Malware Analysis

Malware Analysis – djvu – 74315c762fbc50c9e128e4736af6451e

December 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 74315c762fbc50c9e128e4736af6451eSHA1: 9676acee4631cba43064fcbcc07d2e5e145ec9a5ANALYSIS DATE: 2022-12-24T11:15:19ZTTPS: T1053, T1060, T1112, T1222, T1082, T1130 ScoreMeaningExample10Known badA...

Malware Analysis – smokeloader – 5265d31c93441df607ce7b0dae3e680e

December 24, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 5265d31c93441df607ce7b0dae3e680eSHA1: 557ca000136c84344aadf189710c22b2dc5e13a0ANALYSIS DATE: 2022-12-24T11:31:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 9babcbfae5216b1f3db8282790438586

December 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 9babcbfae5216b1f3db8282790438586SHA1: e7c8fcc78bdaacaad85cacea73b209897f42f33aANALYSIS DATE: 2022-12-24T11:15:10ZTTPS: T1053, T1130, T1112, T1060, T1222, T1082 ScoreMeaningExample10Known badA...

Malware Analysis – smokeloader – 4492a6791a3e53bca0c5b050e3d395c1

December 24, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 4492a6791a3e53bca0c5b050e3d395c1SHA1: fda6d847dcef6a872c1ea5a03d4b712eade80597ANALYSIS DATE: 2022-12-23T21:01:06ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – e2e90686080b3a73208ab9bb1f62cb8b

December 24, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: e2e90686080b3a73208ab9bb1f62cb8bSHA1: c6ad315e0d676332960cab1e604baeabeb7c25f1ANALYSIS DATE: 2022-12-23T22:01:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – f842773eeae971948df273f1b72811ef

December 24, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: f842773eeae971948df273f1b72811efSHA1: 53c32961609be41cbbaf6a7c239c28ceb7edbcadANALYSIS DATE: 2022-12-23T23:02:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 8a3f8592ad4bfe56b0d3ecd8a45756d0

December 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 8a3f8592ad4bfe56b0d3ecd8a45756d0SHA1: e52b42276aa6ab284f4321cdda1f78e3d83e2ce5ANALYSIS DATE: 2022-12-23T22:46:55ZTTPS: T1222, T1082, T1012, T1005, T1081, T1060,...

Malware Analysis – djvu – 90363754a46ff1f0261845d1ede47a3a

December 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 90363754a46ff1f0261845d1ede47a3aSHA1: 2a032c2e0d53897b258362bc98a271f7b8b4e51eANALYSIS DATE: 2022-12-23T23:42:32ZTTPS: T1005, T1081, T1053, T1082, T1012, T1060,...

Malware Analysis – djvu – 60d534b335e0bab1e6b44e3f39962663

December 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 60d534b335e0bab1e6b44e3f39962663SHA1: c8ec8c06bdef1e2fa36e126c21ac735e55249cc9ANALYSIS DATE: 2022-12-23T23:57:20ZTTPS: T1012, T1082, T1060, T1112, T1005, T1081,...

Malware Analysis – djvu – 31779136196425ada7f38369086e99cc

December 23, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 31779136196425ada7f38369086e99ccSHA1: 65121e085572620c45d16e6683663ead301e5b03ANALYSIS DATE: 2022-12-23T09:12:06ZTTPS: T1005, T1081, T1012, T1082, T1222, T1053,...

Malware Analysis – djvu – f667cb81fe70b79d3651127cbf34c1f3

December 23, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: f667cb81fe70b79d3651127cbf34c1f3SHA1: 2aba0f68896664c65ffc6e166b051af73881005bANALYSIS DATE: 2022-12-23T10:20:38ZTTPS: T1005, T1081, T1012, T1082, T1053, T1060,...

Malware Analysis – djvu – e8af5b0c9d7b8d7f7357ee0fd9ea0218

December 23, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: e8af5b0c9d7b8d7f7357ee0fd9ea0218SHA1: 58a6671307eda70e55ea15dbc46d32769e6b2823ANALYSIS DATE: 2022-12-23T10:15:15ZTTPS: T1082, T1130, T1112, T1060, T1222 ScoreMeaningExample10Known badA malware...

Malware Analysis – smokeloader – f5fd1959bf55c5a97a4267c676b6a781

December 23, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: f5fd1959bf55c5a97a4267c676b6a781SHA1: 7f3914e91ea1c1290b3cc768cbdaa3dd547a2844ANALYSIS DATE: 2022-12-23T10:02:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 2d5f1f172ee74e3ad998059669e9e39e

December 23, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 2d5f1f172ee74e3ad998059669e9e39eSHA1: 0ea9cf83108b57219d3c784ac1589ee5551c90a4ANALYSIS DATE: 2022-12-23T10:31:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – c533ae1075eb8cdcf56416d0759733f8

December 23, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: c533ae1075eb8cdcf56416d0759733f8SHA1: 24712686ecd9715c2d36cd830dd4ae07eede0c0aANALYSIS DATE: 2022-12-23T10:32:50ZTTPS: T1005, T1081, T1012, T1222, T1082, T1060,...

