Malware Analysis

Malware Analysis – smokeloader – 146ed6fd74dddfb1127fdc5765cdcb55

December 13, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 146ed6fd74dddfb1127fdc5765cdcb55SHA1: 0ab6b06854da85d50dc8189d6d09aad3c1bdd073ANALYSIS DATE: 2022-12-12T23:04:51ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – a484413e61615e2aac80d6a3908ee9ff

December 13, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, backdoor, bootkit, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: a484413e61615e2aac80d6a3908ee9ffSHA1: 84917aa2d1755f054255e916cec417160312e4e7ANALYSIS DATE: 2022-12-12T23:31:04ZTTPS: T1082,...

Malware Analysis – djvu – a086c884d1dc2920e8a959fcb8457f93

December 12, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:1808, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: a086c884d1dc2920e8a959fcb8457f93SHA1: 8a3e9388794c8ba3fcfd43906ea7942673cf26b0ANALYSIS DATE:...

Malware Analysis – medusalocker – 8645a413332f840e925bac3cf19ceb57

December 12, 2022

Score: 10 MALWARE FAMILY: medusalockerTAGS:family:medusalocker, evasion, ransomware, spyware, stealer, trojanMD5: 8645a413332f840e925bac3cf19ceb57SHA1: 87ca0cd2e1c04c2437d302f2864d1e68ea991677ANALYSIS DATE: 2022-12-12T15:09:16ZTTPS: T1005, T1081, T1082, T1088, T1089, T1112,...

Malware Analysis – smokeloader – 0453295e7a2cbdaaeeb55c35d79027c9

December 12, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 0453295e7a2cbdaaeeb55c35d79027c9SHA1: 929e1d564f254ef3be6bc198db6baca7707fa67eANALYSIS DATE: 2022-12-12T17:05:45ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – d39f81d9c3234aef7cd5d6bd996686f3

December 12, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: d39f81d9c3234aef7cd5d6bd996686f3SHA1: a35001f1dcefbebe6087cd08132c141f12eed152ANALYSIS DATE: 2022-12-12T16:22:53ZTTPS: T1222, T1053, T1012, T1060,...

Malware Analysis – djvu – 117665adcf6258541591a576ef8f1bb0

December 12, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:1808, botnet:517, backdoor, bootkit, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 117665adcf6258541591a576ef8f1bb0SHA1: b479d82bd0b2bf6f207de043aa394a15437d84baANALYSIS...

Malware Analysis – djvu – 182bfc9ec8306d1ca638b0b503e6a941

December 12, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 182bfc9ec8306d1ca638b0b503e6a941SHA1: 3c92e8ce9be9b144be327fd7c8dc5becf25ed136ANALYSIS DATE: 2022-12-12T15:22:23ZTTPS: T1222, T1005, T1081, T1012,...

Malware Analysis – persistence – 842d42bb052a77759c8f55d46021b2e0

December 12, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 842d42bb052a77759c8f55d46021b2e0SHA1: 497403d1ba51ce198a46221395daf240c206bb36ANALYSIS DATE: 2022-12-12T17:28:00ZTTPS: T1005, T1081, T1082, T1012, T1120, T1060, T1112 ScoreMeaningExample10Known...

Malware Analysis – djvu – 9746e931befe5203bf5508cfa8cd17d1

December 12, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:1808, backdoor, bootkit, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 9746e931befe5203bf5508cfa8cd17d1SHA1: 31835e5a238cd99e0fa36643077fd657bd48f8a1ANALYSIS DATE:...

Malware Analysis – djvu – b5690302c24d9b994a654ade98a39c88

December 12, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: b5690302c24d9b994a654ade98a39c88SHA1: 944f6ed97f130119dbc71158fd28fff3aa38832bANALYSIS DATE: 2022-12-12T17:20:54ZTTPS: T1005, T1081, T1060, T1112,...

Malware Analysis – smokeloader – 7ca4d4ca99e04052b638422677b7add0

December 12, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 7ca4d4ca99e04052b638422677b7add0SHA1: fc4741e176b584dca91476331597a3c3d3369657ANALYSIS DATE: 2022-12-12T17:17:06ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 8641bde8beb42a6d0719cfd21848a563

December 12, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 8641bde8beb42a6d0719cfd21848a563SHA1: fc61c5a119308cf3111cef1e7ae86b1b67720a26ANALYSIS DATE: 2022-12-12T09:24:00ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – – 03cea7c49abe78863ae2644ac77c8efb

December 12, 2022

Score: 10 MALWARE FAMILY: TAGS:MD5: 03cea7c49abe78863ae2644ac77c8efbSHA1: 59edd4b3c523af71219fff0e15f8daa6ec11783dANALYSIS DATE: 2022-12-12T09:40:42ZTTPS: T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – dcrat – 09ba7117d4348bb27231cdffcc5b75a1

December 12, 2022

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, family:djvu, family:raccoon, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:ec7a54fb6492ff3a52d09504b8ecf082, botnet:mario23_10, backdoor, bootkit, collection, discovery, infostealer, persistence, ransomware,...

