Malware Analysis

Malware Analysis – discovery – 54b7902f04e0f2f073352e5cd8f460f0

December 21, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, evasion, exploitMD5: 54b7902f04e0f2f073352e5cd8f460f0SHA1: cd794b02eaa48fd22a79427bb663ad01a8463323ANALYSIS DATE: 2022-12-21T10:16:47ZTTPS: T1082, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – f3c08764e6566a1fbf375b339f7560f9

December 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: f3c08764e6566a1fbf375b339f7560f9SHA1: ed1f5cd00a2773a0666d79e538bf3e00d85ed4adANALYSIS DATE: 2022-12-21T11:19:32ZTTPS: T1005, T1081, T1060, T1112, T1012, T1082,...

Malware Analysis – djvu – ceb30f3c9d50ea45824f0359c91837c8

December 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: ceb30f3c9d50ea45824f0359c91837c8SHA1: 5666d338d62810c792333be7218e13ce6cd1771cANALYSIS DATE: 2022-12-21T10:22:39ZTTPS: T1053, T1005, T1081, T1060, T1112, T1082,...

Malware Analysis – djvu – 189322ec83e2260f2d52038bf33051a2

December 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 189322ec83e2260f2d52038bf33051a2SHA1: 14f3eef459c9ab8e36e3ebb8d2a29f24efa67d92ANALYSIS DATE: 2022-12-21T10:53:34ZTTPS: T1082, T1012, T1060, T1112, T1222, T1053,...

Malware Analysis – mespinoza – 4dc8cae2cfff6ac862aea48b014937bb

December 21, 2022

Score: 10 MALWARE FAMILY: mespinozaTAGS:family:mespinoza, ransomware, spyware, stealerMD5: 4dc8cae2cfff6ac862aea48b014937bbSHA1: 80486ca4caa5cb4ce42885dcd66d7a1b4a27d5ceANALYSIS DATE: 2022-12-21T10:49:31ZTTPS: T1112, T1012, T1486, T1082, T1005, T1081 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – 2086be8d2ae73f57218e3d7d8b5a281c

December 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 2086be8d2ae73f57218e3d7d8b5a281cSHA1: 8d113362741f63f492a300bd758bb4ec418d0c18ANALYSIS DATE: 2022-12-21T03:50:48ZTTPS: T1222, T1053, T1005, T1081, T1012, T1082,...

Malware Analysis – azov – ee32cd429bf51adb85a95fd5af43919d

December 21, 2022

Score: 10 MALWARE FAMILY: azovTAGS:family:azov, persistence, ransomware, wiperMD5: ee32cd429bf51adb85a95fd5af43919dSHA1: 58a2ee84e32b24ca3918ee34cf87be1c79708438ANALYSIS DATE: 2022-12-21T05:26:53ZTTPS: T1060, T1112, T1012, T1120, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – persistence – e39422f1a4cb873d35500140cffdd061

December 21, 2022

Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: e39422f1a4cb873d35500140cffdd061SHA1: 85704350976e882af8ea439df6d237103e233f74ANALYSIS DATE: 2022-12-21T05:30:06ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – persistence – 2f33b9393d38762bd981dbede2389ca6

December 21, 2022

Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 2f33b9393d38762bd981dbede2389ca6SHA1: 9e398d63c5c1f6d42b08c60f7d29366b8d3df901ANALYSIS DATE: 2022-12-21T05:30:05ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – djvu – 5a8830c77d5640038b4ac92972f508fb

December 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 5a8830c77d5640038b4ac92972f508fbSHA1: ff7bd39b06a87adb62d5e616758aa457cc324a28ANALYSIS DATE: 2022-12-21T05:39:33ZTTPS: T1222, T1053, T1005, T1081, T1060, T1112,...

