Malware Analysis

Malware Analysis – djvu – dd389d4033a9f3b4b038bb25d124cb46

January 14, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:rhadamanthys, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojanMD5: dd389d4033a9f3b4b038bb25d124cb46SHA1: 7ed92f2d935aaf50af22423d774ebe0b8613c8f2ANALYSIS DATE: 2023-01-14T05:03:02ZTTPS:...

Malware Analysis – njrat – 596e8b4c50fa6579495c12756c3b5f14

January 14, 2023

Score: 10 MALWARE FAMILY: njratTAGS:family:njrat, botnet:hacked, discovery, evasion, persistence, ransomware, trojanMD5: 596e8b4c50fa6579495c12756c3b5f14SHA1: de331021e0b2f8fcb792db5cef59472c1964b3bfANALYSIS DATE: 2023-01-14T04:54:53ZTTPS: T1112, T1042, T1060, T1012, T1031,...

Malware Analysis – djvu – 45b0220aa7be949fcf01f1c68daedbb6

January 14, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 45b0220aa7be949fcf01f1c68daedbb6SHA1: e743588797a064205c212beef52235d4224231e2ANALYSIS DATE: 2023-01-14T05:07:02ZTTPS: T1012, T1082, T1060, T1112,...

Malware Analysis – evasion – 4f774b19f651b067f18d07509c0c938d

January 14, 2023

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 4f774b19f651b067f18d07509c0c938dSHA1: 4fc969b01a148d8fcc9d18349f84840ae4b2d69bANALYSIS DATE: 2023-01-13T20:58:46ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – 3dcf9fdd2fd95e1d56d8a5dc010130d6

January 14, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 3dcf9fdd2fd95e1d56d8a5dc010130d6SHA1: 698761ced0b29ce6c67734368731ab8281124727ANALYSIS DATE: 2023-01-13T23:53:00ZTTPS: T1222, T1012, T1082, T1005,...

Malware Analysis – – 3b01de02b4a717539c44af9b388cf730

January 14, 2023

Score: 7 MALWARE FAMILY: TAGS:MD5: 3b01de02b4a717539c44af9b388cf730SHA1: e835e5bda10c4af40b07bdc8e0be8ba31d09a1caANALYSIS DATE: 2023-01-13T22:05:02ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – a3b16d93ce7b3facd97125fb30337366

January 14, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: a3b16d93ce7b3facd97125fb30337366SHA1: 67ef3d916b09d6efe05584e76dade7b9a0764a09ANALYSIS DATE: 2023-01-13T22:41:28ZTTPS:...

Malware Analysis – djvu – 0563eaa2a29f70a215875bd221d578f1

January 14, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 0563eaa2a29f70a215875bd221d578f1SHA1: 26aa7dfb6c3d060e85669a3aaf6c423940312481ANALYSIS DATE: 2023-01-13T22:17:18ZTTPS: T1060, T1112, T1012, T1082,...

Malware Analysis – discovery – d60f20003600b70defb72215417aadee

January 13, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, persistence, ransomwareMD5: d60f20003600b70defb72215417aadeeSHA1: b89035349ad4894e1837b81e3e826ca4572f4f88ANALYSIS DATE: 2023-01-13T15:37:51ZTTPS: T1012, T1497, T1060, T1112, T1120, T1082, T1130 ScoreMeaningExample10Known...

Malware Analysis – vidar – 1272913903f006257782576e54bc42f1

January 13, 2023

Score: 10 MALWARE FAMILY: vidarTAGS:family:vidar, botnet:1375, discovery, persistence, ransomware, stealerMD5: 1272913903f006257782576e54bc42f1SHA1: 2f0de1263f81ed61aed30911322ef0d8afeac200ANALYSIS DATE: 2023-01-13T15:22:43ZTTPS: T1012, T1082, T1112, T1042, T1060 ScoreMeaningExample10Known...

Malware Analysis – djvu – 02aa7141b84264a4f3e6479d2205d4d2

January 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 02aa7141b84264a4f3e6479d2205d4d2SHA1: 10ed25dd9b39608e9b8d856fec7498e7f2c84360ANALYSIS DATE: 2023-01-13T15:45:17ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – wannacry – 6943bb5d7fa5f8893385354002e68b2c

January 13, 2023

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, persistence, ransomware, spyware, stealer, wormMD5: 6943bb5d7fa5f8893385354002e68b2cSHA1: 5ed52e3e97d2114a96f392aaaa37c208747faebfANALYSIS DATE: 2023-01-13T16:09:05ZTTPS: T1082, T1012, T1005, T1081, T1060, T1112,...

Malware Analysis – djvu – 2cc9c4905636d184f5256a2ac37e483b

January 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 2cc9c4905636d184f5256a2ac37e483bSHA1: 3990069a21db98cbd1c33a66cb68a184c51da357ANALYSIS DATE: 2023-01-13T15:54:19ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – evasion – 73c608165fc99f8ef3ff46f00fbbc6e1

January 13, 2023

Score: 6 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 73c608165fc99f8ef3ff46f00fbbc6e1SHA1: 3e234aa1df5858fc283aaa82df18aecf07a9b80cANALYSIS DATE: 2023-01-13T15:49:24ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – 3135f5ea657071a0408c14ae45b950ae

January 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 3135f5ea657071a0408c14ae45b950aeSHA1: aecdf7ed7cd490fce083ee0b967f2dd60aa7b891ANALYSIS DATE: 2023-01-13T16:03:31ZTTPS:...

