Malware Analysis

Malware Analysis – amadey – e7d749dbfe2e17f6ea16091b533d6dac

January 3, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: e7d749dbfe2e17f6ea16091b533d6dacSHA1: ba371eee10e094cf22edf271666774c9cfe81752ANALYSIS...

Malware Analysis – lockbit – 38745539b71cf201bb502437f891d799

January 3, 2023

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, ransomwareMD5: 38745539b71cf201bb502437f891d799SHA1: f2a72bee623659d3ba16b365024020868246d901ANALYSIS DATE: 2023-01-03T09:33:37ZTTPS: T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – ransomware – 42e201d426895fc33fd4a940e63cc157

January 3, 2023

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 42e201d426895fc33fd4a940e63cc157SHA1: 6b401d175e45b8c7069172530ec4fc29bf9d9f0bANALYSIS DATE: 2023-01-03T09:13:57ZTTPS: T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – e231d644f5b878acd617f35994acd50d

January 3, 2023

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: e231d644f5b878acd617f35994acd50dSHA1: 45bc0cded34342459efa7312a7a68d8788daff20ANALYSIS DATE: 2023-01-03T09:21:12ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 73b0edba2950305182437e022ac81eb6

January 3, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 73b0edba2950305182437e022ac81eb6SHA1: 7a22d5919da5d0f07fbc50d100b2b10a1c0b7398ANALYSIS DATE: 2023-01-03T10:55:15ZTTPS: T1005, T1081, T1082, T1012,...

Malware Analysis – amadey – 909ea795bd8c690938aa1ea5b8494614

January 3, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 909ea795bd8c690938aa1ea5b8494614SHA1: f10c1783d0d1e65885ecf99f8a108f9b8a43f4c7ANALYSIS...

Malware Analysis – amadey – 9db4252cc21a8028173bd4891b236c84

January 3, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:dcrat, family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealer, trojan,...

Malware Analysis – djvu – f0b72f16fd3e5a20da00306c8b2620c2

January 3, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: f0b72f16fd3e5a20da00306c8b2620c2SHA1: 371346d429bb2383740d3a578f9f6a5fa174ff3cANALYSIS DATE: 2023-01-03T09:52:50ZTTPS: T1082, T1012, T1060, T1112,...

Malware Analysis – djvu – 7db8381bc4b59273ddfb708d9321f33a

January 3, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 7db8381bc4b59273ddfb708d9321f33aSHA1: 7a6c38a107c6536f3e46147db35349238ca0bd66ANALYSIS DATE: 2023-01-03T04:35:23ZTTPS: T1060, T1112, T1082, T1012,...

Malware Analysis – smokeloader – d01a7d120480d9819cfbaf680a7a87c9

January 3, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: d01a7d120480d9819cfbaf680a7a87c9SHA1: 51eff6b124419ac88ff6c7580c7c82d2cc25808bANALYSIS DATE: 2023-01-03T03:26:28ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 221439c77c4ebe920e2595fbd4a32069

January 3, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, stealerMD5: 221439c77c4ebe920e2595fbd4a32069SHA1: fd3ec3405a6c9116e0a4b16f4e5b4e7886f48d41ANALYSIS DATE: 2023-01-03T04:15:00ZTTPS: T1053, T1130, T1112, T1222, T1060,...

Malware Analysis – amadey – 70bbc9e9b5b79997153143323248b548

January 3, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 70bbc9e9b5b79997153143323248b548SHA1: 3dee9ea796f66942807f0f947f3ed2294a1d02fcANALYSIS...

Malware Analysis – ransomware – 9608c8b6c8d80fdc67b99edd3c53d3d2

January 3, 2023

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 9608c8b6c8d80fdc67b99edd3c53d3d2SHA1: 37b11d3d7b7a1d18daafd6c63b33526860aaefe6ANALYSIS DATE: 2023-01-03T05:30:57ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – bootkit – 2dbb19618eb730077e80a26464602444

January 3, 2023

Score: 10 MALWARE FAMILY: bootkitTAGS:bootkit, discovery, evasion, exploit, persistence, trojanMD5: 2dbb19618eb730077e80a26464602444SHA1: f3b9459d2b8a37564b7c3c362eaad80eb52ce51cANALYSIS DATE: 2023-01-03T05:28:27ZTTPS: T1067, T1222, T1082, T1088, T1089, T1112...

Malware Analysis – djvu – c04760e74be54ca3cadb73334a12487b

January 3, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, stealerMD5: c04760e74be54ca3cadb73334a12487bSHA1: 36b66864b9302dcadca19d90d934654f579ff49bANALYSIS DATE: 2023-01-03T05:20:54ZTTPS: T1130, T1112, T1060, T1222, T1082...

