Malware Analysis

Malware Analysis – smokeloader – 6685c0985b2978f83376519abe42a3a0

May 7, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 6685c0985b2978f83376519abe42a3a0SHA1: e63a88f6bf1f942aa03100ef615b01e5c8c8ebe6ANALYSIS DATE: 2023-05-07T06:49:35ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 11561983e23e2633aaceb72caa4012ca

May 7, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 11561983e23e2633aaceb72caa4012caSHA1: ed56a045ba5ed331c24b297d9d3c618313ecb63aANALYSIS DATE: 2023-05-07T06:48:30ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 2e0df3db9d17ecd468164e82a5dce8fd

May 7, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 2e0df3db9d17ecd468164e82a5dce8fdSHA1: 9e15d3d9061102544db4f939518db2b7c689e17dANALYSIS DATE: 2023-05-07T06:40:51ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – a3a7a7f3f4bbc4835f8ac96635434f3b

May 7, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: a3a7a7f3f4bbc4835f8ac96635434f3bSHA1: 72b800b58a7a41eb892fc0af243dcfdd3c20a5ccANALYSIS DATE: 2023-05-07T06:53:23ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 461d6a95c78bf16d6c87b1a52e62a7db

May 7, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 461d6a95c78bf16d6c87b1a52e62a7dbSHA1: 905aa67c72110b33903d5f96d3c15c1006dc98a9ANALYSIS DATE: 2023-05-07T15:21:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – – 69d7da66b26f3fadf4b24c25afa3aa1d

May 7, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: 69d7da66b26f3fadf4b24c25afa3aa1dSHA1: 21935ccf77a975f7360346653ea099ab2bc94b55ANALYSIS DATE: 2023-05-07T15:58:12ZTTPS: T1012, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – 58681a17b88689ca140b9d4c6f05f661

May 7, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:31c7719b5ee962fbde376b75e771360d, discovery, persistence, ransomware, spyware, stealerMD5: 58681a17b88689ca140b9d4c6f05f661SHA1: d0c63bcee04b55ca873ac41fb5ae7fc192954e5bANALYSIS DATE: 2023-05-07T16:27:31ZTTPS: T1060, T1112, T1222, T1082,...

Malware Analysis – amadey – a43386ae734f0f09d4930dc1192d5d8c

May 7, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:pub1, botnet:sprg, backdoor, discovery, persistence, ransomware, stealer, trojanMD5: a43386ae734f0f09d4930dc1192d5d8cSHA1: 025ccc60022aa83f209a1afb9b5954a31df05da6ANALYSIS DATE: 2023-05-07T16:36:34ZTTPS:...

Malware Analysis – amadey – 5c37c783b72099932182cb19a370d67f

May 7, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, botnet:pub1, botnet:sprg, backdoor, discovery, persistence, ransomware, trojanMD5: 5c37c783b72099932182cb19a370d67fSHA1: cb93a67bc5dc5ac05cbe84cec2ce0fb2e5d93fcaANALYSIS DATE: 2023-05-07T17:00:34ZTTPS: T1222, T1060,...

Malware Analysis – evasion – 24c77144b5f15092fe61bbbb69b4114f

May 7, 2023

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 24c77144b5f15092fe61bbbb69b4114fSHA1: 5121a20a765cb6f73d6b8ac97cdf9f6a5ae36346ANALYSIS DATE: 2023-05-07T17:17:08ZTTPS: T1102 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – ce55fc139e9f28446e46a96444c3b900

May 7, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: ce55fc139e9f28446e46a96444c3b900SHA1: cdc015e0f8a3e69f145947685025905db3023ba6ANALYSIS DATE: 2023-05-07T17:06:31ZTTPS: T1060, T1112, T1222, T1082, T1012, T1053 ScoreMeaningExample10Known badA...

Malware Analysis – amadey – 7336d7a5e81c0e607764b7adc1e5abfc

May 6, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:31c7719b5ee962fbde376b75e771360d, botnet:pub1, botnet:sprg, backdoor, discovery, evasion, ransomware, stealer, trojanMD5: 7336d7a5e81c0e607764b7adc1e5abfcSHA1: 7240aceb3ef31f84c8ff60b1fb3be0b73349c51eANALYSIS DATE:...

