Malware Analysis

Malware Analysis – smokeloader – 6fb66bb5fb50e8eaa954ef4c2e7d35fe

May 9, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 6fb66bb5fb50e8eaa954ef4c2e7d35feSHA1: 725926939e8a895a37c0d2dad7637e115031816fANALYSIS DATE: 2023-05-09T15:50:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – f37ee31206675324ab26cebda09ce213

May 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: f37ee31206675324ab26cebda09ce213SHA1: be85524d255bd79ec89f94e8d5680a95ae609ea4ANALYSIS DATE: 2023-05-09T15:23:14ZTTPS: T1053, T1060, T1112, T1222, T1082, T1012 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – 712a61ae2ddf17f0e35543284b38ecb5

May 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 712a61ae2ddf17f0e35543284b38ecb5SHA1: ec7f3c7187b940993ee0ee3a5e6ecdb5c2f46248ANALYSIS DATE: 2023-05-09T15:10:10ZTTPS: T1053, T1060, T1112, T1222, T1082, T1012 ScoreMeaningExample10Known badA...

Malware Analysis – – b75fe8539b7dc28190a501e879a05a9d

May 9, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: b75fe8539b7dc28190a501e879a05a9dSHA1: a2f1d03ac8c2c3c33c0f77e8882572cac188b762ANALYSIS DATE: 2023-05-09T17:34:11ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – evasion – 1df3b454fe1eb4550d029b5236b0f6e8

May 9, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: 1df3b454fe1eb4550d029b5236b0f6e8SHA1: 7687ccc4f088d6a119c814a4bd66ffa903c72afbANALYSIS DATE: 2023-05-09T17:53:47ZTTPS: T1012, T1082, T1088, T1089, T1112, T1158,...

Malware Analysis – ransomware – c46070b5e113a7f5d9a58de14a11e430

May 9, 2023

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: c46070b5e113a7f5d9a58de14a11e430SHA1: 5007943bec2cf5310cfe8b8c49d6f55f79ad0e4cANALYSIS DATE: 2023-05-09T17:33:53ZTTPS: T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – – 00d4835bed9d6c2cc78aa335947264d0

May 9, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: 00d4835bed9d6c2cc78aa335947264d0SHA1: 4056a37dfe3b3465280e472ba5af54413ad68ac6ANALYSIS DATE: 2023-05-09T16:44:51ZTTPS: T1012, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – 3f96efacd3ab4a4b6ecba23fa0b99390

May 8, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:31c7719b5ee962fbde376b75e771360d, discovery, persistence, ransomware, spyware, stealerMD5: 3f96efacd3ab4a4b6ecba23fa0b99390SHA1: c73f24a0f81267cac9045dd93d8e0805f6026c35ANALYSIS DATE: 2023-05-08T14:58:54ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – amadey – 727b9c1facb2764ed3b69f34078ec711

May 8, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, botnet:pub1, botnet:sprg, backdoor, discovery, ransomware, trojanMD5: 727b9c1facb2764ed3b69f34078ec711SHA1: 965c066af34f939ac544fdf702b6609979f9d79dANALYSIS DATE: 2023-05-08T15:09:16ZTTPS: T1053, T1012, T1120,...

Malware Analysis – djvu – 941dc581a841ce8fc209aab1345fabba

May 8, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:31c7719b5ee962fbde376b75e771360d, discovery, persistence, ransomware, spyware, stealerMD5: 941dc581a841ce8fc209aab1345fabbaSHA1: 6473ef23e5f87d642fdb249d2ce01993a5aa30edANALYSIS DATE: 2023-05-08T15:22:13ZTTPS: T1082, T1053, T1005, T1081,...

Malware Analysis – amadey – 32b3fe74b988b12fcb484850f17d1721

May 8, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, botnet:pub1, botnet:sprg, backdoor, discovery, ransomware, trojanMD5: 32b3fe74b988b12fcb484850f17d1721SHA1: f6d21919f699f4a903ccc382bbce215642aa1db4ANALYSIS DATE: 2023-05-08T15:30:14ZTTPS: T1012, T1222, T1053,...

Malware Analysis – amadey – 0e71e6e602e6cfb38ea3567ac1130343

May 8, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, botnet:pub1, botnet:sprg, backdoor, discovery, ransomware, trojanMD5: 0e71e6e602e6cfb38ea3567ac1130343SHA1: 8c50ae1dcfafd674643af4814f7b96ed835ef22aANALYSIS DATE: 2023-05-08T16:02:22ZTTPS: T1012, T1120, T1082,...

Malware Analysis – djvu – bf3a2484532f79b9a300bda711005470

May 8, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:31c7719b5ee962fbde376b75e771360d, discovery, persistence, ransomware, spyware, stealerMD5: bf3a2484532f79b9a300bda711005470SHA1: 29e99330b4d07f80ff48a7d7c2c265262b8f1713ANALYSIS DATE: 2023-05-08T16:08:47ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – ransomware – 51064cc8676f45813dec4c5a1c1ce150

May 8, 2023

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 51064cc8676f45813dec4c5a1c1ce150SHA1: e9d2c7b278c98f85481176c6089b2a74120c6b56ANALYSIS DATE: 2023-05-08T16:39:39ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – evasion – 727b2d3ec84ce3139998a79342fa324b

May 8, 2023

Score: 6 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 727b2d3ec84ce3139998a79342fa324bSHA1: 503f4998eb0e88388e82dca578c411a2cfe6455aANALYSIS DATE: 2023-05-08T17:00:12ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – ransomware – 9634b28186b502eab4ead6119285f4d7

