Malware Analysis

Malware Analysis – phobos – 78e7a770f7af0b3fa64fc324c391e288

December 27, 2022

Score: 10 MALWARE FAMILY: phobosTAGS:family:phobos, evasion, persistence, ransomware, spyware, stealerMD5: 78e7a770f7af0b3fa64fc324c391e288SHA1: 0506b7d989e2381fdb2122ef9d2ca6cd7ce7f132ANALYSIS DATE: 2022-12-27T10:51:22ZTTPS: T1490, T1059, T1107, T1060, T1112, T1031,...

Malware Analysis – evasion – fa7229691c60464db93975f90ba1d566

December 27, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomware, trojanMD5: fa7229691c60464db93975f90ba1d566SHA1: c47a7dfe28b036df7345f16251d3111b7042949bANALYSIS DATE: 2022-12-27T10:51:35ZTTPS: T1082, T1012, T1120, T1112, T1053, T1107, T1490, T1031, T1089,...

Malware Analysis – persistence – c60d51beca144f33e926955116c906b5

December 27, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: c60d51beca144f33e926955116c906b5SHA1: bbbbd5f55c09b1cbd568209e9515b516a718e8baANALYSIS DATE: 2022-12-27T10:51:40ZTTPS: T1082, T1012, T1120, T1107, T1490, T1060, T1112 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – ddee92c23a182d69884422c1e8a3df1b

December 27, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: ddee92c23a182d69884422c1e8a3df1bSHA1: d3c0510bf108a2a7c387c7edea77af7642222e56ANALYSIS DATE: 2022-12-27T10:51:41ZTTPS: T1012, T1120, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 5c58ed8ef5fc167a8fe10ef53d5734c5

December 27, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 5c58ed8ef5fc167a8fe10ef53d5734c5SHA1: e2b2fc4ee2111f2bde5afd7a5ab95783df9d653fANALYSIS DATE: 2022-12-27T10:51:33ZTTPS: T1107, T1490, T1082, T1018 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – – 78b7157812e786cc63eb362fa539271e

December 27, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 78b7157812e786cc63eb362fa539271eSHA1: bdb50db33ba6da8f4c40a4969712daa8f300e39cANALYSIS DATE: 2022-12-27T11:42:25ZTTPS: T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – ransomware – 94f8cfa9fded0b21d77b6f3dca1bfe47

December 27, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 94f8cfa9fded0b21d77b6f3dca1bfe47SHA1: 1d35a47e7742fd29f5c43d4338de39b3313b5e93ANALYSIS DATE: 2022-12-27T10:51:44ZTTPS: T1012, T1120, T1082, T1018 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – spyware – 63dbc6fe48f66d66214c2b6c93b60fbd

December 27, 2022

Score: 7 MALWARE FAMILY: spywareTAGS:spyware, stealerMD5: 63dbc6fe48f66d66214c2b6c93b60fbdSHA1: 4f92db404aec1f3497dbc9d226eee3a318a0f972ANALYSIS DATE: 2022-12-27T11:49:50ZTTPS: T1012, T1082, T1102, T1005, T1081, T1120 ScoreMeaningExample10Known badA malware family...

Malware Analysis – smokeloader – 3eb587859a472ae910f2f21fbdd70db5

December 27, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 3eb587859a472ae910f2f21fbdd70db5SHA1: bdcd11d43d4a288958db3bd1db1f216918eae5a5ANALYSIS DATE: 2022-12-27T11:31:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – dd91d13c6df094caa47149165915eec6

December 27, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: dd91d13c6df094caa47149165915eec6SHA1: 8d1d39ed0ea699368534901a2ce8defb012825d2ANALYSIS DATE: 2022-12-27T03:01:14ZTTPS: T1012, T1005, T1081, T1060, T1112, T1082,...

Malware Analysis – djvu – f09697157456cf5ac1ada0a9acb31ec2

December 27, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: f09697157456cf5ac1ada0a9acb31ec2SHA1: db280cb85738474a1025921be682cbc3dc76e6b6ANALYSIS DATE: 2022-12-27T03:40:30ZTTPS: T1060, T1112, T1222, T1012, T1082, T1053,...

Malware Analysis – amadey – 7ad70bf826cc89d91a9efd9887f661c0

December 27, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 7ad70bf826cc89d91a9efd9887f661c0SHA1: 348deecd18ddbd0f99367ff513cc896f0a937a64ANALYSIS DATE: 2022-12-27T04:04:46ZTTPS:...

Malware Analysis – amadey – ed0de2fe4a3616da46781abc0b8cfe0a

December 27, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: ed0de2fe4a3616da46781abc0b8cfe0aSHA1: 42c35c7d44b91fceaf36cb595490423231dc2ebcANALYSIS DATE: 2022-12-27T03:12:05ZTTPS:...

Malware Analysis – chaos – 9fc6a55ccc1cd41930b17c7dd4474bab

December 27, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, ransomwareMD5: 9fc6a55ccc1cd41930b17c7dd4474babSHA1: 2629a5b422be012ebf5bc84c73a7003801e58f8fANALYSIS DATE: 2022-12-27T05:00:05ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – 444ba93b042e74e9cfe4176d666be724

December 27, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 444ba93b042e74e9cfe4176d666be724SHA1: 2e3698928f79ad23a6c4ee41c691e889a1bc962cANALYSIS DATE: 2022-12-27T05:45:23ZTTPS: T1012, T1082, T1060, T1112, T1005, T1081,...

