Security

Malware Analysis – djvu – 9d6ff2888873db3abeb35ce55ab7f159

March 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 9d6ff2888873db3abeb35ce55ab7f159SHA1: 7fddb0ea73306c67fba2c91b71c9de6df0904692ANALYSIS DATE: 2023-03-13T09:46:31ZTTPS: T1082, T1012, T1060, T1112,...

Malware Analysis – djvu – c6cd667d13846d0fb443c136e5e3f1a6

March 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: c6cd667d13846d0fb443c136e5e3f1a6SHA1: 8b3d3ce0928da0914930779e2ef225d2caa148f7ANALYSIS DATE: 2023-03-13T10:44:35ZTTPS: T1222, T1082, T1053, T1005,...

Malware Analysis – djvu – 7b98163456bd1a3effd8d1e5ef64298b

March 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 7b98163456bd1a3effd8d1e5ef64298bSHA1: 6694db078af630fab3ae2e86f1ae5f1b6ddc39cdANALYSIS DATE: 2023-03-13T10:44:00ZTTPS: T1012, T1005, T1081, T1060,...

Malware Analysis – smokeloader – 566aed1f7c190b04471e2aec95e56c01

March 13, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 566aed1f7c190b04471e2aec95e56c01SHA1: 6f1f8a555cd88083de606e924ff6c665b3a43413ANALYSIS DATE: 2023-03-13T10:43:50ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – b3843723c9238af6d0c2a5d93305eadc

March 13, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: b3843723c9238af6d0c2a5d93305eadcSHA1: 3796a64fe59ada4167e5c9cb9b60897a36f3eed5ANALYSIS DATE: 2023-03-13T10:52:55ZTTPS: T1060, T1012, T1120, T1082, T1112, T1042 ScoreMeaningExample10Known badA malware...

Malware Analysis – amadey – 7e295e95ecb478810238bf9426635ad2

March 13, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:laplas, family:pseudomanuscrypt, family:redline, family:smokeloader, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, botnet:pub1, backdoor, clipper, discovery, infostealer, loader, persistence, ransomware,...

Malware Analysis – djvu – d310a6f0d6695c5db6467b8cc7a869fd

March 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: d310a6f0d6695c5db6467b8cc7a869fdSHA1: 27e98c3c5339891cb03b3e84b81651ff04a62508ANALYSIS DATE: 2023-03-13T10:57:02ZTTPS: T1222, T1082, T1012, T1130,...

Malware Analysis – evasion – f7cbc00aaa716599bcf6a24f65b3302e

March 13, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: f7cbc00aaa716599bcf6a24f65b3302eSHA1: ea2d7a7b46c02a406fc2c0e9340e2ca3f82339e3ANALYSIS DATE: 2023-03-13T11:06:16ZTTPS: T1031, T1562, T1489, T1112, T1012, T1082, T1120, T1107, T1490 ScoreMeaningExample10Known...

Malware Analysis – smokeloader – d21e88369dc69042d256dc59263d5b61

March 13, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: d21e88369dc69042d256dc59263d5b61SHA1: 575e789b0b3bc16a4f44fe6151af4d41cfd630b5ANALYSIS DATE: 2023-03-13T10:54:58ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – dharma – 99c451001b4a530a578952665ec526be

March 13, 2023

Score: 10 MALWARE FAMILY: dharmaTAGS:family:dharma, persistence, ransomware, spyware, stealerMD5: 99c451001b4a530a578952665ec526beSHA1: 6fb938ac4f76843d4ff37fc9d822f76a86f7feb2ANALYSIS DATE: 2023-03-13T11:09:04ZTTPS: T1107, T1490, T1060, T1112, T1005, T1081, T1082...

Malware Analysis – chaos – 61d14b682f39e6558a706a3dacafaeca

March 13, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, ransomwareMD5: 61d14b682f39e6558a706a3dacafaecaSHA1: bcc32366f6b98f0fbd474643fa54c5a4ff173dfaANALYSIS DATE: 2023-03-13T11:09:04ZTTPS: T1490, T1059, T1107, T1082, T1012 ScoreMeaningExample10Known badA malware family...

Malware Analysis – djvu – 61ba3dae1a44c36309224d931ac995d1

March 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 61ba3dae1a44c36309224d931ac995d1SHA1: 36aae6b91d3d110199b4c89168d0a0f4c98e387fANALYSIS DATE: 2023-03-13T11:22:22ZTTPS: T1005, T1081, T1060, T1112,...

Malware Analysis – chaos – 5e312e4f60bf214a45df187cc1cd5f5c

March 13, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, ransomware, spyware, stealerMD5: 5e312e4f60bf214a45df187cc1cd5f5cSHA1: 9bc19e38178a05eb39d579d979ac8520435b511cANALYSIS DATE: 2023-03-13T11:09:04ZTTPS: T1490, T1059, T1107, T1005, T1081, T1012, T1082,...

Malware Analysis – djvu – bed41626e3c2e63c2116b8a1ebdd0040

March 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: bed41626e3c2e63c2116b8a1ebdd0040SHA1: 65ffee674168fe776806ca1893fa23a33d728f4fANALYSIS DATE: 2023-03-13T04:22:58ZTTPS: T1060, T1112, T1005, T1081,...

Malware Analysis – djvu – db3b1259282cd38553edf7422ac9d94f

March 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: db3b1259282cd38553edf7422ac9d94fSHA1: 527fcb3da0e7f70d580e9d5f1e65ac83b16ef95dANALYSIS DATE: 2023-03-13T03:44:20ZTTPS: T1222, T1060, T1112, T1053,...