May 8, 2023

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 9634b28186b502eab4ead6119285f4d7SHA1: 62bcdb03dbd6bf9fc0383582b5108e8b8b0b04a3ANALYSIS DATE: 2023-05-08T17:48:51ZTTPS: T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – banker – 14f1074238583c9afde262fb31782ac9

May 8, 2023

Score: 8 MALWARE FAMILY: bankerTAGS:banker, evasion, ransomwareMD5: 14f1074238583c9afde262fb31782ac9SHA1: b20c3d6ec14d707ae1da754810d63b8e0b8bbee0ANALYSIS DATE: 2023-05-08T17:45:43ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – dharma – 5c36e305d926e55ef98d392176890cd2

May 8, 2023

Score: 10 MALWARE FAMILY: dharmaTAGS:family:dharma, discovery, evasion, ransomwareMD5: 5c36e305d926e55ef98d392176890cd2SHA1: 64a15cdf89b6c8b85cba355b6944074614d810fdANALYSIS DATE: 2023-05-08T17:48:49ZTTPS: T1490, T1059, T1107, T1082, T1012, T1120, T1070, T1053,...

Malware Analysis – – 21d01fa87dfcaf971ff7b63a1a6fda94

May 8, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: 21d01fa87dfcaf971ff7b63a1a6fda94SHA1: f3caa9831fc715af4f47cd98803549902dffe30aANALYSIS DATE: 2023-05-08T17:48:48ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ouroboros – bfed6debcd8c3dbf8ea21655247ed3f0

May 8, 2023

Score: 10 MALWARE FAMILY: ouroborosTAGS:family:ouroboros, evasion, ransomwareMD5: bfed6debcd8c3dbf8ea21655247ed3f0SHA1: 2b05bc9c9a14e3f9db8e758b2f5fa060857499bfANALYSIS DATE: 2023-05-08T17:48:54ZTTPS: T1031 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – chaos – deb8f4311fd52319f6168c10b626c808

May 8, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, ransomware, spyware, stealerMD5: deb8f4311fd52319f6168c10b626c808SHA1: f4807d71a1048d05815a09b74997f338e26ba9ffANALYSIS DATE: 2023-05-08T17:48:55ZTTPS: T1490, T1059, T1107, T1012, T1491, T1112, T1005,...

Malware Analysis – chaos – 9eb958c38bd3d39c55b009f9a200f42f

May 8, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, ransomware, spyware, stealerMD5: 9eb958c38bd3d39c55b009f9a200f42fSHA1: b5ab794dd5821d08f7ecd860ba7975a6644dd46dANALYSIS DATE: 2023-05-08T17:48:53ZTTPS: T1491, T1112, T1082, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 9d44fd089264803ad86f41edd56aef4d

May 8, 2023

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 9d44fd089264803ad86f41edd56aef4dSHA1: 936787fa460b642d6d84e4edf0fc92d1751f8b35ANALYSIS DATE: 2023-05-08T17:48:53ZTTPS: T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – smokeloader – 41476924126a3f0ee8dbd9f697735fe4

May 7, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 41476924126a3f0ee8dbd9f697735fe4SHA1: 04177fd9a26c89e14e2418c15a743b01c73d7ec0ANALYSIS DATE: 2023-05-07T05:32:40ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis

Malware Analysis – smokeloader – 6fb66bb5fb50e8eaa954ef4c2e7d35fe

Malware Analysis – djvu – f37ee31206675324ab26cebda09ce213

Malware Analysis – djvu – 712a61ae2ddf17f0e35543284b38ecb5

Malware Analysis – – b75fe8539b7dc28190a501e879a05a9d

Malware Analysis – evasion – 1df3b454fe1eb4550d029b5236b0f6e8

Malware Analysis – ransomware – c46070b5e113a7f5d9a58de14a11e430

Malware Analysis – – 00d4835bed9d6c2cc78aa335947264d0

Malware Analysis – djvu – 3f96efacd3ab4a4b6ecba23fa0b99390

Malware Analysis – amadey – 727b9c1facb2764ed3b69f34078ec711

Malware Analysis – djvu – 941dc581a841ce8fc209aab1345fabba

Malware Analysis – amadey – 32b3fe74b988b12fcb484850f17d1721

Malware Analysis – amadey – 0e71e6e602e6cfb38ea3567ac1130343

Malware Analysis – djvu – bf3a2484532f79b9a300bda711005470

Malware Analysis – ransomware – 51064cc8676f45813dec4c5a1c1ce150

Malware Analysis – evasion – 727b2d3ec84ce3139998a79342fa324b

Malware Analysis – ransomware – 9634b28186b502eab4ead6119285f4d7

Malware Analysis – banker – 14f1074238583c9afde262fb31782ac9

Malware Analysis – dharma – 5c36e305d926e55ef98d392176890cd2

Malware Analysis – – 21d01fa87dfcaf971ff7b63a1a6fda94

Malware Analysis – ouroboros – bfed6debcd8c3dbf8ea21655247ed3f0

Malware Analysis – chaos – deb8f4311fd52319f6168c10b626c808

Malware Analysis – chaos – 9eb958c38bd3d39c55b009f9a200f42f

Malware Analysis – ransomware – 9d44fd089264803ad86f41edd56aef4d

Malware Analysis – smokeloader – 41476924126a3f0ee8dbd9f697735fe4

Cobalt Strike Beacon Detected – 121[.]43[.]37[.]134:4434

Cobalt Strike Beacon Detected – 119[.]29[.]231[.]118:443

Cobalt Strike Beacon Detected – 39[.]101[.]74[.]162:443

Cobalt Strike Beacon Detected – 8[.]218[.]112[.]112:8880

Cobalt Strike Beacon Detected – 47[.]109[.]48[.]57:443

You may have missed