Malware Analysis – discovery – d2a2333090ea0b8ba558b5dee97e4c96

December 27, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, ransomwareMD5: d2a2333090ea0b8ba558b5dee97e4c96SHA1: 65e6789f9f80a8a31f13e410349ff91bbfe0741dANALYSIS DATE: 2022-12-27T05:01:04ZTTPS: T1046, T1491, T1112, T1053, T1107, T1490, T1082, T1012, T1120 ScoreMeaningExample10Known...

Malware Analysis – smokeloader – 956a158d5b440bdef05e42a87af04505

December 27, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 956a158d5b440bdef05e42a87af04505SHA1: 658fdb2bdc0dfbcaf358f1abe6156654a27f2f71ANALYSIS DATE: 2022-12-27T05:31:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – amadey – c85025aecfbdb84e4c077f10306b2963

December 27, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: c85025aecfbdb84e4c077f10306b2963SHA1: 24de6b615a6db49c7bbb440277cfccc3d0f17352ANALYSIS DATE: 2022-12-27T05:07:10ZTTPS:...

Malware Analysis – evasion – 19660b46a1d17197b4f9f77e0e8b2c58

December 27, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomware, spyware, stealerMD5: 19660b46a1d17197b4f9f77e0e8b2c58SHA1: ca057c6880fe2596193c64150d5f4d4b817be94eANALYSIS DATE: 2022-12-26T21:49:09ZTTPS: T1490, T1082, T1107, T1112, T1005, T1081 ScoreMeaningExample10Known badA...

Malware Analysis – smokeloader – 3b61724b7e08dd1c22b349855b3d03f0

December 27, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 3b61724b7e08dd1c22b349855b3d03f0SHA1: 9a95ba1b832913ccb0c0ea35b9e51622e25059beANALYSIS DATE: 2022-12-26T21:51:44ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – amadey – 29009bb31db26522fae47b13d38f7d7f

December 27, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, botnet:@2023@new, backdoor, discovery, infostealer, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 29009bb31db26522fae47b13d38f7d7fSHA1: 965778ee24becf3e4fcdd78bb4bba90c21cc2dffANALYSIS...

Malware Analysis – smokeloader – 3dd689b96e867e4397be876b882d7efd

December 27, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 3dd689b96e867e4397be876b882d7efdSHA1: d4984c84258b12ee83cfd2c583a1be5ce6ff449fANALYSIS DATE: 2022-12-26T22:17:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 060fc0cb2067f6436d6ac0021a1ee078

December 27, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 060fc0cb2067f6436d6ac0021a1ee078SHA1: 887c9754f6bd578af346a125eba14ee09beb09c7ANALYSIS DATE: 2022-12-26T22:30:09ZTTPS: T1060, T1112, T1222, T1053, T1005, T1081,...

Malware Analysis – smokeloader – c5241954efde6588a6e075e5c65698e5

December 27, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: c5241954efde6588a6e075e5c65698e5SHA1: 056efac6b4e94b40128582a1ba277949131b6b67ANALYSIS DATE: 2022-12-26T23:07:18ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis

Malware Analysis – phobos – 78e7a770f7af0b3fa64fc324c391e288

Malware Analysis – evasion – fa7229691c60464db93975f90ba1d566

Malware Analysis – persistence – c60d51beca144f33e926955116c906b5

Malware Analysis – ransomware – ddee92c23a182d69884422c1e8a3df1b

Malware Analysis – ransomware – 5c58ed8ef5fc167a8fe10ef53d5734c5

Malware Analysis – – 78b7157812e786cc63eb362fa539271e

Malware Analysis – ransomware – 94f8cfa9fded0b21d77b6f3dca1bfe47

Malware Analysis – spyware – 63dbc6fe48f66d66214c2b6c93b60fbd

Malware Analysis – smokeloader – 3eb587859a472ae910f2f21fbdd70db5

Malware Analysis – djvu – dd91d13c6df094caa47149165915eec6

Malware Analysis – djvu – f09697157456cf5ac1ada0a9acb31ec2

Malware Analysis – amadey – 7ad70bf826cc89d91a9efd9887f661c0

Malware Analysis – amadey – ed0de2fe4a3616da46781abc0b8cfe0a

Malware Analysis – chaos – 9fc6a55ccc1cd41930b17c7dd4474bab

Malware Analysis – djvu – 444ba93b042e74e9cfe4176d666be724

Malware Analysis – discovery – d2a2333090ea0b8ba558b5dee97e4c96

Malware Analysis – smokeloader – 956a158d5b440bdef05e42a87af04505

Malware Analysis – amadey – c85025aecfbdb84e4c077f10306b2963

Malware Analysis – evasion – 19660b46a1d17197b4f9f77e0e8b2c58

Malware Analysis – smokeloader – 3b61724b7e08dd1c22b349855b3d03f0

Malware Analysis – amadey – 29009bb31db26522fae47b13d38f7d7f

Malware Analysis – smokeloader – 3dd689b96e867e4397be876b882d7efd

Malware Analysis – djvu – 060fc0cb2067f6436d6ac0021a1ee078

Malware Analysis – smokeloader – c5241954efde6588a6e075e5c65698e5

HackerOne Bug Bounty Disclosure: silent-tls-trust-model-hijacking-via-curl-ca-bundle-environment-variable-leads-to-mitm-rootsecret

HackerOne Bug Bounty Disclosure: libcurl-ftp-path-normalization-flaw-allows-decoded-e-e-cwd-and-directory-escape-path-traversal-cwe-ahn-x

HackerOne Bug Bounty Disclosure: command-injection-criticism-tomar-re

HackerOne Bug Bounty Disclosure: hash-exposed-in-public-repository-skymander

HackerOne Bug Bounty Disclosure: two-click-account-takeover-fr-via

You may have missed