Malware Analysis

Malware Analysis – djvu – 04a8fd3346eabeb3fefa118206f9aa1b

January 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 04a8fd3346eabeb3fefa118206f9aa1bSHA1: 92d3b89a5a9e53867c028a9a4569af7bd884663bANALYSIS DATE: 2023-01-08T22:42:47ZTTPS: T1222, T1012, T1082, T1005,...

Malware Analysis – djvu – 1de29ef9bed38c0a81a30a09369d8f7f

January 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 1de29ef9bed38c0a81a30a09369d8f7fSHA1: 52f41573d0ce0e4ea96380b0f23c1c5dea872c76ANALYSIS DATE: 2023-01-08T21:54:46ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – dcrat – 4b63df4f727bc68412c39ae8cecd54fe

January 9, 2023

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealer, trojanMD5: 4b63df4f727bc68412c39ae8cecd54feSHA1:...

Malware Analysis – djvu – fe53c14f50ee7a0582d62715fd824056

January 8, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:19, botnet:@2023@new, backdoor, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: fe53c14f50ee7a0582d62715fd824056SHA1: d844915b144b559295936cc8fe12232b925da893ANALYSIS...

Malware Analysis – djvu – c4dd2d3cd811e87ae1ceaa1b9718f4a1

January 8, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojanMD5: c4dd2d3cd811e87ae1ceaa1b9718f4a1SHA1: c469300e4e6b78f84cf3cbbd6095c840c031df8fANALYSIS DATE: 2023-01-08T09:39:32ZTTPS: T1112,...

Malware Analysis – – 326c4f6e417c419eddf40f8d1035e046

January 8, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: 326c4f6e417c419eddf40f8d1035e046SHA1: a96cfd2b0e59688e26f7b9cf3b5a6980e6f805beANALYSIS DATE: 2023-01-08T10:31:17ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 486033dcb4db27a1157bc1531dfb6fa7

January 8, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 486033dcb4db27a1157bc1531dfb6fa7SHA1: c83d60beb9722f97661635da7cb7e065ad75438fANALYSIS DATE: 2023-01-08T09:26:26ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – ransomware – 31656fb93e948d7c349457d7f5c6dfec

January 8, 2023

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 31656fb93e948d7c349457d7f5c6dfecSHA1: 0ae36846ff75ee88660bfe2d9f59f5b49564d3c0ANALYSIS DATE: 2023-01-08T10:36:03ZTTPS: T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – 59631f469b3a3781d8bcf3174e91d3cc

January 8, 2023

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 59631f469b3a3781d8bcf3174e91d3ccSHA1: ec6bf09a09ba3810b7124d06f7f7f84d6038f1faANALYSIS DATE: 2023-01-08T10:33:04ZTTPS: T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – 4e842f7e1ac9182d03f7234b0700656d

January 8, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 4e842f7e1ac9182d03f7234b0700656dSHA1: b1e3bca3859d22ca45fc9fda20ee1c3ca070cddeANALYSIS DATE: 2023-01-08T11:40:46ZTTPS: T1053, T1005, T1081, T1060,...

Malware Analysis – lockergoga – 16bcc3b7f32c41e7c7222bf37fe39fe6

January 8, 2023

Score: 10 MALWARE FAMILY: lockergogaTAGS:family:lockergoga, banker, ransomware, trojanMD5: 16bcc3b7f32c41e7c7222bf37fe39fe6SHA1: a25bc5442c86bdeb0dec6583f0e80e241745fb73ANALYSIS DATE: 2023-01-08T10:37:02ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – lockbit – ebe673b2ee28dd65565f2f389279ac47

January 7, 2023

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, evasion, persistence, ransomwareMD5: ebe673b2ee28dd65565f2f389279ac47SHA1: bcebe09c61d3e6c47aefcb6bca0882752e0053a9ANALYSIS DATE: 2023-01-07T09:03:51ZTTPS: T1490, T1059, T1107, T1060, T1112, T1082, T1018, T1491...

Malware Analysis – lockbit – 2c0eeb266061631845a9e21156801afd

January 7, 2023

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, ransomwareMD5: 2c0eeb266061631845a9e21156801afdSHA1: e112623223602cbcdd95268121c9ea332ba5983eANALYSIS DATE: 2023-01-07T09:04:11ZTTPS: T1491, T1112, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – smokeloader – 721848630792cc8d766f7a66b7dff04e

January 7, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 721848630792cc8d766f7a66b7dff04eSHA1: b9edbbf6d8ed9aa909583d5cfeb5ccafb8fefd49ANALYSIS DATE: 2023-01-07T09:06:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – lockbit – 00a50f67d713a45cea6dc956c30042c1

January 7, 2023

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, ransomwareMD5: 00a50f67d713a45cea6dc956c30042c1SHA1: bf02ef3db484122b551da73ce83c2aac79bbd2fcANALYSIS DATE: 2023-01-07T09:04:07ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – smokeloader – 333aa9917c09f5ccf2e8c5bb21ab8292

January 7, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 333aa9917c09f5ccf2e8c5bb21ab8292SHA1: 890625b934a90264290a1ea636e725eb06ae090aANALYSIS DATE: 2023-01-07T09:51:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 283b4ce9dfbdb15c6f0527b9670fc4ab

