Malware Analysis

Malware Analysis – djvu – c3488db7bcf308cdc6e6b142dfb5393e

December 10, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: c3488db7bcf308cdc6e6b142dfb5393eSHA1: be86e3e28b8c42f2bfa3436bfb19cd4945c832f0ANALYSIS DATE: 2022-12-10T17:03:12ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – djvu – 82fd30cac3fbe60424f8b68a42dfaf18

December 10, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 82fd30cac3fbe60424f8b68a42dfaf18SHA1: 7f3bef20950b0acc170beb97d94d626fe0627284ANALYSIS DATE: 2022-12-10T17:24:25ZTTPS: T1060, T1112, T1222, T1082, T1012 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 948fa46063f9f65bcfafe46c43771ffe

December 10, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 948fa46063f9f65bcfafe46c43771ffeSHA1: 5d7bae7461613a3ba11b4acdf4b6207e0e71039aANALYSIS DATE: 2022-12-10T17:11:32ZTTPS: T1060, T1112, T1082, T1005,...

Malware Analysis – xorist – 60d155a69731675bb493c707ae205c96

December 10, 2022

Score: 10 MALWARE FAMILY: xoristTAGS:family:xorist, persistence, ransomware, upxMD5: 60d155a69731675bb493c707ae205c96SHA1: 22d7741ea994b80188a8d43955083c760553cb99ANALYSIS DATE: 2022-12-06T00:47:17ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – c86a231363e8d7aa4d0acf13442ed998

December 10, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: c86a231363e8d7aa4d0acf13442ed998SHA1: e7ceb5a16b0563c220a796af88b1e2e02525763aANALYSIS DATE: 2022-12-10T09:46:36ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – xorist – 5e9b5b1d952c74996c7f12dba611f205

December 10, 2022

Score: 10 MALWARE FAMILY: xoristTAGS:family:xorist, persistence, ransomware, spyware, stealer, upxMD5: 5e9b5b1d952c74996c7f12dba611f205SHA1: 10458ae6b4a18d93301099f66c7560d2e2fb2d4bANALYSIS DATE: 2022-12-06T00:47:19ZTTPS: T1060, T1112, T1005, T1081 ScoreMeaningExample10Known badA...

Malware Analysis – cerber – a57745a30d63f511d28aa43e4b710e1c

December 10, 2022

Score: 10 MALWARE FAMILY: cerberTAGS:family:cerber, evasion, persistence, ransomware, spyware, stealerMD5: a57745a30d63f511d28aa43e4b710e1cSHA1: 5985e7d1831784fd15de2cc62451deb16b65b046ANALYSIS DATE: 2022-12-10T09:32:04ZTTPS: T1490, T1107, T1158, T1112, T1082, T1005,...

Malware Analysis – dcrat – f42012648010b8dddc5d023e46e64144

December 10, 2022

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:mario23_10, backdoor, bootkit, collection, discovery, infostealer, persistence, ransomware, rat, spyware,...

Malware Analysis – dcrat – 545edb09eef6849f6c2b3f87b3dfc5d3

December 10, 2022

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, family:djvu, family:redline, family:vidar, botnet:517, botnet:mario23_10, bootkit, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealerMD5: 545edb09eef6849f6c2b3f87b3dfc5d3SHA1:...

Malware Analysis – djvu – 3e132606c5205c1200f61a3dd211c794

December 10, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 3e132606c5205c1200f61a3dd211c794SHA1: 00ef28583d621983254fb0285fcd1084e0d4d030ANALYSIS DATE: 2022-12-10T09:47:23ZTTPS: T1060, T1112, T1222, T1012,...

Malware Analysis – dcrat – 2c6e6e290972fcd5e556efccfd51f174

December 10, 2022

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, family:djvu, family:raccoon, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:ec7a54fb6492ff3a52d09504b8ecf082, botnet:mario23_10, backdoor, bootkit, collection, discovery, infostealer, persistence, ransomware,...

Malware Analysis – dcrat – 5eb828dff6222ddbe9a3ee89ccf031c5

December 10, 2022

Malware Analysis – dcrat – 73a5d127eaaf6fb828f619ef256968e0

December 10, 2022

Malware Analysis – – 0957d09f815e2260860bdd9d5dda1381

December 10, 2022

Score: 3 MALWARE FAMILY: TAGS:MD5: 0957d09f815e2260860bdd9d5dda1381SHA1: ec885100590e960007c45fb0fdd3f82a5aa8fa8bANALYSIS DATE: 2022-12-05T18:58:08ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – smokeloader – 62d2eee763f97a3ee7eedd9c44d4ae06

December 10, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 62d2eee763f97a3ee7eedd9c44d4ae06SHA1: 809809a585c0275ab3a5620b974b1ca75acec2d6ANALYSIS DATE: 2022-12-10T04:45:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – a398399a3cf53c16d8d9eb535174c4ae

December 10, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: a398399a3cf53c16d8d9eb535174c4aeSHA1: 8696d4b0a585d6ac07068a7a4e83daffecf73b30ANALYSIS DATE: 2022-12-10T04:00:33ZTTPS: T1222, T1060, T1112, T1005,...

