Malware Analysis

Malware Analysis – amadey – 40a81f8f9222d7a3ecee4f41dd5af21e

December 13, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:raccoon, family:redline, family:smokeloader, botnet:amddriveer1.2.3, botnet:ec7a54fb6492ff3a52d09504b8ecf082, botnet:sila, backdoor, bootkit, collection, discovery, infostealer, persistence, ransomware, spyware,...

Malware Analysis – dcrat – 59efe0bd2c50024139178837a97d6dab

December 13, 2022

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, family:djvu, family:smokeloader, family:vidar, botnet:1808, backdoor, bootkit, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealer, trojanMD5:...

Malware Analysis – djvu – a49cee7ee21dbdf1852986bc5720eab6

December 13, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: a49cee7ee21dbdf1852986bc5720eab6SHA1: 10d81ff7a74e9749d553bdf703fa01de5f5096ceANALYSIS DATE: 2022-12-13T09:50:19ZTTPS: T1053, T1005, T1081, T1060, T1112, T1222,...

Malware Analysis – discovery – e0a3af0fd104fb0a011732de579a4b1b

December 13, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, ransomwareMD5: e0a3af0fd104fb0a011732de579a4b1bSHA1: 92f192961a3051301484dc594966f9dc6ecfa463ANALYSIS DATE: 2022-12-13T09:57:06ZTTPS: T1082, T1057, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – 61dcb0666f0080d742a6dad292e0ced0

December 13, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 61dcb0666f0080d742a6dad292e0ced0SHA1: b3e4bb446cedb71dddffdc9f226f24dc436460c3ANALYSIS DATE: 2022-12-13T09:36:47ZTTPS: T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – b0d233967b73fac1fbfa6114ec7fa26d

December 13, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:1808, backdoor, bootkit, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: b0d233967b73fac1fbfa6114ec7fa26dSHA1: 405869adde2b9b24e106038b33ace894d3420062ANALYSIS DATE:...

Malware Analysis – ermac – 35e91deffa2d5392c8d0afa3e83db6a9

December 13, 2022

Score: 10 MALWARE FAMILY: ermacTAGS:family:ermac, banker, evasion, infostealer, ransomware, trojanMD5: 35e91deffa2d5392c8d0afa3e83db6a9SHA1: 98b6acf59125ee3a37c0d4c3ab7cf6f295958f6eANALYSIS DATE: 2022-12-13T10:10:05ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ermac – 4241a3067b87e687be063feb545fc3c2

December 13, 2022

Score: 10 MALWARE FAMILY: ermacTAGS:family:ermac, banker, evasion, infostealer, ransomware, trojanMD5: 4241a3067b87e687be063feb545fc3c2SHA1: 05d7fe38dd0b7f2132a9e7e9f0cecf585debbb65ANALYSIS DATE: 2022-12-13T10:39:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – cbf081e42318d731b5223c0eeb5c4b97

December 13, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: cbf081e42318d731b5223c0eeb5c4b97SHA1: d0cc1b387aae6a833cd95a74d99ba49d55346107ANALYSIS DATE: 2022-12-13T10:34:38ZTTPS: T1012, T1082, T1053, T1005, T1081, T1222,...

Malware Analysis – dcrat – b5edc62fc06a612dc1edfaa0e6fdaa35

December 13, 2022

Malware Analysis – smokeloader – 5d041a4006ed3f18eef822470c83ed9c

December 13, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 5d041a4006ed3f18eef822470c83ed9cSHA1: 14d269a9c95ecd7a643fe7f5487ef468986f5d9dANALYSIS DATE: 2022-12-13T11:57:40ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 71b38cbdfd2391a63cfb85818ecc42a8

December 13, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 71b38cbdfd2391a63cfb85818ecc42a8SHA1: 708d1da006924898eddf09bddc86d4c738103d41ANALYSIS DATE: 2022-12-13T10:41:19ZTTPS: T1222, T1082, T1053, T1012, T1060, T1112,...

Malware Analysis – ermac – 72b3faff0779e1ddaef3a317fbefa29c

December 13, 2022

Score: 10 MALWARE FAMILY: ermacTAGS:family:ermac, banker, evasion, infostealer, ransomware, trojanMD5: 72b3faff0779e1ddaef3a317fbefa29cSHA1: 6af79ef669a9250ae2599348f103f772817c88a2ANALYSIS DATE: 2022-12-13T10:41:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 27b2b0f56a96792e4a87799bc5983d45

December 13, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:1808, backdoor, bootkit, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 27b2b0f56a96792e4a87799bc5983d45SHA1: 5f18ed76dd5cb6b6820e8384e63d324771227aa6ANALYSIS DATE:...

Malware Analysis – djvu – e4abac89f0c02ab08125acc019535b2e

December 13, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: e4abac89f0c02ab08125acc019535b2eSHA1: e9d43e1c239006b102e4c741523be38e80d082f3ANALYSIS DATE: 2022-12-13T05:25:03ZTTPS: T1053, T1130, T1112, T1060, T1222, T1082 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – 31ab55838ad60dcce8fc22ff24614d76

December 13, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:1808, backdoor, bootkit, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 31ab55838ad60dcce8fc22ff24614d76SHA1: 1e33acddb01d65ddd1dfd0a7c96de5537e84b82bANALYSIS DATE:...

