Malware Analysis

Malware Analysis – evasion – d0ce2b3c2d37a02fb5e78af51c591f4b

November 30, 2022

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, ransomware, spyware, stealerMD5: d0ce2b3c2d37a02fb5e78af51c591f4bSHA1: 9046a76dca4fb5f73123840ac421051830016503ANALYSIS DATE: 2022-11-30T15:40:10ZTTPS: T1005, T1081, T1091, T1031 ScoreMeaningExample10Known badA malware family...

Malware Analysis – evasion – 0684c13902e14641d75926cc95b753c6

November 30, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 0684c13902e14641d75926cc95b753c6SHA1: af1a6ba9ef1c6f4425b01d10e95f1dd02dfa3763ANALYSIS DATE: 2022-11-30T15:36:18ZTTPS: T1107, T1490, T1012, T1120, T1082, T1070 ScoreMeaningExample10Known badA malware family...

Malware Analysis – djvu – fecb5a021d342df0547fa4aebb2bc5cf

November 30, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: fecb5a021d342df0547fa4aebb2bc5cfSHA1: bebb21ceec29999015757acf81f63b08547cd7f9ANALYSIS DATE: 2022-11-30T15:40:47ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – chaos – 2708f96aa63ba95163960ff95d2b847e

November 30, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, ransomwareMD5: 2708f96aa63ba95163960ff95d2b847eSHA1: 2b7f7f3b1d30fc7e979b44dac11f55ce3c1408beANALYSIS DATE: 2022-11-30T15:48:09ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – gandcrab – 3b43bfc5029dc4e3aeabc9305538b530

November 30, 2022

Score: 10 MALWARE FAMILY: gandcrabTAGS:family:gandcrab, backdoor, persistence, ransomwareMD5: 3b43bfc5029dc4e3aeabc9305538b530SHA1: 1fb1a1691a49928918c78a68cad1043f99e75872ANALYSIS DATE: 2022-11-30T15:54:17ZTTPS: T1012, T1082, T1060, T1112, T1120 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 3625fbe8c63dd4c870c2e63b06109cbf

November 30, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 3625fbe8c63dd4c870c2e63b06109cbfSHA1: 113e85cb091bdf4b055b2f93522c2eb488a7d67cANALYSIS DATE: 2022-11-30T15:49:06ZTTPS: T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – – db60681d7b00c305afb08d245fcc5594

November 30, 2022

Score: 6 MALWARE FAMILY: TAGS:MD5: db60681d7b00c305afb08d245fcc5594SHA1: 947dff0edc0444e042364abd01c385eaa758c898ANALYSIS DATE: 2022-11-30T15:51:07ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – mafiaware666 – 11540a93823f0ca6f8af260616814226

November 30, 2022

Score: 10 MALWARE FAMILY: mafiaware666TAGS:family:mafiaware666, ransomwareMD5: 11540a93823f0ca6f8af260616814226SHA1: 0405d1355d46fa94dacfb4088ba301a325777e60ANALYSIS DATE: 2022-11-30T15:58:06ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – ebc82ca2ef6b43b868d17eaf1e2c640b

November 30, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: ebc82ca2ef6b43b868d17eaf1e2c640bSHA1: 0c1145a1c82523fa7982957260531c55e0d8c835ANALYSIS DATE: 2022-11-30T15:59:11ZTTPS: T1222, T1082, T1130, T1112, T1060 ScoreMeaningExample10Known badA malware...

Malware Analysis – persistence – 3f5d43765b9861ef7fb6934e4f3bc696

November 30, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, phishing, ransomwareMD5: 3f5d43765b9861ef7fb6934e4f3bc696SHA1: 06fcd3e560876ad05f2f582f91547a04bff829f1ANALYSIS DATE: 2022-11-30T15:57:07ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – chaos – 34570f7d9754c9a9cd5ef8cbca7f2fba

November 30, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, persistence, ransomwareMD5: 34570f7d9754c9a9cd5ef8cbca7f2fbaSHA1: 02143c7dda3f4b53f10fd533d44409d4241df3feANALYSIS DATE: 2022-11-30T16:00:13ZTTPS: T1082, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – mafiaware666 – fb345ca471c5ba5e86f62f15fa3f7b17

November 30, 2022

Score: 10 MALWARE FAMILY: mafiaware666TAGS:family:mafiaware666, ransomwareMD5: fb345ca471c5ba5e86f62f15fa3f7b17SHA1: e2f15273e745384a9c5544d3125a2275dca57164ANALYSIS DATE: 2022-11-30T16:04:10ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – chaos – f395adb22b8c6e31961e8b1c4f54d668

November 30, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, persistence, ransomwareMD5: f395adb22b8c6e31961e8b1c4f54d668SHA1: cbd321d6ff3cc062ea4d7bc83e377ce03eb0d4b4ANALYSIS DATE: 2022-11-30T16:02:12ZTTPS: T1082, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – 81418ff9c19478b43ebf747b531ad3d0

November 30, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 81418ff9c19478b43ebf747b531ad3d0SHA1: 562ea6933da9fd7e99a56daca1685802f6e91b89ANALYSIS DATE: 2022-11-30T16:02:11ZTTPS: T1082, T1070, T1107, T1490, T1012, T1120 ScoreMeaningExample10Known badA malware family...

Malware Analysis – amadey – ae5c5d1c29073329a53532da9d5c3b66

November 30, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:dcrat, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealer, trojanMD5:...