Malware Analysis – dcrat – a53e90033448a8156937bb17eddfc43b

December 10, 2022

Malware Analysis – ransomware – 355b1f0ecc6f21d424d290fd1cf8f9c4

December 10, 2022

Score: 5 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 355b1f0ecc6f21d424d290fd1cf8f9c4SHA1: d8e77cff676472549fc632dd95a984f574c5d2c3ANALYSIS DATE: 2022-12-10T05:40:07ZTTPS: T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – ransomware – 2174e0b00c34d4341a684eed4878368a

December 10, 2022

Score: 5 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 2174e0b00c34d4341a684eed4878368aSHA1: fcead4a3af7f6018692f947f3d8f93caf048cc67ANALYSIS DATE: 2022-12-10T05:40:07ZTTPS: T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – evasion – 5db22ff59ff6dc30ed8ae5133954f6bd

December 10, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 5db22ff59ff6dc30ed8ae5133954f6bdSHA1: f8a218eddd1c53390aa71c967eb842f4fe8e5054ANALYSIS DATE: 2022-12-10T05:23:04ZTTPS: T1031 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – b6168370fa490017dfa9ddbd939e05ec

December 10, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, botnet:mario23_10, bootkit, collection, infostealer, persistence, ransomware, spywareMD5: b6168370fa490017dfa9ddbd939e05ecSHA1: 3e2a117d88e76116e39e2f59a09189d665e7838bANALYSIS DATE: 2022-12-09T21:50:02ZTTPS: T1012, T1120, T1082,...

Malware Analysis – xorist – 8ccce69652942733ae5ceadd4faf8320

December 10, 2022

Score: 10 MALWARE FAMILY: xoristTAGS:family:xorist, bootkit, persistence, ransomware, spyware, stealer, upxMD5: 8ccce69652942733ae5ceadd4faf8320SHA1: d50c444d6959e851b56c7018b810b91ac7f9c14eANALYSIS DATE: 2022-12-05T15:43:30ZTTPS: T1005, T1081, T1067, T1060, T1112...

Malware Analysis – djvu – d580b0420c8e330392c0d29bd9cba41b

December 10, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: d580b0420c8e330392c0d29bd9cba41bSHA1: 411d7f6a343892f03a91e059028ba7451c2e31b1ANALYSIS DATE: 2022-12-09T22:04:52ZTTPS: T1222, T1005, T1081, T1012,...

Malware Analysis – discovery – 91182cc38b2dcadf8bbbaca3319d6c55

December 10, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, exploitMD5: 91182cc38b2dcadf8bbbaca3319d6c55SHA1: ef9065fe80b54f2af060347995e584dc35b5f3b6ANALYSIS DATE: 2022-12-09T21:47:27ZTTPS: T1082, T1112, T1031, T1130, T1053, T1222, T1102, T1562, T1489...

Malware Analysis

Malware Analysis – djvu – c3488db7bcf308cdc6e6b142dfb5393e

Malware Analysis – djvu – 82fd30cac3fbe60424f8b68a42dfaf18

Malware Analysis – djvu – 948fa46063f9f65bcfafe46c43771ffe

Malware Analysis – xorist – 60d155a69731675bb493c707ae205c96

Malware Analysis – ransomware – c86a231363e8d7aa4d0acf13442ed998

Malware Analysis – xorist – 5e9b5b1d952c74996c7f12dba611f205

Malware Analysis – cerber – a57745a30d63f511d28aa43e4b710e1c

Malware Analysis – dcrat – f42012648010b8dddc5d023e46e64144

Malware Analysis – dcrat – 545edb09eef6849f6c2b3f87b3dfc5d3

Malware Analysis – djvu – 3e132606c5205c1200f61a3dd211c794

Malware Analysis – dcrat – 2c6e6e290972fcd5e556efccfd51f174

Malware Analysis – dcrat – 5eb828dff6222ddbe9a3ee89ccf031c5

Malware Analysis – dcrat – 73a5d127eaaf6fb828f619ef256968e0

Malware Analysis – – 0957d09f815e2260860bdd9d5dda1381

Malware Analysis – smokeloader – 62d2eee763f97a3ee7eedd9c44d4ae06

Malware Analysis – djvu – a398399a3cf53c16d8d9eb535174c4ae

Malware Analysis – dcrat – a53e90033448a8156937bb17eddfc43b

Malware Analysis – ransomware – 355b1f0ecc6f21d424d290fd1cf8f9c4

Malware Analysis – ransomware – 2174e0b00c34d4341a684eed4878368a

Malware Analysis – evasion – 5db22ff59ff6dc30ed8ae5133954f6bd

Malware Analysis – djvu – b6168370fa490017dfa9ddbd939e05ec

Malware Analysis – xorist – 8ccce69652942733ae5ceadd4faf8320

Malware Analysis – djvu – d580b0420c8e330392c0d29bd9cba41b

Malware Analysis – discovery – 91182cc38b2dcadf8bbbaca3319d6c55

[INCRANSOM] – Ransomware Victim: nissi-beach[.]com

[INCRANSOM] – Ransomware Victim: alpha-steuer[.]de

[INCRANSOM] – Ransomware Victim: finanzconsult-immobilien[.]de

[INCRANSOM] – Ransomware Victim: www[.]davisdavisco[.]com

[INCRANSOM] – Ransomware Victim: npfy[.]org

You may have missed