Malware Analysis – lockbit – 38a0313aaad67d4c34ef96225c5c4603

December 13, 2022

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, discovery, evasion, persistence, ransomwareMD5: 38a0313aaad67d4c34ef96225c5c4603SHA1: 88bad08303135cfa65efc1b505e993b917071104ANALYSIS DATE: 2022-12-13T04:33:06ZTTPS: T1490, T1046, T1082, T1107, T1060, T1112 ScoreMeaningExample10Known...

Malware Analysis – djvu – ad11601c8003994fea9cf502f77cefd8

December 13, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: ad11601c8003994fea9cf502f77cefd8SHA1: 78764391ee3ebf81d09b5def7a4436a07bd4cd7bANALYSIS DATE: 2022-12-13T05:43:45ZTTPS: T1005, T1081, T1060, T1112, T1222, T1082,...

Malware Analysis – djvu – fb7d729a0265065108852a71721728ab

December 13, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, backdoor, bootkit, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: fb7d729a0265065108852a71721728abSHA1: 60f45ef61a1971ef56c598e4e7c9ea50a8d3f0e6ANALYSIS DATE: 2022-12-12T21:24:46ZTTPS: T1012,...

Malware Analysis – djvu – 3ce3405d342902d9ec619ecebb88e7c0

December 13, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 3ce3405d342902d9ec619ecebb88e7c0SHA1: ea7a862234245da1b809129099f6ad95de10485eANALYSIS DATE: 2022-12-12T21:04:08ZTTPS: T1012, T1082, T1053, T1005, T1081, T1060,...

Malware Analysis – persistence – e5a2fb54732cc555141fa1d04de2cc92

December 13, 2022

Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: e5a2fb54732cc555141fa1d04de2cc92SHA1: a92095b913449b178aaad39acbfbf0607bcc3fbdANALYSIS DATE: 2022-12-12T21:44:15ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – djvu – 950340733bcaea1a64f5b6a0bdaf39d0

December 13, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, backdoor, bootkit, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 950340733bcaea1a64f5b6a0bdaf39d0SHA1: 6b6ffba189c8e5bc6014405ab7ebea253704931fANALYSIS DATE: 2022-12-12T22:04:17ZTTPS: T1067,...

Malware Analysis – smokeloader – bcf9456781cec3d8c62b9e1706368496

December 13, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: bcf9456781cec3d8c62b9e1706368496SHA1: 3edab2399ea087470a161bea548346c92c139c37ANALYSIS DATE: 2022-12-12T23:31:17ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – cf386c67951a059789d0d70abed7d7c1

December 13, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: cf386c67951a059789d0d70abed7d7c1SHA1: 8a09e1116bd210b9cc678561795d9fbda2037d0dANALYSIS DATE: 2022-12-12T23:12:11ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis

Malware Analysis – amadey – 40a81f8f9222d7a3ecee4f41dd5af21e

Malware Analysis – dcrat – 59efe0bd2c50024139178837a97d6dab

Malware Analysis – djvu – a49cee7ee21dbdf1852986bc5720eab6

Malware Analysis – discovery – e0a3af0fd104fb0a011732de579a4b1b

Malware Analysis – ransomware – 61dcb0666f0080d742a6dad292e0ced0

Malware Analysis – djvu – b0d233967b73fac1fbfa6114ec7fa26d

Malware Analysis – ermac – 35e91deffa2d5392c8d0afa3e83db6a9

Malware Analysis – ermac – 4241a3067b87e687be063feb545fc3c2

Malware Analysis – djvu – cbf081e42318d731b5223c0eeb5c4b97

Malware Analysis – dcrat – b5edc62fc06a612dc1edfaa0e6fdaa35

Malware Analysis – smokeloader – 5d041a4006ed3f18eef822470c83ed9c

Malware Analysis – djvu – 71b38cbdfd2391a63cfb85818ecc42a8

Malware Analysis – ermac – 72b3faff0779e1ddaef3a317fbefa29c

Malware Analysis – djvu – 27b2b0f56a96792e4a87799bc5983d45

Malware Analysis – djvu – e4abac89f0c02ab08125acc019535b2e

Malware Analysis – djvu – 31ab55838ad60dcce8fc22ff24614d76

Malware Analysis – lockbit – 38a0313aaad67d4c34ef96225c5c4603

Malware Analysis – djvu – ad11601c8003994fea9cf502f77cefd8

Malware Analysis – djvu – fb7d729a0265065108852a71721728ab

Malware Analysis – djvu – 3ce3405d342902d9ec619ecebb88e7c0

Malware Analysis – persistence – e5a2fb54732cc555141fa1d04de2cc92

Malware Analysis – djvu – 950340733bcaea1a64f5b6a0bdaf39d0

Malware Analysis – smokeloader – bcf9456781cec3d8c62b9e1706368496

Malware Analysis – smokeloader – cf386c67951a059789d0d70abed7d7c1

[SARCOMA] – Ransomware Victim: Sanderling

[NITROGEN] – Ransomware Victim: Kirkor Architects and Planners

CVE Alert: CVE-2025-27026

CVE Alert: CVE-2025-52891

CVE Alert: CVE-2025-53492

You may have missed