Malware Analysis – lockbit – df7a9a45a10c1942225eb9be257fb752

December 12, 2022

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, discovery, evasion, persistence, ransomwareMD5: df7a9a45a10c1942225eb9be257fb752SHA1: 874630d6f4bdf9224125d35f30c48bc6d1da8ec1ANALYSIS DATE: 2022-12-12T09:41:20ZTTPS: T1490, T1046, T1107, T1060, T1112, T1082 ScoreMeaningExample10Known...

Malware Analysis – djvu – ffc82918bc86df0a1dd97029426cc893

December 12, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: ffc82918bc86df0a1dd97029426cc893SHA1: 6da97d9b204e1e3f610f45031c2e8fbd6d90df27ANALYSIS DATE: 2022-12-12T10:05:47ZTTPS: T1082, T1012, T1005, T1081,...

Malware Analysis – djvu – 0591ce7264414813b1128e2f19f8c701

December 12, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 0591ce7264414813b1128e2f19f8c701SHA1: d3af240c112ca5f42811e3dfa773d2eb0593fb8cANALYSIS DATE: 2022-12-12T10:27:33ZTTPS: T1060, T1112, T1012, T1082,...

Malware Analysis – djvu – cc3dec5ba3f97a58aba84f195f56a3ac

December 12, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: cc3dec5ba3f97a58aba84f195f56a3acSHA1: b2ef30ae4c62b330584c1783c12deb4dac13e1e4ANALYSIS DATE: 2022-12-12T10:53:48ZTTPS: T1060, T1112, T1012, T1082,...

Malware Analysis – smokeloader – 5e8b41e37d55fbb987d824e3010caafe

December 12, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 5e8b41e37d55fbb987d824e3010caafeSHA1: 450562fc2cb9a92ca70573bad727e32ed5d171ddANALYSIS DATE: 2022-12-12T10:49:44ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – joker – 16a4cbdb16994f328003f63a8b16a1ab

December 12, 2022

Score: 10 MALWARE FAMILY: jokerTAGS:family:joker, evasion, infostealer, ransomware, trojanMD5: 16a4cbdb16994f328003f63a8b16a1abSHA1: 87b027fa2a3bf188d5945720bc16dc1f9469cf77ANALYSIS DATE: 2022-12-12T10:57:02ZTTPS: T1102 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 183ad97d55d1170f21a8d10a8339fdab

December 12, 2022

Score: 5 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 183ad97d55d1170f21a8d10a8339fdabSHA1: 427b302690b2418b5b414fee3ac6ce585e6fe375ANALYSIS DATE: 2022-12-12T10:56:45ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – smokeloader – e2aa8611ff12300ed35713bd5b396b2e

December 12, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: e2aa8611ff12300ed35713bd5b396b2eSHA1: 21a61539cbd78c50ae43234657b0d7e6a6a81010ANALYSIS DATE: 2022-12-12T11:14:49ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – dcrat – e2a32071d75e13ad12354cde287a1469

December 12, 2022

Malware Analysis

Malware Analysis – smokeloader – 146ed6fd74dddfb1127fdc5765cdcb55

Malware Analysis – djvu – a484413e61615e2aac80d6a3908ee9ff

Malware Analysis – djvu – a086c884d1dc2920e8a959fcb8457f93

Malware Analysis – medusalocker – 8645a413332f840e925bac3cf19ceb57

Malware Analysis – smokeloader – 0453295e7a2cbdaaeeb55c35d79027c9

Malware Analysis – djvu – d39f81d9c3234aef7cd5d6bd996686f3

Malware Analysis – djvu – 117665adcf6258541591a576ef8f1bb0

Malware Analysis – djvu – 182bfc9ec8306d1ca638b0b503e6a941

Malware Analysis – persistence – 842d42bb052a77759c8f55d46021b2e0

Malware Analysis – djvu – 9746e931befe5203bf5508cfa8cd17d1

Malware Analysis – djvu – b5690302c24d9b994a654ade98a39c88

Malware Analysis – smokeloader – 7ca4d4ca99e04052b638422677b7add0

Malware Analysis – smokeloader – 8641bde8beb42a6d0719cfd21848a563

Malware Analysis – – 03cea7c49abe78863ae2644ac77c8efb

Malware Analysis – dcrat – 09ba7117d4348bb27231cdffcc5b75a1

Malware Analysis – lockbit – df7a9a45a10c1942225eb9be257fb752

Malware Analysis – djvu – ffc82918bc86df0a1dd97029426cc893

Malware Analysis – djvu – 0591ce7264414813b1128e2f19f8c701

Malware Analysis – djvu – cc3dec5ba3f97a58aba84f195f56a3ac

Malware Analysis – smokeloader – 5e8b41e37d55fbb987d824e3010caafe

Malware Analysis – joker – 16a4cbdb16994f328003f63a8b16a1ab

Malware Analysis – ransomware – 183ad97d55d1170f21a8d10a8339fdab

Malware Analysis – smokeloader – e2aa8611ff12300ed35713bd5b396b2e

Malware Analysis – dcrat – e2a32071d75e13ad12354cde287a1469

[SARCOMA] – Ransomware Victim: Sanderling

[NITROGEN] – Ransomware Victim: Kirkor Architects and Planners

CVE Alert: CVE-2025-27026

CVE Alert: CVE-2025-52891

CVE Alert: CVE-2025-53492

You may have missed