January 7, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 283b4ce9dfbdb15c6f0527b9670fc4abSHA1: 122f0d7d59d4cac2e3500af8ce5003b435342953ANALYSIS DATE: 2023-01-07T09:17:10ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – smokeloader – b474d30039b51a5fd11deda319dde90d

January 7, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: b474d30039b51a5fd11deda319dde90dSHA1: 0876ca51235b8ee3a2b338c7e73d58cc89a4a416ANALYSIS DATE: 2023-01-07T09:11:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – asyncrat – ddfdcc11a3e4a5dd265442a5bcea9fcf

January 7, 2023

Score: 10 MALWARE FAMILY: asyncratTAGS:family:asyncrat, discovery, persistence, ransomware, rat, spyware, stealerMD5: ddfdcc11a3e4a5dd265442a5bcea9fcfSHA1: a98cf41fb793d5c23bef6baac5c5848233c6ff41ANALYSIS DATE: 2023-01-07T10:41:42ZTTPS: T1012, T1082, T1053, T1060, T1120,...

Malware Analysis – smokeloader – cfd57a3bbe2a49525cc1ff6183cc2085

January 7, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: cfd57a3bbe2a49525cc1ff6183cc2085SHA1: a2310517555e207a3c016364df67215dc69f7c33ANALYSIS DATE: 2023-01-07T11:26:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – asyncrat – 596e8b4c50fa6579495c12756c3b5f14

January 7, 2023

Score: 10 MALWARE FAMILY: asyncratTAGS:family:asyncrat, discovery, persistence, ransomware, ratMD5: 596e8b4c50fa6579495c12756c3b5f14SHA1: de331021e0b2f8fcb792db5cef59472c1964b3bfANALYSIS DATE: 2023-01-07T11:12:40ZTTPS: T1012, T1082, T1120, T1112, T1060, T1042, T1053...

Malware Analysis – djvu – b540bd5385b69b6efdc13929a24a1d94

January 7, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: b540bd5385b69b6efdc13929a24a1d94SHA1: 3e50087a02872cb41aa73a1dd57c4bced40c2b5bANALYSIS DATE: 2023-01-07T11:43:58ZTTPS: T1012, T1082, T1222, T1053,...

Malware Analysis – – c5bc2f381a335456610ad9eded37ff13

January 7, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: c5bc2f381a335456610ad9eded37ff13SHA1: 12164a4a698ae1f7b401aaac67d16a4d2684e9e1ANALYSIS DATE: 2023-01-07T11:05:29ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 409c1dfc671e23c5db46a54c8bc89718

January 7, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 409c1dfc671e23c5db46a54c8bc89718SHA1: 3fb3c48f09d3175fe70e5411e457e0e937541a47ANALYSIS DATE: 2023-01-07T03:53:30ZTTPS: T1005, T1081, T1012, T1222,...

Malware Analysis

Malware Analysis – djvu – 04a8fd3346eabeb3fefa118206f9aa1b

Malware Analysis – djvu – 1de29ef9bed38c0a81a30a09369d8f7f

Malware Analysis – dcrat – 4b63df4f727bc68412c39ae8cecd54fe

Malware Analysis – djvu – fe53c14f50ee7a0582d62715fd824056

Malware Analysis – djvu – c4dd2d3cd811e87ae1ceaa1b9718f4a1

Malware Analysis – – 326c4f6e417c419eddf40f8d1035e046

Malware Analysis – djvu – 486033dcb4db27a1157bc1531dfb6fa7

Malware Analysis – ransomware – 31656fb93e948d7c349457d7f5c6dfec

Malware Analysis – ransomware – 59631f469b3a3781d8bcf3174e91d3cc

Malware Analysis – djvu – 4e842f7e1ac9182d03f7234b0700656d

Malware Analysis – lockergoga – 16bcc3b7f32c41e7c7222bf37fe39fe6

Malware Analysis – lockbit – ebe673b2ee28dd65565f2f389279ac47

Malware Analysis – lockbit – 2c0eeb266061631845a9e21156801afd

Malware Analysis – smokeloader – 721848630792cc8d766f7a66b7dff04e

Malware Analysis – lockbit – 00a50f67d713a45cea6dc956c30042c1

Malware Analysis – smokeloader – 333aa9917c09f5ccf2e8c5bb21ab8292

Malware Analysis – djvu – 283b4ce9dfbdb15c6f0527b9670fc4ab

Malware Analysis – smokeloader – b474d30039b51a5fd11deda319dde90d

Malware Analysis – asyncrat – ddfdcc11a3e4a5dd265442a5bcea9fcf

Malware Analysis – smokeloader – cfd57a3bbe2a49525cc1ff6183cc2085

Malware Analysis – asyncrat – 596e8b4c50fa6579495c12756c3b5f14

Malware Analysis – djvu – b540bd5385b69b6efdc13929a24a1d94

Malware Analysis – – c5bc2f381a335456610ad9eded37ff13

Malware Analysis – djvu – 409c1dfc671e23c5db46a54c8bc89718

[RANSOMHOUSE] – Ransomware Victim: Fulgar S[.]p[.]A[.]

[INCRANSOM] – Ransomware Victim: Wiraswasta Gemilang

Cobalt Strike Beacon Detected – 83[.]229[.]126[.]65:8080

Cobalt Strike Beacon Detected – 114[.]132[.]150[.]96:8011

Cobalt Strike Beacon Detected – 165[.]154[.]125[.]212:8080

You may have missed