d3fe84063a64b3444fc7ANALYSIS DATE: 2023-02-27T10:02:29ZTTPS: T1060, T1112, T1012, T1082, T1005,...

Malware Analysis – ransomware – 9aed6f35603d5b43be90947cb901646d

February 27, 2023

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 9aed6f35603d5b43be90947cb901646dSHA1: 4c5fcdf8e12c51412448a0eab83c9e70d8d85802ANALYSIS DATE: 2023-02-27T09:27:49ZTTPS: T1082, T1107, T1490, T1012, T1120 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 497f80075a5ef00096030f57892b04f7

February 27, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 497f80075a5ef00096030f57892b04f7SHA1: cbad6c33c852e1ccee944854e9d3d80e49b585a5ANALYSIS DATE: 2023-02-27T10:23:25ZTTPS: T1053, T1005, T1081, T1012, T1082,...

Cobalt Stike Beacon Detected – 112[.]74[.]184[.]37:9988

February 27, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 159[.]223[.]190[.]172:3333

February 27, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Security

Malware Analysis – djvu – d68fc03f5679d210f0a3cd70cc8c13e1

Malware Analysis – djvu – 14e05bdb6fb15db02e5247582084999a

Malware Analysis – smokeloader – 32e664bc1683bf60db15e50df9d04d94

Malware Analysis – djvu – f440f4b68d8a753de17f40da8067c74c

Malware Analysis – djvu – 4ee7170c8ae51589936baaa60bfca7b7

Malware Analysis – smokeloader – 35ccb4adbce0d03c3409df6207401429

Malware Analysis – djvu – bfc03a90243efb1bbb02f65bce3b02a2

Malware Analysis – smokeloader – aa058c705e64a433166d975f4e9a5261

Malware Analysis – quantum – c1fbbf273c1e4094f6bf0cdde36d2764

Malware Analysis – quasar – 04c0f75fb7507ed1d87c6946698ec064

Malware Analysis – smokeloader – 3423b310f4725f7d0954f38d346eff1e

Malware Analysis – djvu – 5c1055bd70425b00ccdd27fb4568aa3b

Malware Analysis – smokeloader – 52c84c3173a4681cce7fc7bc5d8042db

Malware Analysis – smokeloader – 0791d4fdb3ab94c236568ac890a16a5a

Malware Analysis – troldesh – 63210f8f1dde6c40a7f3643ccf0ff313

Malware Analysis – smokeloader – b7d558b62705bb9da3e9154d81eddc6c

Malware Analysis – smokeloader – 10c1d309a43c0ae8c867d445f0983a7c

Malware Analysis – smokeloader – b3f4fcfb20dc2d65bc7355f744cc471a

Malware Analysis – djvu – ef701a28f6a0f6c47bbeb9075bfdbb17

Malware Analysis – djvu – 5c99ee62a7e7bdd30257f2af5af760eb

Malware Analysis – ransomware – 9aed6f35603d5b43be90947cb901646d

Malware Analysis – djvu – 497f80075a5ef00096030f57892b04f7

Cobalt Stike Beacon Detected – 112[.]74[.]184[.]37:9988

Cobalt Stike Beacon Detected – 159[.]223[.]190[.]172:3333

[MEDUSA] – Ransomware Victim: Aurora Boardworks

[MEDUSA] – Ransomware Victim: Mundelein Park & Recreation District

[HUNTERS] – Ransomware Victim: Vermeer Mexico

[MEDUSA] – Ransomware Victim: Laurens School District 56

[MEDUSA] – Ransomware Victim: Heartland Health Center

You may have missed