Malware Analysis

Malware Analysis – djvu – d5f4a4dd7cfce94f91232adca74b896e

January 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, stealerMD5: d5f4a4dd7cfce94f91232adca74b896eSHA1: ac7457fede47e2c438c83973c85fdf43df608eb3ANALYSIS DATE: 2023-01-06T17:31:03ZTTPS: T1053, T1130, T1112, T1060, T1222,...

Malware Analysis – djvu – a0c687836dca8e691d7a6e09cf859a87

January 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, stealerMD5: a0c687836dca8e691d7a6e09cf859a87SHA1: 2709628eadbb3e5a7307f038f14e4bc0bfa9d7c7ANALYSIS DATE: 2023-01-06T17:06:03ZTTPS: T1053, T1130, T1112, T1060, T1222,...

Malware Analysis – djvu – 5bbf807c56cf3a364d547ee56141b74e

January 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 5bbf807c56cf3a364d547ee56141b74eSHA1: f03b55aa4df795edd9a05511e0b54d7645d5a714ANALYSIS DATE: 2023-01-06T17:24:05ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – djvu – 4c3380ed58f4ee04d6638af670f3d834

January 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 4c3380ed58f4ee04d6638af670f3d834SHA1: 8ebb5a19d4163ea8231b1ff4de7b23c7e5d67919ANALYSIS DATE: 2023-01-06T17:52:50ZTTPS: T1082, T1012, T1060, T1112,...

Malware Analysis – evasion – 8da384b2427b8397a5934182c159c257

January 6, 2023

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 8da384b2427b8397a5934182c159c257SHA1: 7bcd2d32a19c1ac7bd014dc9e64b806fdff5f5deANALYSIS DATE: 2023-01-06T17:46:43ZTTPS: T1490, T1491, T1112, T1012, T1120, T1082, T1107 ScoreMeaningExample10Known badA malware...

Malware Analysis – chaos – d36637d2e08e4c001d39699cedb6248a

January 6, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, ransomwareMD5: d36637d2e08e4c001d39699cedb6248aSHA1: d2b4f5326781dce97cadf039d3e58124c838cb20ANALYSIS DATE: 2023-01-06T17:45:47ZTTPS: T1490, T1059, T1107, T1082 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – amadey – 698538668c49ccbc41c8206d9252bacf

January 6, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 698538668c49ccbc41c8206d9252bacfSHA1: 2e912da10980b396997396a6ffc74d879a82733cANALYSIS DATE:...

Malware Analysis – djvu – 9320af1b7b22fdd4c17cca870c4ea0c4

January 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, stealerMD5: 9320af1b7b22fdd4c17cca870c4ea0c4SHA1: 2294407a9dedb18b7e633614761da98b35b741c6ANALYSIS DATE: 2023-01-06T09:01:03ZTTPS: T1130, T1112, T1060, T1222, T1082,...

Malware Analysis – – fbd028cd6727fa3feda537db1ed703f0

January 6, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: fbd028cd6727fa3feda537db1ed703f0SHA1: 99b2f3a80a07b920ff18ee6f7234d2ffe2574871ANALYSIS DATE: 2023-01-06T09:03:56ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – spyware – 9c60113d492ebcf89e2b36af378654cf

January 6, 2023

Score: 8 MALWARE FAMILY: spywareTAGS:spyware, stealerMD5: 9c60113d492ebcf89e2b36af378654cfSHA1: 4b70fda198e03417c032e2f5675bc6d7b9890ec1ANALYSIS DATE: 2023-01-06T09:06:02ZTTPS: T1082, T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – discovery – cea6e89b7b3774762f7f24147665da5b

January 6, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: cea6e89b7b3774762f7f24147665da5bSHA1: bbeb91e4098491ff0a7f5b9dfea902a81c917d05ANALYSIS DATE: 2023-01-06T09:26:08ZTTPS: T1012, T1082, T1112, T1042, T1060 ScoreMeaningExample10Known badA malware family...

Malware Analysis – djvu – c0ff95f938e709e83f5872c0630a9b67

January 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, stealerMD5: c0ff95f938e709e83f5872c0630a9b67SHA1: 35254c0de46398670b5a9b4c6b9e6e9a953cc402ANALYSIS DATE: 2023-01-06T10:01:07ZTTPS: T1130, T1112, T1060, T1222, T1082,...

Malware Analysis – djvu – d13c8f95955973410a07ba397d6a09d7

January 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: d13c8f95955973410a07ba397d6a09d7SHA1: cd2457e2d32449e0fa823c1b86d9e56df3ff448fANALYSIS DATE: 2023-01-06T10:11:56ZTTPS: T1012, T1082, T1222, T1005,...

Malware Analysis – amadey – daa0d1b1bd828f4343b830f047343993

January 6, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: daa0d1b1bd828f4343b830f047343993SHA1: 036b65fab9706cb52fcc7b59032d49b26bef1b7eANALYSIS DATE:...

Malware Analysis – djvu – 5c24f6f6c86564db7ea71bf01ec5dbc5

January 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 5c24f6f6c86564db7ea71bf01ec5dbc5SHA1: e0c5ac9895ba2621bb3ad63a3740d678d137dc59ANALYSIS DATE: 2023-01-06T11:43:32ZTTPS: T1060, T1112, T1053, T1012,...