Malware Analysis – persistence – 34b7f6870d28447885d2ff2781645dd5

December 21, 2022

Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, upxMD5: 34b7f6870d28447885d2ff2781645dd5SHA1: d587ed39901accd9c71fe1fab25fe25d4a1f674cANALYSIS DATE: 2022-12-21T05:34:28ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – makop – 6a956731b3677dd9d4d18641d40532ab

December 20, 2022

Score: 10 MALWARE FAMILY: makopTAGS:family:makop, ransomware, spyware, stealerMD5: 6a956731b3677dd9d4d18641d40532abSHA1: 1994ee0b381c5528d5b5c01fb97a14b5ff81e5a5ANALYSIS DATE: 2022-12-20T17:44:04ZTTPS: T1059, T1107, T1490, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – play – 57bcb8cfad510109f7ddedf045e86a70

December 20, 2022

Score: 10 MALWARE FAMILY: playTAGS:family:play, ransomware, spyware, stealerMD5: 57bcb8cfad510109f7ddedf045e86a70SHA1: e6c381859f53d0c0db9fcd30fa601ecb935b93e0ANALYSIS DATE: 2022-12-20T15:47:27ZTTPS: T1005, T1081, T1012, T1120, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 98f766d73ebce6d6f50e096bf91de915

December 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 98f766d73ebce6d6f50e096bf91de915SHA1: 66995579b886ad37ca5b6a60251f40c756177dcaANALYSIS DATE: 2022-12-20T16:15:06ZTTPS: T1060, T1112, T1082, T1053, T1012, T1222,...

Malware Analysis – djvu – daf392649efbbfda72d564e792a21679

December 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: daf392649efbbfda72d564e792a21679SHA1: a8e8d94c5887ef837c812a51e528d3244493d98cANALYSIS DATE: 2022-12-20T16:49:37ZTTPS: T1222, T1082, T1005, T1081, T1012, T1060,...

Malware Analysis – djvu – a921630469b9a90ee06e2eb1162518d0

December 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: a921630469b9a90ee06e2eb1162518d0SHA1: 285f2fe0ccd5404066abd5aa2e2cdc35e8fcbd55ANALYSIS DATE: 2022-12-20T10:21:55ZTTPS: T1222, T1082, T1005, T1081, T1012, T1060,...

Malware Analysis – evasion – 39be65c8a26732e90364ad5c6f98986e

December 20, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 39be65c8a26732e90364ad5c6f98986eSHA1: 1d66f11969008d4d4fde5e896b9764d9192fb158ANALYSIS DATE: 2022-12-20T09:10:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – banker – 09edc47eee95bc8e6e70faf20da6c3fd

December 20, 2022

Score: 8 MALWARE FAMILY: bankerTAGS:banker, evasion, ransomwareMD5: 09edc47eee95bc8e6e70faf20da6c3fdSHA1: 5925a3b50d251718609a7bf8dbc8bcd8e6fe2fc5ANALYSIS DATE: 2022-12-20T11:33:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – 6c84cd55dc9d322cbac397f90f9a94d0

December 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 6c84cd55dc9d322cbac397f90f9a94d0SHA1: 7c39f89906feabc5d8218f5d627aa150052138b4ANALYSIS DATE: 2022-12-20T10:36:34ZTTPS: T1222, T1005, T1081, T1053, T1012, T1082,...

Malware Analysis – persistence – dc4ae2105938cb68c5b6988465e13da1

December 20, 2022

Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: dc4ae2105938cb68c5b6988465e13da1SHA1: 4bf9313e1b4f51df9b94cf73e36adb53f8c29ac0ANALYSIS DATE: 2022-12-20T10:31:05ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – ryuk – f62bb82db62dd6b80908dcd79ea51fb2

December 20, 2022

Score: 10 MALWARE FAMILY: ryukTAGS:family:ryuk, discovery, evasion, persistence, ransomwareMD5: f62bb82db62dd6b80908dcd79ea51fb2SHA1: e635ba1b935adf31ffd055d71884098567b3dd4fANALYSIS DATE: 2022-12-20T10:41:33ZTTPS: T1490, T1112, T1082, T1222, T1107, T1060 ScoreMeaningExample10Known...