Malware Analysis – evasion – 4a1d88603b1007825a9c6b36d1e5de44

March 13, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealerMD5: 4a1d88603b1007825a9c6b36d1e5de44SHA1: 78a6e76ab32039576b52153b56f2e8bd035222c3ANALYSIS DATE: 2023-03-13T04:26:04ZTTPS: T1490, T1107, T1005, T1081, T1112, T1060, T1082...

Malware Analysis – djvu – 139bd947da6d9aae1a27aaad9f25b721

March 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 139bd947da6d9aae1a27aaad9f25b721SHA1: 2dc25ec38c0f2d9790d0b82009bd3f8e84beed65ANALYSIS DATE: 2023-03-13T03:03:25ZTTPS: T1082, T1005, T1081, T1012,...

Malware Analysis – neshta – 778607f5f1fd624ee1d4416ca564480c

March 13, 2023

Score: 10 MALWARE FAMILY: neshtaTAGS:family:neshta, evasion, persistence, ransomware, spyware, stealer, trojanMD5: 778607f5f1fd624ee1d4416ca564480cSHA1: 2efadc7b6cb0050028b93ce5b323b9134190c4cdANALYSIS DATE: 2023-03-13T04:35:03ZTTPS: T1107, T1490, T1112, T1042, T1005,...

Malware Analysis – djvu – 72cc285ac9110f915fe6717e29f90d93

March 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 72cc285ac9110f915fe6717e29f90d93SHA1: aba409cb226e570630e57430ff1d5b9a3ea63b1cANALYSIS DATE: 2023-03-13T05:17:54ZTTPS: T1005, T1081, T1222, T1082,...

Malware Analysis – amadey – c9d61c7680069f7915d24d65993fe18d

March 13, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:laplas, family:smokeloader, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, botnet:pub1, botnet:sprg, backdoor, clipper, discovery, ransomware, stealer, trojanMD5: c9d61c7680069f7915d24d65993fe18dSHA1: 0942de8a000fcad764f8a72386a2d3564c312414ANALYSIS...

Malware Analysis – amadey – 0dcd1571d3a66b2e1f3caf07b13be580

March 13, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:laplas, family:smokeloader, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, botnet:pub1, botnet:sprg, backdoor, clipper, discovery, evasion, persistence, ransomware, spyware, stealer,...

Malware Analysis – evasion – efcfd5046a8d1a08dbcd6cc9e7fc42ef

March 13, 2023

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: efcfd5046a8d1a08dbcd6cc9e7fc42efSHA1: bc70fc4a300d68480cd04243524deede061b8668ANALYSIS DATE: 2023-03-13T05:37:41ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – 0bb361c2e737832052eaa517cd1e8525

March 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 0bb361c2e737832052eaa517cd1e8525SHA1: ff97a3b016e1fe5c62da7dbf028ac10e961c3c23ANALYSIS DATE: 2023-03-13T05:52:18ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – djvu – 6aff05293a29857132fb8d26079ccf10

March 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 6aff05293a29857132fb8d26079ccf10SHA1: 3c9e897e809a5cf7791c4c4466e086b4de6151e4ANALYSIS DATE: 2023-03-13T05:42:28ZTTPS: T1005, T1081, T1012, T1082,...

Security

Malware Analysis – djvu – 9d6ff2888873db3abeb35ce55ab7f159

Malware Analysis – djvu – c6cd667d13846d0fb443c136e5e3f1a6

Malware Analysis – djvu – 7b98163456bd1a3effd8d1e5ef64298b

Malware Analysis – smokeloader – 566aed1f7c190b04471e2aec95e56c01

Malware Analysis – discovery – b3843723c9238af6d0c2a5d93305eadc

Malware Analysis – amadey – 7e295e95ecb478810238bf9426635ad2

Malware Analysis – djvu – d310a6f0d6695c5db6467b8cc7a869fd

Malware Analysis – evasion – f7cbc00aaa716599bcf6a24f65b3302e

Malware Analysis – smokeloader – d21e88369dc69042d256dc59263d5b61

Malware Analysis – dharma – 99c451001b4a530a578952665ec526be

Malware Analysis – chaos – 61d14b682f39e6558a706a3dacafaeca

Malware Analysis – djvu – 61ba3dae1a44c36309224d931ac995d1

Malware Analysis – chaos – 5e312e4f60bf214a45df187cc1cd5f5c

Malware Analysis – djvu – bed41626e3c2e63c2116b8a1ebdd0040

Malware Analysis – djvu – db3b1259282cd38553edf7422ac9d94f

Malware Analysis – evasion – 4a1d88603b1007825a9c6b36d1e5de44

Malware Analysis – djvu – 139bd947da6d9aae1a27aaad9f25b721

Malware Analysis – neshta – 778607f5f1fd624ee1d4416ca564480c

Malware Analysis – djvu – 72cc285ac9110f915fe6717e29f90d93

Malware Analysis – amadey – c9d61c7680069f7915d24d65993fe18d

Malware Analysis – amadey – 0dcd1571d3a66b2e1f3caf07b13be580

Malware Analysis – evasion – efcfd5046a8d1a08dbcd6cc9e7fc42ef

Malware Analysis – djvu – 0bb361c2e737832052eaa517cd1e8525

Malware Analysis – djvu – 6aff05293a29857132fb8d26079ccf10

Mythic C2 Detected – 188[.]124[.]51[.]141:7443

[NOVA] – Ransomware Victim: Regency Specialist Hospital

[QILIN] – Ransomware Victim: pandarose[.]ca

[WORLDLEAKS] – Ransomware Victim: Coilplus

CVE Alert: CVE-2025-61990 – F5 – BIG-IP

You may have missed