threatintel

Malware Analysis – djvu – 6711fe2dd09ebaa38866fd2347707c5c

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, stealerMD5: 6711fe2dd09ebaa38866fd2347707c5cSHA1: eb2788616697987a23aa49421e26c9aacc1742a3ANALYSIS DATE: 2022-10-21T02:38:04ZTTPS: T1222, T1060, T1112, T1082, T1012,...

Malware Analysis – djvu – f7788b8b55dc237a0e70a76712cd67b8

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: f7788b8b55dc237a0e70a76712cd67b8SHA1: 77b729ddebfdf4c258fca4dedeabdeb0c4b26c32ANALYSIS DATE: 2022-10-21T02:44:32ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – persistence – 48a90ac8127abfd31c44ffcb0feccb79

October 21, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 48a90ac8127abfd31c44ffcb0feccb79SHA1: 8a1ffd8215b73fc85999f837ff275430f3062186ANALYSIS DATE: 2022-10-21T03:40:18ZTTPS: T1082, T1107, T1490, T1091, T1060, T1112, T1005, T1081...

Malware Analysis – persistence – d194ae52fbd0d872391c1bd4cdfe9af9

October 21, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: d194ae52fbd0d872391c1bd4cdfe9af9SHA1: c1979f22c4c146922923b682d395212cd8a7a89cANALYSIS DATE: 2022-10-21T03:20:20ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091, T1060, T1112...

Malware Analysis – smokeloader – 45c256105d08937f2a5571b8a7827809

October 21, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 45c256105d08937f2a5571b8a7827809SHA1: 3228405c3507538b2417bf522b0c1e9343fdd58bANALYSIS DATE: 2022-10-21T03:33:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 5ff5c285649abf718cc88f492b75df44

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 5ff5c285649abf718cc88f492b75df44SHA1: 316d2ce2d6499874f675c82e0fc5b8bd3ac99bd6ANALYSIS DATE: 2022-10-21T03:32:01ZTTPS: T1222, T1053, T1005, T1081,...

Malware Analysis – ransomware – ca5e0ee1274f175f5843e669ec94045e

October 21, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: ca5e0ee1274f175f5843e669ec94045eSHA1: 56064940ef17dffdb84f4527e982f9523ff832efANALYSIS DATE: 2022-10-21T04:00:21ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – bf6baa8d5a5ec6d123f963e6a6ef2482

October 21, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: bf6baa8d5a5ec6d123f963e6a6ef2482SHA1: 1775672403c6038a1150ee6eed9de0700eaac79dANALYSIS DATE: 2022-10-21T04:00:39ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – afd5d656a42a746e95926ef07933f054

October 21, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: afd5d656a42a746e95926ef07933f054SHA1: 04028a0a1d44f81709040c31af026785209d4343ANALYSIS DATE: 2022-10-21T03:49:04ZTTPS: T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – ransomware – c6e1feaea88b8be661dcbdcec20c45fd

October 21, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: c6e1feaea88b8be661dcbdcec20c45fdSHA1: 51774d9f7d1b1f94788a7c77ed9bd7770f448e15ANALYSIS DATE: 2022-10-21T04:00:31ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 0a48cb94d087c45731e65aa4a89a7af9

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 0a48cb94d087c45731e65aa4a89a7af9SHA1: b1149cb8aa53b14d538f6af1032a08a3c9beb440ANALYSIS DATE: 2022-10-21T04:11:51ZTTPS: T1060, T1112, T1082, T1053,...

Malware Analysis – persistence – 24f44660b6d00456516b255b05e58f61

October 21, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 24f44660b6d00456516b255b05e58f61SHA1: 6729ff5069fc229e0ac5c08a3905bd2691816417ANALYSIS DATE: 2022-10-21T04:01:08ZTTPS: T1107, T1490, T1091, T1060, T1112, T1005, T1081, T1082...

Malware Analysis – ransomware – 03041c499ab0882e785c8fac5b239d1d

October 21, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 03041c499ab0882e785c8fac5b239d1dSHA1: ec997327764fd1e7af5f51fb295c078e98f756b6ANALYSIS DATE: 2022-10-21T04:00:50ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – persistence – 3b3ae808cd645506b674412b72032761

October 21, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 3b3ae808cd645506b674412b72032761SHA1: b7f7dd5e30d7c97d76fbaec499e9d35ade81d30fANALYSIS DATE: 2022-10-21T04:00:57ZTTPS: T1082, T1107, T1490, T1091, T1060, T1112, T1005, T1081...

Malware Analysis – persistence – 858b513459d042478f3b73009b8ee76f

October 21, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 858b513459d042478f3b73009b8ee76fSHA1: 06a95a5c95e69f61170987fa2b36a57cf50e7634ANALYSIS DATE: 2022-10-21T04:20:30ZTTPS: T1005, T1081, T1107, T1490, T1082, T1091, T1060, T1112...

Malware Analysis – ransomware – 861827504f3428a3b2dd79e875ccb2fe

October 21, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 861827504f3428a3b2dd79e875ccb2feSHA1: d3e9dcc29707163fc97c9628d09d41f33f72d3e6ANALYSIS DATE: 2022-10-21T04:20:42ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – persistence – 68ec127444d92b7943db5194c15f376d

October 21, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 68ec127444d92b7943db5194c15f376dSHA1: dcd9f4d707ea4f7e24e75312760cb57404f5f7c1ANALYSIS DATE: 2022-10-21T04:20:39ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091, T1060, T1112...