Malware Analysis – djvu – 932e1fdc587695a02489692332c32522

December 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 932e1fdc587695a02489692332c32522SHA1: a47ec9890ca5e3cf0f030c0deb117a9cabd1ffeaANALYSIS DATE: 2022-12-19T21:52:51ZTTPS: T1082, T1012, T1053, T1005, T1081, T1060,...

Malware Analysis – djvu – 556bc8de79990e475f7131028e98ea2f

December 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 556bc8de79990e475f7131028e98ea2fSHA1: b3c27bb39c09ce4c60cf379e36801e11c155b16dANALYSIS DATE: 2022-12-19T23:36:54ZTTPS: T1060, T1112, T1222, T1053, T1005, T1081,...

Malware Analysis – ryuk – 154b73d0a7aa19df12364a78b235f29f

December 20, 2022

Score: 10 MALWARE FAMILY: ryukTAGS:family:ryuk, discovery, evasion, ransomwareMD5: 154b73d0a7aa19df12364a78b235f29fSHA1: 5e39ad8cd8f05d29b7587a876c318be5c0511dccANALYSIS DATE: 2022-12-19T22:04:54ZTTPS: T1490, T1059, T1107, T1222, T1053, T1158, T1012, T1120,...

Malware Analysis

Malware Analysis – discovery – 54b7902f04e0f2f073352e5cd8f460f0

Malware Analysis – djvu – f3c08764e6566a1fbf375b339f7560f9

Malware Analysis – djvu – ceb30f3c9d50ea45824f0359c91837c8

Malware Analysis – djvu – 189322ec83e2260f2d52038bf33051a2

Malware Analysis – mespinoza – 4dc8cae2cfff6ac862aea48b014937bb

Malware Analysis – djvu – 2086be8d2ae73f57218e3d7d8b5a281c

Malware Analysis – azov – ee32cd429bf51adb85a95fd5af43919d

Malware Analysis – persistence – e39422f1a4cb873d35500140cffdd061

Malware Analysis – persistence – 2f33b9393d38762bd981dbede2389ca6

Malware Analysis – djvu – 5a8830c77d5640038b4ac92972f508fb

Malware Analysis – persistence – 34b7f6870d28447885d2ff2781645dd5

Malware Analysis – makop – 6a956731b3677dd9d4d18641d40532ab

Malware Analysis – play – 57bcb8cfad510109f7ddedf045e86a70

Malware Analysis – djvu – 98f766d73ebce6d6f50e096bf91de915

Malware Analysis – djvu – daf392649efbbfda72d564e792a21679

Malware Analysis – djvu – a921630469b9a90ee06e2eb1162518d0

Malware Analysis – evasion – 39be65c8a26732e90364ad5c6f98986e

Malware Analysis – banker – 09edc47eee95bc8e6e70faf20da6c3fd

Malware Analysis – djvu – 6c84cd55dc9d322cbac397f90f9a94d0

Malware Analysis – persistence – dc4ae2105938cb68c5b6988465e13da1

Malware Analysis – ryuk – f62bb82db62dd6b80908dcd79ea51fb2

Malware Analysis – djvu – 932e1fdc587695a02489692332c32522

Malware Analysis – djvu – 556bc8de79990e475f7131028e98ea2f

Malware Analysis – ryuk – 154b73d0a7aa19df12364a78b235f29f

[RANSOMHOUSE] – Ransomware Victim: Polidano Group

[SAFEPAY] – Ransomware Victim: himmelstein[.]com

CVE Alert: CVE-2025-11521 – astrasecuritysuite – Astra Security Suite – Firewall & Malware Scan

CVE Alert: CVE-2025-11168 – mvirik – Mementor Core

CVE Alert: CVE-2025-42940 – SAP_SE – SAP CommonCryptoLib

You may have missed