Malware Analysis – evasion – ff416de31378570251a12a0ca1db4f72

November 30, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: ff416de31378570251a12a0ca1db4f72SHA1: ae77398da2b9d025dcc6a97d430c1485dc6b650dANALYSIS DATE: 2022-11-30T16:09:04ZTTPS: T1112, T1031, T1089, T1082, T1107, T1490, T1060, T1053...

Malware Analysis – ransomware – fed9aec260513c67135bd714e5adfa99

November 30, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, upxMD5: fed9aec260513c67135bd714e5adfa99SHA1: 3e75bd2241b2118295fd4d9e0392a698a5adda49ANALYSIS DATE: 2022-11-30T16:08:13ZTTPS: T1082, T1012, T1120, T1491, T1112 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – smokeloader – e476229c42510960ebfa326d165e34ad

November 30, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: e476229c42510960ebfa326d165e34adSHA1: 4966ee2356365da1283161528276e18b291824feANALYSIS DATE: 2022-11-30T16:24:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 92267bdec871aedfca9cf806b5b88c59

November 30, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 92267bdec871aedfca9cf806b5b88c59SHA1: 818c4273c5e705145badbaa33dfde2080627f216ANALYSIS DATE: 2022-11-30T16:06:10ZTTPS: T1082, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – persistence – 15debe63456fb66237f6d8dea7a8b59c

November 30, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 15debe63456fb66237f6d8dea7a8b59cSHA1: 822e589b31658ac4d984eeb8515e38529da3bf25ANALYSIS DATE: 2022-11-30T16:42:43ZTTPS: T1060, T1112, T1012, T1082, T1120 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – djvu – 62e7b4f53b5846102b2066d03670992f

November 30, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 62e7b4f53b5846102b2066d03670992fSHA1: 979bd404e560cbc2a39e2560ba7e73a76170f026ANALYSIS DATE: 2022-11-30T16:28:04ZTTPS: T1060, T1112, T1005, T1081,...

Malware Analysis – dcrat – 3f2606fc4e66963baec8e53f359821b2

November 30, 2022

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealer, trojanMD5: 3f2606fc4e66963baec8e53f359821b2SHA1:...

Malware Analysis – amadey – a63211626b5898d3be590eb5d36c1da0

November 30, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: a63211626b5898d3be590eb5d36c1da0SHA1: c74641ded6c90ca28e32f82d86199a5f95f8106bANALYSIS DATE:...

Malware Analysis – gandcrab – 2ec0e9aa9eebb129e88668f60197695f

November 30, 2022

Score: 10 MALWARE FAMILY: gandcrabTAGS:family:gandcrab, backdoor, persistence, ransomwareMD5: 2ec0e9aa9eebb129e88668f60197695fSHA1: 3a6be6dd59767a9758ef5e4c441d673d03b277d6ANALYSIS DATE: 2022-11-30T09:00:04ZTTPS: T1012, T1120, T1082, T1060, T1112 ScoreMeaningExample10Known badA malware...

Malware Analysis

Malware Analysis – evasion – d0ce2b3c2d37a02fb5e78af51c591f4b

Malware Analysis – evasion – 0684c13902e14641d75926cc95b753c6

Malware Analysis – djvu – fecb5a021d342df0547fa4aebb2bc5cf

Malware Analysis – chaos – 2708f96aa63ba95163960ff95d2b847e

Malware Analysis – gandcrab – 3b43bfc5029dc4e3aeabc9305538b530

Malware Analysis – ransomware – 3625fbe8c63dd4c870c2e63b06109cbf

Malware Analysis – – db60681d7b00c305afb08d245fcc5594

Malware Analysis – mafiaware666 – 11540a93823f0ca6f8af260616814226

Malware Analysis – djvu – ebc82ca2ef6b43b868d17eaf1e2c640b

Malware Analysis – persistence – 3f5d43765b9861ef7fb6934e4f3bc696

Malware Analysis – chaos – 34570f7d9754c9a9cd5ef8cbca7f2fba

Malware Analysis – mafiaware666 – fb345ca471c5ba5e86f62f15fa3f7b17

Malware Analysis – chaos – f395adb22b8c6e31961e8b1c4f54d668

Malware Analysis – evasion – 81418ff9c19478b43ebf747b531ad3d0

Malware Analysis – amadey – ae5c5d1c29073329a53532da9d5c3b66

Malware Analysis – evasion – ff416de31378570251a12a0ca1db4f72

Malware Analysis – ransomware – fed9aec260513c67135bd714e5adfa99

Malware Analysis – smokeloader – e476229c42510960ebfa326d165e34ad

Malware Analysis – ransomware – 92267bdec871aedfca9cf806b5b88c59

Malware Analysis – persistence – 15debe63456fb66237f6d8dea7a8b59c

Malware Analysis – djvu – 62e7b4f53b5846102b2066d03670992f

Malware Analysis – dcrat – 3f2606fc4e66963baec8e53f359821b2

Malware Analysis – amadey – a63211626b5898d3be590eb5d36c1da0

Malware Analysis – gandcrab – 2ec0e9aa9eebb129e88668f60197695f

[INCRANSOM] – Ransomware Victim: cityofgardendale[.]com

CVE Alert: CVE-2025-27452

CVE Alert: CVE-2025-27453

CVE Alert: CVE-2025-27454

CVE Alert: CVE-2025-27455

You may have missed