Malware Analysis

Malware Analysis – djvu – b08d363ca421b7a47c021f924f48a270

December 26, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: b08d363ca421b7a47c021f924f48a270SHA1: d4baa6673c5b9ed1fa37cd348d92ad934db3280bANALYSIS DATE: 2022-12-26T15:06:51ZTTPS: T1005, T1081, T1082, T1222, T1012, T1060,...

Malware Analysis – djvu – 5d24300cf4c11ecac3cd1efcffecc52c

December 26, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 5d24300cf4c11ecac3cd1efcffecc52cSHA1: 16a0d1a7dd27f6ea29125f4f7b1b68b4ba648ac9ANALYSIS DATE: 2022-12-26T16:02:46ZTTPS: T1222, T1053, T1005, T1081, T1012, T1082,...

Malware Analysis – amadey – 01581eb9c54ea83c51af5e0fce922181

December 26, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 01581eb9c54ea83c51af5e0fce922181SHA1: 8e49ef428f3afc4686997eb9b0428a070160f4f4ANALYSIS DATE: 2022-12-26T16:05:24ZTTPS:...

Malware Analysis – evasion – 92ec81034584caac63fdb1e2899fb3bf

December 26, 2022

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 92ec81034584caac63fdb1e2899fb3bfSHA1: e170f445625088eb270ea8e8ef89f1ddd55266c4ANALYSIS DATE: 2022-12-26T15:36:44ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – discovery – 029b5d34e91b7ee1e4084d4f6a76710d

December 26, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, persistence, ransomwareMD5: 029b5d34e91b7ee1e4084d4f6a76710dSHA1: eba9b85d8d6800fa7ccfc2bc78f9ca8029a0d0d5ANALYSIS DATE: 2022-12-26T15:42:00ZTTPS: T1107, T1490, T1031, T1562, T1489, T1060, T1112, T1012,...

Malware Analysis – smokeloader – 464fa844c8580e9e4f07ac98b5cf42a8

December 26, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 464fa844c8580e9e4f07ac98b5cf42a8SHA1: bb18d8069c10aefa9f5580aa8ddb05ae84265f94ANALYSIS DATE: 2022-12-26T16:31:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 590ff45b18307814e8ab42e2c45eb034

December 26, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 590ff45b18307814e8ab42e2c45eb034SHA1: 22cfe2a50db381ac55218e455d2e16b91993db3bANALYSIS DATE: 2022-12-26T16:34:20ZTTPS: T1005, T1081, T1060, T1112, T1222, T1082,...

Malware Analysis – evasion – 736255d22e4a0e743de97cd2385f09f7

December 26, 2022

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 736255d22e4a0e743de97cd2385f09f7SHA1: 1cd73bd62d5b255f00f17cb0332882ea3c3f7269ANALYSIS DATE: 2022-12-26T16:30:05ZTTPS: T1060, T1112, T1491 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – 5b5ae702f5dc1029d11994502bb61116

December 26, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 5b5ae702f5dc1029d11994502bb61116SHA1: 88a21c6cda35f9ccd35168dea19fe5e29c86dbbaANALYSIS DATE: 2022-12-26T16:11:49ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – evasion – 77b5a75eb98ef1a165c3b0c5b2fe0e3b

December 26, 2022

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 77b5a75eb98ef1a165c3b0c5b2fe0e3bSHA1: d690606c88a94a23c05e7eaf34fc31468d571bc7ANALYSIS DATE: 2022-12-26T16:43:40ZTTPS: T1491, T1112, T1060 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – 2dc8a08c64dd8d7397109fa90c86e27f

December 26, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 2dc8a08c64dd8d7397109fa90c86e27fSHA1: 2c0747bbc5197c618c65c401cdbe2e7b899f4259ANALYSIS DATE: 2022-12-26T16:44:02ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – phobos – b5746928e66790ebd54e1052353fc2a0

December 26, 2022

Score: 10 MALWARE FAMILY: phobosTAGS:family:phobos, evasion, persistence, ransomware, spyware, stealerMD5: b5746928e66790ebd54e1052353fc2a0SHA1: 43e19422cb3066a738944f2eeeb727a182aa48b4ANALYSIS DATE: 2022-12-26T17:09:57ZTTPS: T1490, T1059, T1107, T1112, T1060, T1082,...

Malware Analysis – smokeloader – f1a0e519dcfc23eb93ac82ecb000c593

December 26, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: f1a0e519dcfc23eb93ac82ecb000c593SHA1: d77f66dba36e49e16f06643c1b8aaed1b0240165ANALYSIS DATE: 2022-12-26T17:13:09ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 5030d2a0a3876bc89ff6acebfbad076f

December 26, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 5030d2a0a3876bc89ff6acebfbad076fSHA1: dc7d75cabb1aa0e7bf9cb82cf799501ff8c49a00ANALYSIS DATE: 2022-12-26T17:38:08ZTTPS: T1130, T1112, T1060, T1222, T1082, T1053 ScoreMeaningExample10Known badA...

Malware Analysis – amadey – 4c95f9cb1ac2356f28a85257d5ebdd32

December 26, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, botnet:@2023@new, backdoor, discovery, infostealer, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 4c95f9cb1ac2356f28a85257d5ebdd32SHA1: dfe07a2997a4eb8526ac89f3bdaff57ba172aef9ANALYSIS...

