Malware Analysis

Malware Analysis – smokeloader – b1d2c66939121ccd165b024d9451cb4d

December 31, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: b1d2c66939121ccd165b024d9451cb4dSHA1: e08bddb59f360a78f9c38bf30f1ad45d8e3ec060ANALYSIS DATE: 2022-12-31T05:31:10ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – b407a3f0e6290013e97b1c53fd935eff

December 31, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: b407a3f0e6290013e97b1c53fd935effSHA1: 430978c3912c16c45fb4bdb38b7d8829cba198adANALYSIS DATE: 2022-12-31T05:31:29ZTTPS: T1222, T1005, T1081, T1012,...

Malware Analysis – amadey – d0f554a0c60d749227776e1c3a557c10

December 31, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:dcrat, family:djvu, family:lgoogloader, family:redline, family:smokeloader, botnet:8888888, botnet:letgo, botnet:sport, backdoor, collection, discovery, downloader, infostealer, persistence, ransomware,...

Malware Analysis – evasion – ccd8aeacd5792f628d48b660b36a364f

December 31, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: ccd8aeacd5792f628d48b660b36a364fSHA1: f73441d600669341b7d894a2d06fb695dc002ef4ANALYSIS DATE: 2022-12-31T04:52:43ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – ransomware – fd9170ec42a74eb94ad7e4d23fc793ba

December 31, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: fd9170ec42a74eb94ad7e4d23fc793baSHA1: a541035a5fdc235e19d71fa42dc53f02c9a5b379ANALYSIS DATE: 2022-12-30T21:26:50ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – smokeloader – c736a762fc51fb3feef8ca6294395b12

December 31, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: c736a762fc51fb3feef8ca6294395b12SHA1: f08a967ff043f1b0e3da5607e07e9c23cc127814ANALYSIS DATE: 2022-12-30T22:01:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – amadey – 8e933d52ccb49e00f87114ad4eca837e

December 31, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:lgoogloader, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, downloader, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 8e933d52ccb49e00f87114ad4eca837eSHA1:...

Malware Analysis – discovery – 104bc7f2d94943c4474b1f4f469a2cee

December 31, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, ransomwareMD5: 104bc7f2d94943c4474b1f4f469a2ceeSHA1: 8f2b5202f00ebac670636806b8c49a2917651f05ANALYSIS DATE: 2022-12-30T21:11:38ZTTPS: T1082, T1057, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – ab39a99cb87673d34352810cc6989d7f

December 31, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: ab39a99cb87673d34352810cc6989d7fSHA1: ef0c89c1f8e3c78789fdcaf7b4ea8b24e2c37591ANALYSIS DATE: 2022-12-30T23:43:01ZTTPS: T1060, T1112, T1222, T1005,...

Malware Analysis – djvu – e6e1bad5a9c1478a96963705e86dcb99

December 31, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: e6e1bad5a9c1478a96963705e86dcb99SHA1: 29e70b864c6eb89f0ed4d77a6af10b854392f5a1ANALYSIS DATE: 2022-12-30T22:34:01ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – – 33ab0ac396c5e0e5dd47c187c37bac2f

December 31, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 33ab0ac396c5e0e5dd47c187c37bac2fSHA1: 5ab5db3a6344e531c9a1e44305071985520c7a11ANALYSIS DATE: 2022-12-30T22:04:01ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – amadey – 6cd5c286fcae09f8e1c2ed2994adec92

December 31, 2022

Malware Analysis – amadey – 341a6999d2e5ba98ddceb1ec611efebc

December 30, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:dcrat, family:djvu, family:lgoogloader, family:redline, family:smokeloader, family:vidar, botnet:19, botnet:instpenn, backdoor, collection, discovery, downloader, infostealer, persistence, ransomware,...

Malware Analysis – djvu – 99334c9bec2c6c27328d315165de39b6

December 30, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 99334c9bec2c6c27328d315165de39b6SHA1: e493b7b9ed6f887a4ceb7246a07d8ef05cb396c7ANALYSIS DATE: 2022-12-30T16:47:34ZTTPS: T1060, T1112, T1012, T1082,...

Malware Analysis – discovery – fea370ba722df2426478793bd7d812a8

December 30, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: fea370ba722df2426478793bd7d812a8SHA1: 23096f183fd7717caca663cbe73e9d2170833222ANALYSIS DATE: 2022-12-30T16:50:33ZTTPS: T1012, T1082, T1112, T1042, T1060 ScoreMeaningExample10Known badA malware family...

Malware Analysis – ransomware – f5193c12248ee4eb6bac6b11aff87734

December 30, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: f5193c12248ee4eb6bac6b11aff87734SHA1: b96027cbdcae8ce2ea8ef3302c08ed4fe25cd23fANALYSIS DATE: 2022-12-30T17:14:46ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – amadey – f246c5569a93d9655604871ec6dc3aaf

December 30, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:lgoogloader, family:redline, family:smokeloader, family:vidar, botnet:19, botnet:instpenn, botnet:letgo, backdoor, collection, discovery, downloader, infostealer, persistence, ransomware,...