Malware Analysis – ransomware – 4d089f6d15b92693578b6f3ad414c9e7

December 23, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 4d089f6d15b92693578b6f3ad414c9e7SHA1: 120f47d7510cbd64728ef53d4d2fa1b0a84e1d09ANALYSIS DATE: 2022-12-23T10:44:04ZTTPS: T1012, T1120, T1082, T1005, T1081, T1107, T1490, T1491, T1112...

Malware Analysis – wannacry – c475b82f1e0b421e051622f034b1d5e3

December 23, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: c475b82f1e0b421e051622f034b1d5e3SHA1: e1cfa940659f8dcf46098f67ec3de711e7123cb5ANALYSIS DATE: 2022-12-23T11:21:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – wannacry – 8e6bfea06cb00553ee29b3822b349bd6

December 23, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: 8e6bfea06cb00553ee29b3822b349bd6SHA1: 111be7f3c2978cbe22f4098eadff995a8484f769ANALYSIS DATE: 2022-12-23T11:20:06ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – smokeloader – cd2f32885f77776c6870994c9dea4b0e

December 23, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: cd2f32885f77776c6870994c9dea4b0eSHA1: 3afebca15a24af9a925523c7ff4fb5f196a17a7bANALYSIS DATE: 2022-12-23T03:32:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – cd259460368f6993bd59dbd869add7d6

December 23, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: cd259460368f6993bd59dbd869add7d6SHA1: 1a4bb76edacd425ceee03894e52eec3484fb17acANALYSIS DATE: 2022-12-23T05:31:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – c02eeb1769431e512a18cb8a8d6d346c

December 23, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: c02eeb1769431e512a18cb8a8d6d346cSHA1: b803c2dede5ff1e9c69767569197ab0104b1e94aANALYSIS DATE: 2022-12-23T05:20:45ZTTPS: T1222, T1082, T1005, T1081, T1012, T1060,...

Malware Analysis – djvu – 11ef4e7da7336b07a610f53246bd2a37

December 23, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 11ef4e7da7336b07a610f53246bd2a37SHA1: 51c2c3502d74aaf3fd4f253fb33a11425d64c6beANALYSIS DATE: 2022-12-23T04:40:48ZTTPS: T1222, T1012, T1082, T1005, T1081, T1060,...

Malware Analysis – smokeloader – eed5dd7b206c7d4fb1b4c0bd50486a89

December 23, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: eed5dd7b206c7d4fb1b4c0bd50486a89SHA1: 19deb6f83a9c7859be8ce667bff7e34f0200cc40ANALYSIS DATE: 2022-12-23T04:32:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – b1e6371800ed2beea2b05572054e5fa3

December 23, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: b1e6371800ed2beea2b05572054e5fa3SHA1: 5e1f3278645fa1ff22d32e494a9c6580030d5232ANALYSIS DATE: 2022-12-22T21:01:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis

Malware Analysis – djvu – 74315c762fbc50c9e128e4736af6451e

Malware Analysis – smokeloader – 5265d31c93441df607ce7b0dae3e680e

Malware Analysis – djvu – 9babcbfae5216b1f3db8282790438586

Malware Analysis – smokeloader – 4492a6791a3e53bca0c5b050e3d395c1

Malware Analysis – smokeloader – e2e90686080b3a73208ab9bb1f62cb8b

Malware Analysis – smokeloader – f842773eeae971948df273f1b72811ef

Malware Analysis – djvu – 8a3f8592ad4bfe56b0d3ecd8a45756d0

Malware Analysis – djvu – 90363754a46ff1f0261845d1ede47a3a

Malware Analysis – djvu – 60d534b335e0bab1e6b44e3f39962663

Malware Analysis – djvu – 31779136196425ada7f38369086e99cc

Malware Analysis – djvu – f667cb81fe70b79d3651127cbf34c1f3

Malware Analysis – djvu – e8af5b0c9d7b8d7f7357ee0fd9ea0218

Malware Analysis – smokeloader – f5fd1959bf55c5a97a4267c676b6a781

Malware Analysis – smokeloader – 2d5f1f172ee74e3ad998059669e9e39e

Malware Analysis – djvu – c533ae1075eb8cdcf56416d0759733f8

Malware Analysis – ransomware – 4d089f6d15b92693578b6f3ad414c9e7

Malware Analysis – wannacry – c475b82f1e0b421e051622f034b1d5e3

Malware Analysis – wannacry – 8e6bfea06cb00553ee29b3822b349bd6

Malware Analysis – smokeloader – cd2f32885f77776c6870994c9dea4b0e

Malware Analysis – smokeloader – cd259460368f6993bd59dbd869add7d6

Malware Analysis – djvu – c02eeb1769431e512a18cb8a8d6d346c

Malware Analysis – djvu – 11ef4e7da7336b07a610f53246bd2a37

Malware Analysis – smokeloader – eed5dd7b206c7d4fb1b4c0bd50486a89

Malware Analysis – smokeloader – b1e6371800ed2beea2b05572054e5fa3

Cobalt Strike Beacon Detected – 185[.]208[.]159[.]224:2222

[SAFEPAY] – Ransomware Victim: olympusaero[.]com

[SAFEPAY] – Ransomware Victim: azpiaran[.]com

[SAFEPAY] – Ransomware Victim: wnyenergy[.]com

[QILIN] – Ransomware Victim: ITinSell group

You may have missed