Malware Analysis – djvu – c260965a67461ea6ccc8e7e7b9ebe9e7

May 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:31c7719b5ee962fbde376b75e771360d, discovery, persistence, ransomware, spyware, stealerMD5: c260965a67461ea6ccc8e7e7b9ebe9e7SHA1: dd208e0ea9a2c1eaf7d8e9221e00b48fdeb4943fANALYSIS DATE: 2023-05-06T15:22:19ZTTPS: T1005, T1081, T1060, T1112,...

Malware Analysis – evasion – 4873dc59b8d3cdfb355eb0f383f20fb8

May 6, 2023

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 4873dc59b8d3cdfb355eb0f383f20fb8SHA1: 88f763d6fb7055eaa06603bd1822913ff3ea084eANALYSIS DATE: 2023-05-06T17:00:41ZTTPS: T1082, T1491, T1112, T1102, T1012, T1004, T1120 ScoreMeaningExample10Known badA...

Malware Analysis – amadey – c6152f849df9ab5a7b8bdda6c1e1301f

May 6, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:31c7719b5ee962fbde376b75e771360d, botnet:pub1, botnet:sprg, backdoor, discovery, evasion, persistence, ransomware, stealer, trojanMD5: c6152f849df9ab5a7b8bdda6c1e1301fSHA1: 3ae29eab58c00631d1d2ec748b18e0e0a4109c65ANALYSIS...

Malware Analysis – – 230feb2a0c5a06cdd5607974b9d0917e

May 6, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: 230feb2a0c5a06cdd5607974b9d0917eSHA1: b5535c2d02a02e92afd04d4cf75a5715c1aa34c1ANALYSIS DATE: 2023-05-06T16:01:47ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 2e6f10f97405a4ab7fd2b40c83db5db4

May 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:31c7719b5ee962fbde376b75e771360d, discovery, persistence, ransomware, spyware, stealerMD5: 2e6f10f97405a4ab7fd2b40c83db5db4SHA1: 556dab406953a93b017929ab216d18b1b199bb3aANALYSIS DATE: 2023-05-06T16:54:55ZTTPS: T1053, T1012, T1082, T1005,...

Malware Analysis – amadey – 2cd1278453b56dd0a5f0fa7e6d2a7866

May 4, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:31c7719b5ee962fbde376b75e771360d, botnet:pub1, botnet:sprg, backdoor, discovery, evasion, persistence, ransomware, spyware, stealer, trojanMD5: 2cd1278453b56dd0a5f0fa7e6d2a7866SHA1:...

Malware Analysis – xworm – 60756214f351f2d6d1a2cb89dc9853b5

May 4, 2023

Score: 10 MALWARE FAMILY: xwormTAGS:family:xworm, persistence, ransomware, rat, trojanMD5: 60756214f351f2d6d1a2cb89dc9853b5SHA1: 8c478657c1cce1906a72526ed231083ce5a9bed1ANALYSIS DATE: 2023-05-04T15:20:25ZTTPS: T1082, T1053, T1060, T1112, T1012, T1491 ScoreMeaningExample10Known...

Malware Analysis – djvu – 2ce0cb2c47637c78cb7cd07af95d912d

May 4, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:31c7719b5ee962fbde376b75e771360d, discovery, persistence, ransomware, spyware, stealerMD5: 2ce0cb2c47637c78cb7cd07af95d912dSHA1: 21c6c43aced8e765ee47043dbe1f90d9e213bf7dANALYSIS DATE: 2023-05-04T15:15:00ZTTPS: T1012, T1082, T1053, T1005,...

Malware Analysis – djvu – 65178f6a1891f152c05326a628e6fa3a

May 4, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:31c7719b5ee962fbde376b75e771360d, discovery, persistence, ransomware, spyware, stealerMD5: 65178f6a1891f152c05326a628e6fa3aSHA1: 6a9b6ab36f14db9948e988c68d1b91d733315578ANALYSIS DATE: 2023-05-04T16:10:23ZTTPS: T1012, T1082, T1060, T1112,...