Malware Analysis – discovery – c1e681e9f1f5088b317ec90f02473f6a

December 30, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: c1e681e9f1f5088b317ec90f02473f6aSHA1: 3b3d637e3866234a642b49d283646488ae434bd7ANALYSIS DATE: 2022-12-30T17:32:20ZTTPS: T1082, T1060, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – dfd804f813a483907ec996ced444af66

December 30, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, persistence, ransomwareMD5: dfd804f813a483907ec996ced444af66SHA1: 7c02662a7570608e61c86a9859eda7b0f661a177ANALYSIS DATE: 2022-12-30T17:32:52ZTTPS: T1130, T1112, T1060, T1012, T1497, T1120, T1082 ScoreMeaningExample10Known...

Malware Analysis – amadey – 40d315051f49a13c417110582f9fb6d1

December 30, 2022

Malware Analysis – – b346183f5462c7c00ff2d003e8196a7d

December 30, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: b346183f5462c7c00ff2d003e8196a7dSHA1: 94f102ad7c6717b14bb70ed277f6402ddc9100f7ANALYSIS DATE: 2022-12-30T17:46:26ZTTPS: T1130, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – discovery – 1c0b42f6185c0d23c4698c90531b7256

December 30, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 1c0b42f6185c0d23c4698c90531b7256SHA1: 756f38d41e6f6229ad7c79a3a5b61bd6ad50c418ANALYSIS DATE: 2022-12-30T10:29:51ZTTPS: T1107, T1490, T1012, T1120, T1082, T1060, T1112, T1222 ScoreMeaningExample10Known...

Malware Analysis – phobos – 1f4ee724e5385a77dd198fd9998f7b86

December 30, 2022

Score: 10 MALWARE FAMILY: phobosTAGS:family:phobos, evasion, persistence, ransomware, spyware, stealerMD5: 1f4ee724e5385a77dd198fd9998f7b86SHA1: 0e428e7c81e60b0e46b81bbe611ef8fd377a5993ANALYSIS DATE: 2022-12-30T10:29:48ZTTPS: T1490, T1059, T1107, T1031, T1005, T1081,...

Malware Analysis – amadey – de2242ca8ab91c2fc7d89eff05d2c97b

December 30, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:dcrat, family:djvu, family:lgoogloader, family:smokeloader, family:vidar, botnet:19, backdoor, collection, discovery, downloader, infostealer, persistence, ransomware, rat, spyware,...

Malware Analysis

Malware Analysis – smokeloader – b1d2c66939121ccd165b024d9451cb4d

Malware Analysis – djvu – b407a3f0e6290013e97b1c53fd935eff

Malware Analysis – amadey – d0f554a0c60d749227776e1c3a557c10

Malware Analysis – evasion – ccd8aeacd5792f628d48b660b36a364f

Malware Analysis – ransomware – fd9170ec42a74eb94ad7e4d23fc793ba

Malware Analysis – smokeloader – c736a762fc51fb3feef8ca6294395b12

Malware Analysis – amadey – 8e933d52ccb49e00f87114ad4eca837e

Malware Analysis – discovery – 104bc7f2d94943c4474b1f4f469a2cee

Malware Analysis – djvu – ab39a99cb87673d34352810cc6989d7f

Malware Analysis – djvu – e6e1bad5a9c1478a96963705e86dcb99

Malware Analysis – – 33ab0ac396c5e0e5dd47c187c37bac2f

Malware Analysis – amadey – 6cd5c286fcae09f8e1c2ed2994adec92

Malware Analysis – amadey – 341a6999d2e5ba98ddceb1ec611efebc

Malware Analysis – djvu – 99334c9bec2c6c27328d315165de39b6

Malware Analysis – discovery – fea370ba722df2426478793bd7d812a8

Malware Analysis – ransomware – f5193c12248ee4eb6bac6b11aff87734

Malware Analysis – amadey – f246c5569a93d9655604871ec6dc3aaf

Malware Analysis – discovery – c1e681e9f1f5088b317ec90f02473f6a

Malware Analysis – discovery – dfd804f813a483907ec996ced444af66

Malware Analysis – amadey – 40d315051f49a13c417110582f9fb6d1

Malware Analysis – – b346183f5462c7c00ff2d003e8196a7d

Malware Analysis – discovery – 1c0b42f6185c0d23c4698c90531b7256

Malware Analysis – phobos – 1f4ee724e5385a77dd198fd9998f7b86

Malware Analysis – amadey – de2242ca8ab91c2fc7d89eff05d2c97b

Miljödata – 870,108 breached accounts

Cobalt Strike Beacon Detected – 119[.]91[.]203[.]199:88

Cobalt Strike Beacon Detected – 106[.]54[.]239[.]134:80

Cobalt Strike Beacon Detected – 81[.]69[.]98[.]230:50010

Cobalt Strike Beacon Detected – 103[.]43[.]18[.]10:80

You may have missed