Malware Analysis – mafiaware666 – 6c8868a84d7667ba67ba4458fa5acaac

December 26, 2022

Score: 10 MALWARE FAMILY: mafiaware666TAGS:family:mafiaware666, ransomwareMD5: 6c8868a84d7667ba67ba4458fa5acaacSHA1: 1fd296e86f968d3b183d0caaaa5bcd79c95d9d1fANALYSIS DATE: 2022-12-26T17:52:31ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – ab46ce0b7b0c92aa2fa315e03a571184

December 26, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: ab46ce0b7b0c92aa2fa315e03a571184SHA1: cdafbd307b9d9c7cf74e1b3a751cbed7525e4febANALYSIS DATE: 2022-12-26T17:21:57ZTTPS: T1005, T1081, T1060, T1112, T1082, T1053,...

Malware Analysis – smokeloader – d07acc87a66d613bfe69cc24eacdb5ff

December 26, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: d07acc87a66d613bfe69cc24eacdb5ffSHA1: d5c7850497442f8c333dd04365fe727d767294aaANALYSIS DATE: 2022-12-26T10:01:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 5ae505279232536fe5aadb91cba2eb6d

December 26, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 5ae505279232536fe5aadb91cba2eb6dSHA1: 4cdf31809aac2baf5381d69f2b9003991f2edbcfANALYSIS DATE: 2022-12-26T09:14:17ZTTPS: T1012, T1082, T1005, T1081, T1222, T1060,...

Malware Analysis – amadey – e18e31983eaa7f57431e1b1944da462d

December 26, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:dcrat, family:djvu, family:smokeloader, backdoor, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealer, trojanMD5: e18e31983eaa7f57431e1b1944da462dSHA1: 20f0fa4aa4ec59799d92bce13f29d805bc2f6152ANALYSIS...

Malware Analysis – persistence – bf6f7ef2802705565d33ad4c9225acda

December 26, 2022

Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, upxMD5: bf6f7ef2802705565d33ad4c9225acdaSHA1: d9a921d6e4f0d206e646700513eda143db239635ANALYSIS DATE: 2022-12-26T10:58:36ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – 3692c2bcdbbc9788369d69baf870ca89

December 26, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 3692c2bcdbbc9788369d69baf870ca89SHA1: 7ddf72f7f5e38e2a55779bf73eb543646a471d41ANALYSIS DATE: 2022-12-26T10:38:33ZTTPS: T1222, T1060, T1112, T1053, T1005, T1081,...

Malware Analysis – djvu – ae21cdf16306059d4349c2ca9b0407a0

December 26, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: ae21cdf16306059d4349c2ca9b0407a0SHA1: df213eeffe96661015e29338765459894978628aANALYSIS DATE: 2022-12-26T10:17:27ZTTPS: T1012, T1005, T1081, T1082, T1222, T1060,...

Malware Analysis – amadey – 4151aa03de133d36e235103956f5df73

December 26, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 4151aa03de133d36e235103956f5df73SHA1: 37c6a03bc2066e438cfb68d7ce46dbd0fd33d06fANALYSIS DATE: 2022-12-26T10:48:17ZTTPS: T1005,...

Malware Analysis

Malware Analysis – djvu – b08d363ca421b7a47c021f924f48a270

Malware Analysis – djvu – 5d24300cf4c11ecac3cd1efcffecc52c

Malware Analysis – amadey – 01581eb9c54ea83c51af5e0fce922181

Malware Analysis – evasion – 92ec81034584caac63fdb1e2899fb3bf

Malware Analysis – discovery – 029b5d34e91b7ee1e4084d4f6a76710d

Malware Analysis – smokeloader – 464fa844c8580e9e4f07ac98b5cf42a8

Malware Analysis – djvu – 590ff45b18307814e8ab42e2c45eb034

Malware Analysis – evasion – 736255d22e4a0e743de97cd2385f09f7

Malware Analysis – evasion – 5b5ae702f5dc1029d11994502bb61116

Malware Analysis – evasion – 77b5a75eb98ef1a165c3b0c5b2fe0e3b

Malware Analysis – evasion – 2dc8a08c64dd8d7397109fa90c86e27f

Malware Analysis – phobos – b5746928e66790ebd54e1052353fc2a0

Malware Analysis – smokeloader – f1a0e519dcfc23eb93ac82ecb000c593

Malware Analysis – djvu – 5030d2a0a3876bc89ff6acebfbad076f

Malware Analysis – amadey – 4c95f9cb1ac2356f28a85257d5ebdd32

Malware Analysis – mafiaware666 – 6c8868a84d7667ba67ba4458fa5acaac

Malware Analysis – djvu – ab46ce0b7b0c92aa2fa315e03a571184

Malware Analysis – smokeloader – d07acc87a66d613bfe69cc24eacdb5ff

Malware Analysis – djvu – 5ae505279232536fe5aadb91cba2eb6d

Malware Analysis – amadey – e18e31983eaa7f57431e1b1944da462d

Malware Analysis – persistence – bf6f7ef2802705565d33ad4c9225acda

Malware Analysis – djvu – 3692c2bcdbbc9788369d69baf870ca89

Malware Analysis – djvu – ae21cdf16306059d4349c2ca9b0407a0

Malware Analysis – amadey – 4151aa03de133d36e235103956f5df73

HackerOne Bug Bounty Disclosure: silent-tls-trust-model-hijacking-via-curl-ca-bundle-environment-variable-leads-to-mitm-rootsecret

HackerOne Bug Bounty Disclosure: libcurl-ftp-path-normalization-flaw-allows-decoded-e-e-cwd-and-directory-escape-path-traversal-cwe-ahn-x

HackerOne Bug Bounty Disclosure: command-injection-criticism-tomar-re

HackerOne Bug Bounty Disclosure: hash-exposed-in-public-repository-skymander

HackerOne Bug Bounty Disclosure: two-click-account-takeover-fr-via

You may have missed