Malware Analysis – amadey – 325cca727c1640e9c911a5f45fbc397b

May 4, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:31c7719b5ee962fbde376b75e771360d, botnet:pub1, botnet:sprg, backdoor, discovery, evasion, persistence, ransomware, spyware, stealer, trojanMD5: 325cca727c1640e9c911a5f45fbc397bSHA1:...

Malware Analysis – bootkit – 00f570c756caab8c20ecabdc996c69d3

May 4, 2023

Score: 8 MALWARE FAMILY: bootkitTAGS:bootkit, discovery, evasion, exploit, persistence, upxMD5: 00f570c756caab8c20ecabdc996c69d3SHA1: 88d2f10c67a4566478e9b2ceddd52cac9b5fdb3bANALYSIS DATE: 2023-05-04T16:18:07ZTTPS: T1222, T1112, T1067, T1012, T1082, T1060,...

Malware Analysis – bootkit – 5d6c95558f08c90419758761bf4ab83d

May 4, 2023

Score: 10 MALWARE FAMILY: bootkitTAGS:bootkit, discovery, evasion, persistence, ransomware, trojanMD5: 5d6c95558f08c90419758761bf4ab83dSHA1: 7fd6074f848d83879ce2246f4cfc98266043ddafANALYSIS DATE: 2023-05-04T16:07:05ZTTPS: T1012, T1067, T1053, T1060, T1112, T1031,...

Malware Analysis

Malware Analysis – smokeloader – 6685c0985b2978f83376519abe42a3a0

Malware Analysis – smokeloader – 11561983e23e2633aaceb72caa4012ca

Malware Analysis – smokeloader – 2e0df3db9d17ecd468164e82a5dce8fd

Malware Analysis – smokeloader – a3a7a7f3f4bbc4835f8ac96635434f3b

Malware Analysis – smokeloader – 461d6a95c78bf16d6c87b1a52e62a7db

Malware Analysis – – 69d7da66b26f3fadf4b24c25afa3aa1d

Malware Analysis – djvu – 58681a17b88689ca140b9d4c6f05f661

Malware Analysis – amadey – a43386ae734f0f09d4930dc1192d5d8c

Malware Analysis – amadey – 5c37c783b72099932182cb19a370d67f

Malware Analysis – evasion – 24c77144b5f15092fe61bbbb69b4114f

Malware Analysis – djvu – ce55fc139e9f28446e46a96444c3b900

Malware Analysis – amadey – 7336d7a5e81c0e607764b7adc1e5abfc

Malware Analysis – djvu – c260965a67461ea6ccc8e7e7b9ebe9e7

Malware Analysis – evasion – 4873dc59b8d3cdfb355eb0f383f20fb8

Malware Analysis – amadey – c6152f849df9ab5a7b8bdda6c1e1301f

Malware Analysis – – 230feb2a0c5a06cdd5607974b9d0917e

Malware Analysis – djvu – 2e6f10f97405a4ab7fd2b40c83db5db4

Malware Analysis – amadey – 2cd1278453b56dd0a5f0fa7e6d2a7866

Malware Analysis – xworm – 60756214f351f2d6d1a2cb89dc9853b5

Malware Analysis – djvu – 2ce0cb2c47637c78cb7cd07af95d912d

Malware Analysis – djvu – 65178f6a1891f152c05326a628e6fa3a

Malware Analysis – amadey – 325cca727c1640e9c911a5f45fbc397b

Malware Analysis – bootkit – 00f570c756caab8c20ecabdc996c69d3

Malware Analysis – bootkit – 5d6c95558f08c90419758761bf4ab83d

Cobalt Strike Beacon Detected – 121[.]43[.]37[.]134:4434

Cobalt Strike Beacon Detected – 119[.]29[.]231[.]118:443

Cobalt Strike Beacon Detected – 39[.]101[.]74[.]162:443

Cobalt Strike Beacon Detected – 8[.]218[.]112[.]112:8880

Cobalt Strike Beacon Detected – 47[.]109[.]48[.]57:443

You may have missed