Malware Analysis

Malware Analysis – djvu – e1346d650519a0c9124f2decc2198f01

January 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: e1346d650519a0c9124f2decc2198f01SHA1: 2ca0a7c3055e70be006d9e2b2a363a5380e9907dANALYSIS DATE: 2023-01-05T23:55:15ZTTPS: T1053, T1082, T1222, T1012,...

Malware Analysis – evasion – ce5451bc9732cf76ae643f57a6e4540a

January 6, 2023

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: ce5451bc9732cf76ae643f57a6e4540aSHA1: 6c340c782d97bd4f678d13e547d1494c41141c5aANALYSIS DATE: 2023-01-05T22:54:21ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – 1a31a6e01c28f2308a8728981a0ba917

January 5, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 1a31a6e01c28f2308a8728981a0ba917SHA1: e573fac78ffb94a69d704e62a4bc48313d0036f8ANALYSIS DATE: 2023-01-05T15:54:05ZTTPS: T1060, T1112, T1005, T1081,...

Malware Analysis – djvu – 62424bb1fdd7926fcb49ef7c8f13e272

January 5, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 62424bb1fdd7926fcb49ef7c8f13e272SHA1: 13a3afed29a458e247f74375c00515a205dc87e1ANALYSIS DATE: 2023-01-05T16:11:06ZTTPS: T1005, T1081, T1060, T1112,...

Malware Analysis – evasion – b53e20cecff1c0884afea69e403b788a

January 5, 2023

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: b53e20cecff1c0884afea69e403b788aSHA1: db36d6788b823b2fc8c13b597633928150198effANALYSIS DATE: 2023-01-05T16:39:18ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – amadey – 1170fa844f90aded8f9c12493f54d543

January 5, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:dcrat, family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealer, trojan,...

Malware Analysis – djvu – b2fabf8e6cd2703ace9d85f6182b4b51

January 5, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: b2fabf8e6cd2703ace9d85f6182b4b51SHA1: dc6371e4ebda8f90b6cf4421c18d46956ba8bd34ANALYSIS DATE: 2023-01-05T16:47:26ZTTPS: T1060, T1112, T1222, T1053,...

Malware Analysis – djvu – 054df7f4d72eba9f66a3e8940b223609

January 5, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, stealerMD5: 054df7f4d72eba9f66a3e8940b223609SHA1: 91877bfb6ca6ff8314376d435beec6c8a139a755ANALYSIS DATE: 2023-01-05T17:15:25ZTTPS: T1222, T1082, T1053, T1130, T1112,...

Malware Analysis – smokeloader – 4a0e3b3995cdc315c4caf048c3211f89

January 5, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 4a0e3b3995cdc315c4caf048c3211f89SHA1: 4a47887a6190b1a816c6db5cbf4b545e4a6bf92eANALYSIS DATE: 2023-01-05T17:17:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – – d32877932ed310382b30efdd3cf67b29

January 5, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: d32877932ed310382b30efdd3cf67b29SHA1: 7faaad8a8aea96bcf78fdbc4ea6f73d76d58143aANALYSIS DATE: 2023-01-05T17:18:42ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – discovery – 4d8a60c6e654bd38212cebf3d17e5d38

January 5, 2023

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, persistenceMD5: 4d8a60c6e654bd38212cebf3d17e5d38SHA1: 9911ab18310d400ba4698a97c591e3893a7e3400ANALYSIS DATE: 2023-01-05T17:28:00ZTTPS: T1012, T1060, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – spyware – f65a05f7af44b5054e8b77aa0ce1468c

January 5, 2023

Score: 8 MALWARE FAMILY: spywareTAGS:spyware, stealerMD5: f65a05f7af44b5054e8b77aa0ce1468cSHA1: 683ca30368c8150776f26ff470129028c5fdfa12ANALYSIS DATE: 2023-01-04T22:22:31ZTTPS: T1102, T1005, T1081, T1012, T1082 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – djvu – e556df5dafcb1cba319216b0ab250c37

January 5, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: e556df5dafcb1cba319216b0ab250c37SHA1: 83a3af0ee04454412044accf81d0f2b93cc2aa59ANALYSIS DATE: 2023-01-04T22:45:26ZTTPS: T1222, T1012, T1082, T1060,...

Malware Analysis – discovery – bedb06e830e94cbd82a964874a79b35a

January 5, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, persistence, ransomwareMD5: bedb06e830e94cbd82a964874a79b35aSHA1: 6ed5453096529de19235d223a475a0cfa706425fANALYSIS DATE: 2023-01-04T22:31:12ZTTPS: T1012, T1120, T1082, T1057, T1031, T1222, T1562, T1489,...

Malware Analysis – amadey – b5a3f6244498a9aff40f6e3c9764e3d5

January 5, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:dcrat, family:djvu, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealer, trojan, vmprotectMD5: b5a3f6244498a9aff40f6e3c9764e3d5SHA1: 896d4bc913f77d15f2666b8212eab0483ac9940eANALYSIS DATE:...

Malware Analysis – amadey – 81ede1353918bc7bd5fa5fd237365764

January 5, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:dcrat, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:19, botnet:555555555444, botnet:@redlinevip cloud (tg: @fatherofcarders), botnet:logss, backdoor, brand:microsoft, collection,...