Malware Analysis – ransomware – 002906aed1cf4cfa92bdbf8d8043f09f

January 13, 2023

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 002906aed1cf4cfa92bdbf8d8043f09fSHA1: 3b62a54a2de9ed62ddecaf9373bed4f0617b24bcANALYSIS DATE: 2023-01-13T16:24:58ZTTPS: T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – 2026e5b2a00a548997459cbe11655784

January 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 2026e5b2a00a548997459cbe11655784SHA1: 88a368ea94f1c10ab6dc4306fe4c911245736e73ANALYSIS DATE: 2023-01-13T16:50:25ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – djvu – 789f2ca0649dbf650af10391d3618a99

January 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 789f2ca0649dbf650af10391d3618a99SHA1: ceab7bb533ad3a803319d69cba21f6a4a489a22fANALYSIS DATE: 2023-01-13T16:30:50ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – ransomware – f400444ce55b318596cd2772d3578b7e

January 13, 2023

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: f400444ce55b318596cd2772d3578b7eSHA1: b6d2bfb420f7f3fcf588db1992c0d74cf7ce9e94ANALYSIS DATE: 2023-01-13T16:59:59ZTTPS: T1082, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – smokeloader – 47d6ed6eb2b930ec19fba5a5f4bdb632

January 13, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 47d6ed6eb2b930ec19fba5a5f4bdb632SHA1: 9c71877c95162d128fa0f41603f433b5fa2a3b9aANALYSIS DATE: 2023-01-13T17:41:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – – 059274e07bbf83ec5b5d4f1d957681eb

January 13, 2023

Score: 8 MALWARE FAMILY: TAGS:MD5: 059274e07bbf83ec5b5d4f1d957681ebSHA1: b0dd598c4dd719ccfc80d769becf5d0589a74eaaANALYSIS DATE: 2023-01-13T17:35:23ZTTPS: T1082, T1130, T1112, T1012, T1120 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – wannacry – 95e61047b39dfa7765f3b1cecd32334a

January 13, 2023

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, spyware, stealer, wormMD5: 95e61047b39dfa7765f3b1cecd32334aSHA1: 1b7b93e3cecf30d733971788c26b74f514a6bec3ANALYSIS DATE: 2023-01-13T17:04:09ZTTPS: T1082, T1158, T1005, T1081, T1012, T1120,...

Malware Analysis – smokeloader – 824f6917bdbc50b5dd169a5b51f0f550

January 13, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 824f6917bdbc50b5dd169a5b51f0f550SHA1: cb9b985b9b0d1bff57b06b4819fcf3c090747701ANALYSIS DATE: 2023-01-13T17:00:09ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – 19944159dfa94a1b75effd85e6b906dc

January 13, 2023

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 19944159dfa94a1b75effd85e6b906dcSHA1: 250acf87366f4c0cf91679a0e93dfc79954f0f10ANALYSIS DATE: 2023-01-13T09:23:05ZTTPS: T1490, T1107, T1012, T1120, T1082, T1491, T1112 ScoreMeaningExample10Known badA malware...

Malware Analysis

Malware Analysis – djvu – dd389d4033a9f3b4b038bb25d124cb46

Malware Analysis – njrat – 596e8b4c50fa6579495c12756c3b5f14

Malware Analysis – djvu – 45b0220aa7be949fcf01f1c68daedbb6

Malware Analysis – evasion – 4f774b19f651b067f18d07509c0c938d

Malware Analysis – djvu – 3dcf9fdd2fd95e1d56d8a5dc010130d6

Malware Analysis – – 3b01de02b4a717539c44af9b388cf730

Malware Analysis – djvu – a3b16d93ce7b3facd97125fb30337366

Malware Analysis – djvu – 0563eaa2a29f70a215875bd221d578f1

Malware Analysis – discovery – d60f20003600b70defb72215417aadee

Malware Analysis – vidar – 1272913903f006257782576e54bc42f1

Malware Analysis – djvu – 02aa7141b84264a4f3e6479d2205d4d2

Malware Analysis – wannacry – 6943bb5d7fa5f8893385354002e68b2c

Malware Analysis – djvu – 2cc9c4905636d184f5256a2ac37e483b

Malware Analysis – evasion – 73c608165fc99f8ef3ff46f00fbbc6e1

Malware Analysis – djvu – 3135f5ea657071a0408c14ae45b950ae

Malware Analysis – ransomware – 002906aed1cf4cfa92bdbf8d8043f09f

Malware Analysis – djvu – 2026e5b2a00a548997459cbe11655784

Malware Analysis – djvu – 789f2ca0649dbf650af10391d3618a99

Malware Analysis – ransomware – f400444ce55b318596cd2772d3578b7e

Malware Analysis – smokeloader – 47d6ed6eb2b930ec19fba5a5f4bdb632

Malware Analysis – – 059274e07bbf83ec5b5d4f1d957681eb

Malware Analysis – wannacry – 95e61047b39dfa7765f3b1cecd32334a

Malware Analysis – smokeloader – 824f6917bdbc50b5dd169a5b51f0f550

Malware Analysis – evasion – 19944159dfa94a1b75effd85e6b906dc

BugCrowd Bug Bounty Disclosure: P3 – Publicly Editable Google Docs Linked from NASA SnowEx PPT –

BugCrowd Bug Bounty Disclosure: P3 – Details of the collaboration between NASA and Inmarsat Government and the type of contract –

Apple Products Multiple Vulnerabilities

Miljödata – 870,108 breached accounts

Cobalt Strike Beacon Detected – 119[.]91[.]203[.]199:88

You may have missed