Malware Analysis – wannacry – 115b1d97402bc50dacb74ba73c7464d2

January 6, 2023

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: 115b1d97402bc50dacb74ba73c7464d2SHA1: 799abb0d4067ec605126cd40ce52949510a60cf7ANALYSIS DATE: 2023-01-06T11:00:52ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – amadey – c3b88f8dfbc849ad2a6d3253febe5905

January 6, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: c3b88f8dfbc849ad2a6d3253febe5905SHA1: 88665567cd41b6d9a950727c16e038712dc08a07ANALYSIS DATE:...

Malware Analysis – asyncrat – 19c677bb8cda5703f42c143bb4251e6a

January 6, 2023

Score: 10 MALWARE FAMILY: asyncratTAGS:family:asyncrat, botnet:default, discovery, evasion, persistence, ransomware, rat, spyware, stealer, trojanMD5: 19c677bb8cda5703f42c143bb4251e6aSHA1: ad85336a7304a4e58b2a4f5c40b02f578aa00923ANALYSIS DATE: 2023-01-06T10:47:46ZTTPS: T1012, T1082,...

Malware Analysis – djvu – b5ac8eff1f9ef7e7ef418f9ea8328e09

January 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: b5ac8eff1f9ef7e7ef418f9ea8328e09SHA1: ec1505b63a00efbeac8f325747df5ff745fbcf0bANALYSIS DATE: 2023-01-06T04:36:48ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – djvu – da1a359be326b3d9888021b12a628fb1

January 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: da1a359be326b3d9888021b12a628fb1SHA1: 551b319ed5bf85ebd09fc1a10f6088079afce619ANALYSIS DATE: 2023-01-06T05:51:05ZTTPS: T1060, T1112, T1053, T1012,...

Malware Analysis – amadey – 64c688c300a9e9859f5b2981507d5e0f

January 6, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 64c688c300a9e9859f5b2981507d5e0fSHA1: 70f6af55c18b663eb30052756a26f064949a4a4eANALYSIS DATE:...

Malware Analysis – amadey – 6efd0ee79db69cb68293eebd38c8ded2

January 6, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 6efd0ee79db69cb68293eebd38c8ded2SHA1: c3df1975f7165f1673d67a9ff57d1062be505616ANALYSIS DATE:...

Malware Analysis – ransomware – ed00ed73b3e0d9b4e74c2c94ff3cf9b1

January 6, 2023

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: ed00ed73b3e0d9b4e74c2c94ff3cf9b1SHA1: ff68bb1dc9651d62d50b3fac245c66b1b91cce40ANALYSIS DATE: 2023-01-05T21:22:28ZTTPS: T1107, T1490, T1082, T1018, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – amadey – 8342e41277305e462526d301aa1196ff

January 6, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 8342e41277305e462526d301aa1196ffSHA1: ad04bf12f10dbc4ae8f4b52d19995d29e3fd378cANALYSIS DATE:...

Malware Analysis

Malware Analysis – djvu – d5f4a4dd7cfce94f91232adca74b896e

Malware Analysis – djvu – a0c687836dca8e691d7a6e09cf859a87

Malware Analysis – djvu – 5bbf807c56cf3a364d547ee56141b74e

Malware Analysis – djvu – 4c3380ed58f4ee04d6638af670f3d834

Malware Analysis – evasion – 8da384b2427b8397a5934182c159c257

Malware Analysis – chaos – d36637d2e08e4c001d39699cedb6248a

Malware Analysis – amadey – 698538668c49ccbc41c8206d9252bacf

Malware Analysis – djvu – 9320af1b7b22fdd4c17cca870c4ea0c4

Malware Analysis – – fbd028cd6727fa3feda537db1ed703f0

Malware Analysis – spyware – 9c60113d492ebcf89e2b36af378654cf

Malware Analysis – discovery – cea6e89b7b3774762f7f24147665da5b

Malware Analysis – djvu – c0ff95f938e709e83f5872c0630a9b67

Malware Analysis – djvu – d13c8f95955973410a07ba397d6a09d7

Malware Analysis – amadey – daa0d1b1bd828f4343b830f047343993

Malware Analysis – djvu – 5c24f6f6c86564db7ea71bf01ec5dbc5

Malware Analysis – wannacry – 115b1d97402bc50dacb74ba73c7464d2

Malware Analysis – amadey – c3b88f8dfbc849ad2a6d3253febe5905

Malware Analysis – asyncrat – 19c677bb8cda5703f42c143bb4251e6a

Malware Analysis – djvu – b5ac8eff1f9ef7e7ef418f9ea8328e09

Malware Analysis – djvu – da1a359be326b3d9888021b12a628fb1

Malware Analysis – amadey – 64c688c300a9e9859f5b2981507d5e0f

Malware Analysis – amadey – 6efd0ee79db69cb68293eebd38c8ded2

Malware Analysis – ransomware – ed00ed73b3e0d9b4e74c2c94ff3cf9b1

Malware Analysis – amadey – 8342e41277305e462526d301aa1196ff

[RANSOMHOUSE] – Ransomware Victim: Fulgar S[.]p[.]A[.]

[INCRANSOM] – Ransomware Victim: Wiraswasta Gemilang

Cobalt Strike Beacon Detected – 83[.]229[.]126[.]65:8080

Cobalt Strike Beacon Detected – 114[.]132[.]150[.]96:8011

Cobalt Strike Beacon Detected – 165[.]154[.]125[.]212:8080

You may have missed