Malware Analysis – djvu – 8f8eca0d17868d69f770cded01f0e515

January 5, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 8f8eca0d17868d69f770cded01f0e515SHA1: 7a300200faed480c61fd71319ce2dd1dd5ba29b1ANALYSIS DATE: 2023-01-04T23:15:48ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – discovery – 2c628cca730d954ab017d56992c5afdf

January 5, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 2c628cca730d954ab017d56992c5afdfSHA1: 4686d228df5031e36cd3db6b76571f19f0e6781aANALYSIS DATE: 2023-01-04T23:12:35ZTTPS: T1082, T1012, T1112, T1042, T1060 ScoreMeaningExample10Known badA malware family...

Malware Analysis – – 8c95b758ba42a8920cc4803172392b69

January 5, 2023

Score: 3 MALWARE FAMILY: TAGS:MD5: 8c95b758ba42a8920cc4803172392b69SHA1: 8f769c533a14defed94e51854ca5793d42d5cfe7ANALYSIS DATE: 2023-01-04T23:17:26ZTTPS: T1012, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – a043928a2208fb9a3e90bc9a17e86770

January 4, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: a043928a2208fb9a3e90bc9a17e86770SHA1: 4eb744d6e8db83b27c93d99956e1fd2207542693ANALYSIS DATE: 2023-01-04T15:43:52ZTTPS: T1005, T1081, T1222, T1060,...

Malware Analysis – discovery – d54c644994f501358b6074a0ce2f331b

January 4, 2023

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, upxMD5: d54c644994f501358b6074a0ce2f331bSHA1: 863d56e70d675eab6e83909fb587ad9e802bcce2ANALYSIS DATE: 2023-01-04T15:46:58ZTTPS: T1082, T1112, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – amadey – 578be748607a89ea3df1c31c52a202c1

January 4, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 578be748607a89ea3df1c31c52a202c1SHA1: f868c590736d08d9a74ae470e846950822effa51ANALYSIS...

Malware Analysis – discovery – 4e168b9677f1c914fbfbafc2844ef67c

January 4, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 4e168b9677f1c914fbfbafc2844ef67cSHA1: 942c1398f801e6bdcec164efa0870cacc6291785ANALYSIS DATE: 2023-01-04T16:30:01ZTTPS: T1012, T1082, T1112, T1042, T1060, T1120 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – a93639ae8e708ff7b6642f0fab234edd

January 4, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: a93639ae8e708ff7b6642f0fab234eddSHA1: 3e3ca94af531ec5386e1df14bbeea448ae75d613ANALYSIS DATE: 2023-01-04T16:14:24ZTTPS: T1060, T1112, T1005, T1081,...

Malware Analysis

Malware Analysis – djvu – e1346d650519a0c9124f2decc2198f01

Malware Analysis – evasion – ce5451bc9732cf76ae643f57a6e4540a

Malware Analysis – djvu – 1a31a6e01c28f2308a8728981a0ba917

Malware Analysis – djvu – 62424bb1fdd7926fcb49ef7c8f13e272

Malware Analysis – evasion – b53e20cecff1c0884afea69e403b788a

Malware Analysis – amadey – 1170fa844f90aded8f9c12493f54d543

Malware Analysis – djvu – b2fabf8e6cd2703ace9d85f6182b4b51

Malware Analysis – djvu – 054df7f4d72eba9f66a3e8940b223609

Malware Analysis – smokeloader – 4a0e3b3995cdc315c4caf048c3211f89

Malware Analysis – – d32877932ed310382b30efdd3cf67b29

Malware Analysis – discovery – 4d8a60c6e654bd38212cebf3d17e5d38

Malware Analysis – spyware – f65a05f7af44b5054e8b77aa0ce1468c

Malware Analysis – djvu – e556df5dafcb1cba319216b0ab250c37

Malware Analysis – discovery – bedb06e830e94cbd82a964874a79b35a

Malware Analysis – amadey – b5a3f6244498a9aff40f6e3c9764e3d5

Malware Analysis – amadey – 81ede1353918bc7bd5fa5fd237365764

Malware Analysis – djvu – 8f8eca0d17868d69f770cded01f0e515

Malware Analysis – discovery – 2c628cca730d954ab017d56992c5afdf

Malware Analysis – – 8c95b758ba42a8920cc4803172392b69

Malware Analysis – djvu – a043928a2208fb9a3e90bc9a17e86770

Malware Analysis – discovery – d54c644994f501358b6074a0ce2f331b

Malware Analysis – amadey – 578be748607a89ea3df1c31c52a202c1

Malware Analysis – discovery – 4e168b9677f1c914fbfbafc2844ef67c

Malware Analysis – djvu – a93639ae8e708ff7b6642f0fab234edd

Cobalt Strike Beacon Detected – 106[.]53[.]191[.]52:80

[LYNX] – Ransomware Victim: Royal Chemical

[PLAY] – Ransomware Victim: Grafton Technologies

[PLAY] – Ransomware Victim: Regal Ideas

[AKIRA] – Ransomware Victim: Av Alumitran

You may have missed