Malware Analysis – amadey – d6832d5709e26e9028fdcde1cd2e7921

January 2, 2023

Malware Analysis – banker – b96c2bc5e720dd7120af3b3015732fa7

January 2, 2023

Score: 8 MALWARE FAMILY: bankerTAGS:banker, ransomwareMD5: b96c2bc5e720dd7120af3b3015732fa7SHA1: daf90883b71f4a465a20055ec0b25d623cbb72c0ANALYSIS DATE: 2023-01-01T22:05:15ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – df249ff3cb8fb36e7c6ae05dc7b14250

January 2, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: df249ff3cb8fb36e7c6ae05dc7b14250SHA1: 4f1af06e54b0acce7c18bf341efcd581d86e439dANALYSIS DATE: 2023-01-01T21:44:18ZTTPS: T1012, T1082, T1060, T1112,...

Malware Analysis – djvu – e12951b5ae49474dbea669e60e41a8d3

January 2, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: e12951b5ae49474dbea669e60e41a8d3SHA1: 12efa9aac0739b08ed6ad59d871c4bba92a4d403ANALYSIS DATE: 2023-01-01T21:21:05ZTTPS: T1060, T1112, T1222, T1005,...

Malware Analysis – discovery – d0cc254722e307c7bb9c55d7cb0ef558

January 2, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, ransomwareMD5: d0cc254722e307c7bb9c55d7cb0ef558SHA1: 1d353223f8937526a6ee8568bb32138481c87937ANALYSIS DATE: 2023-01-01T21:44:18ZTTPS: T1082, T1012, T1130, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 35b4d8975b7d90a92362c4872da8e000

January 2, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 35b4d8975b7d90a92362c4872da8e000SHA1: 8ec2dedf76f45ea6ba1e089d2e8081d7c8ae0907ANALYSIS DATE: 2023-01-01T22:31:38ZTTPS: T1060, T1112, T1012, T1082,...

Malware Analysis – smokeloader – 99a72f7ff695ad0c6a7c697a43ad42f1

January 2, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 99a72f7ff695ad0c6a7c697a43ad42f1SHA1: 81cf997876a1395e4e20ba5c6d2de38e28fa40d8ANALYSIS DATE: 2023-01-01T23:02:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – amadey – d061fe68df14422113a7069698607dee

January 2, 2023

Malware Analysis – amadey – e780c60ae345b6925a4d2da8eafca3b2

January 2, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: e780c60ae345b6925a4d2da8eafca3b2SHA1: c083ed93f070ca7fbf591c29fbb6f35795efd7b9ANALYSIS...

Malware Analysis

Malware Analysis – amadey – e7d749dbfe2e17f6ea16091b533d6dac

Malware Analysis – lockbit – 38745539b71cf201bb502437f891d799

Malware Analysis – ransomware – 42e201d426895fc33fd4a940e63cc157

Malware Analysis – ransomware – e231d644f5b878acd617f35994acd50d

Malware Analysis – djvu – 73b0edba2950305182437e022ac81eb6

Malware Analysis – amadey – 909ea795bd8c690938aa1ea5b8494614

Malware Analysis – amadey – 9db4252cc21a8028173bd4891b236c84

Malware Analysis – djvu – f0b72f16fd3e5a20da00306c8b2620c2

Malware Analysis – djvu – 7db8381bc4b59273ddfb708d9321f33a

Malware Analysis – smokeloader – d01a7d120480d9819cfbaf680a7a87c9

Malware Analysis – djvu – 221439c77c4ebe920e2595fbd4a32069

Malware Analysis – amadey – 70bbc9e9b5b79997153143323248b548

Malware Analysis – ransomware – 9608c8b6c8d80fdc67b99edd3c53d3d2

Malware Analysis – bootkit – 2dbb19618eb730077e80a26464602444

Malware Analysis – djvu – c04760e74be54ca3cadb73334a12487b

Malware Analysis – amadey – d6832d5709e26e9028fdcde1cd2e7921

Malware Analysis – banker – b96c2bc5e720dd7120af3b3015732fa7

Malware Analysis – djvu – df249ff3cb8fb36e7c6ae05dc7b14250

Malware Analysis – djvu – e12951b5ae49474dbea669e60e41a8d3

Malware Analysis – discovery – d0cc254722e307c7bb9c55d7cb0ef558

Malware Analysis – djvu – 35b4d8975b7d90a92362c4872da8e000

Malware Analysis – smokeloader – 99a72f7ff695ad0c6a7c697a43ad42f1

Malware Analysis – amadey – d061fe68df14422113a7069698607dee

Malware Analysis – amadey – e780c60ae345b6925a4d2da8eafca3b2

Brute Ratel C4 Detected – 52[.]197[.]160[.]186:80

[QILIN] – Ransomware Victim: knightknox

[IMNCREW] – Ransomware Victim: Apntelecom[.]com

CVE Alert: CVE-2025-53490

CVE Alert: CVE-2025-45938

You may have missed