Malware Analysis – persistence – c211f09f9b109906231bed988c1c3254

October 21, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: c211f09f9b109906231bed988c1c3254SHA1: 596b55ab0218afa23c86a94e90d54fa44a9ad549ANALYSIS DATE: 2022-10-21T04:20:22ZTTPS: T1091, T1060, T1112, T1005, T1081, T1082, T1107, T1490...

Malware Analysis – djvu – 1191e1f7f477b578be04ce4ea394fcb8

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 1191e1f7f477b578be04ce4ea394fcb8SHA1: 9e885bed61412db08b9d3294fed4f4b722dccff4ANALYSIS DATE: 2022-10-21T04:36:25ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – persistence – f12c0cea46ebbd343a3836add3c33680

October 21, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: f12c0cea46ebbd343a3836add3c33680SHA1: 6b595afc2fbb564cb66f5aa4ad8a5f3c0e2678e4ANALYSIS DATE: 2022-10-21T04:40:31ZTTPS: T1060, T1112, T1005, T1081, T1082, T1107, T1490, T1091...

Malware Analysis – smokeloader – 0e70c10f110a8d3ebd896c096e509315

October 21, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 0e70c10f110a8d3ebd896c096e509315SHA1: 8cb3b618beca9356c4830fe997203b28502f8592ANALYSIS DATE: 2022-10-21T04:31:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – e634525ae8aa58e72a9ec1b61aade37a

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: e634525ae8aa58e72a9ec1b61aade37aSHA1: 1ce5683544128ecec7aa4ba422381e0410b2fa5fANALYSIS DATE: 2022-10-21T04:21:53ZTTPS: T1222, T1012, T1082, T1005,...

Malware Analysis – persistence – 7beb8c25950ec24d03ab9055a965b7a0

October 21, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 7beb8c25950ec24d03ab9055a965b7a0SHA1: 5d6ab5afd2e4d62ad9d7e3ab776e4a6fee4e639aANALYSIS DATE: 2022-10-20T19:32:53ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – persistence – a0486ef9e2966d0845476a0c54917454

October 21, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: a0486ef9e2966d0845476a0c54917454SHA1: a7b6a0e41b97518b65639a29f69658afc65ca14aANALYSIS DATE: 2022-10-20T19:44:30ZTTPS: T1082, T1112, T1060, T1107, T1490, T1130 ScoreMeaningExample10Known badA malware family...

threatintel

Malware Analysis – djvu – 6711fe2dd09ebaa38866fd2347707c5c

Malware Analysis – djvu – f7788b8b55dc237a0e70a76712cd67b8

Malware Analysis – persistence – 48a90ac8127abfd31c44ffcb0feccb79

Malware Analysis – persistence – d194ae52fbd0d872391c1bd4cdfe9af9

Malware Analysis – smokeloader – 45c256105d08937f2a5571b8a7827809

Malware Analysis – djvu – 5ff5c285649abf718cc88f492b75df44

Malware Analysis – ransomware – ca5e0ee1274f175f5843e669ec94045e

Malware Analysis – ransomware – bf6baa8d5a5ec6d123f963e6a6ef2482

Malware Analysis – ransomware – afd5d656a42a746e95926ef07933f054

Malware Analysis – ransomware – c6e1feaea88b8be661dcbdcec20c45fd

Malware Analysis – djvu – 0a48cb94d087c45731e65aa4a89a7af9

Malware Analysis – persistence – 24f44660b6d00456516b255b05e58f61

Malware Analysis – ransomware – 03041c499ab0882e785c8fac5b239d1d

Malware Analysis – persistence – 3b3ae808cd645506b674412b72032761

Malware Analysis – persistence – 858b513459d042478f3b73009b8ee76f

Malware Analysis – ransomware – 861827504f3428a3b2dd79e875ccb2fe

Malware Analysis – persistence – 68ec127444d92b7943db5194c15f376d

Malware Analysis – persistence – c211f09f9b109906231bed988c1c3254

Malware Analysis – djvu – 1191e1f7f477b578be04ce4ea394fcb8

Malware Analysis – persistence – f12c0cea46ebbd343a3836add3c33680

Malware Analysis – smokeloader – 0e70c10f110a8d3ebd896c096e509315

Malware Analysis – djvu – e634525ae8aa58e72a9ec1b61aade37a

Malware Analysis – persistence – 7beb8c25950ec24d03ab9055a965b7a0

Malware Analysis – persistence – a0486ef9e2966d0845476a0c54917454

US-CERT Vulnerability Summary for the Week of March 3, 2025

[KAIROS] – Ransomware Victim: fredsalvuccicorp[.]com

[BABUK2] – Ransomware Victim: Mandarin[.]com[.]br By Babuk Locker 2[.]0

[AKIRA] – Ransomware Victim: Fickling & Company

[RANSOMHUB] – Ransomware Victim: www[.]hexosys[.]com

You may have missed