Malware Analysis

Malware Analysis – persistence – 13d8d4a482cfcb67c2281e84b4f756a3

November 30, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 13d8d4a482cfcb67c2281e84b4f756a3SHA1: b3e07b303b598f42f8a79ba36ced4f1cf96504d6ANALYSIS DATE: 2022-11-28T16:41:45ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – persistence – 5210f168f2d7f59b5b9c3f66e58b205c

November 30, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 5210f168f2d7f59b5b9c3f66e58b205cSHA1: 0d669740f1ec1a6e87ceb22239b70616dfce37c9ANALYSIS DATE: 2022-11-28T17:25:33ZTTPS: T1107, T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – f11f9d800e0130517df79e019dbae757

November 30, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: f11f9d800e0130517df79e019dbae757SHA1: b9055d16e6a24d9bf829d63b4a370b70cd1ce84aANALYSIS DATE: 2022-11-28T16:36:10ZTTPS: T1060, T1112, T1107, T1490, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – 033d1c48ba9d6bdd28dd6c9395e25fd6

November 30, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 033d1c48ba9d6bdd28dd6c9395e25fd6SHA1: d07af7ceec86afba00750009df90a8604d5b1502ANALYSIS DATE: 2022-11-29T21:45:00ZTTPS: T1490, T1059, T1107, T1070, T1485, T1082, T1012, T1120 ScoreMeaningExample10Known badA...

Malware Analysis – ragnarlocker – 9bfb49abbfea8f5f8b89f2f377e973e1

November 30, 2022

Score: 10 MALWARE FAMILY: ragnarlockerTAGS:family:ragnarlocker, bootkit, evasion, persistence, ransomwareMD5: 9bfb49abbfea8f5f8b89f2f377e973e1SHA1: 9acb987a295ab88ded9b20ab8cdb97c0ecdc0734ANALYSIS DATE: 2022-11-29T21:56:53ZTTPS: T1490, T1107, T1067, T1012, T1120, T1082 ScoreMeaningExample10Known...

Malware Analysis – amadey – d7bc03281e761a7b3d729fb6ef803b6e

November 30, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:dcrat, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealer, trojanMD5:...

Malware Analysis – djvu – d9afdbf7050e0973224b267dbffa9457

November 30, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: d9afdbf7050e0973224b267dbffa9457SHA1: bf7d808baea954c2eac0e30c9cae4ef3e26673d2ANALYSIS DATE: 2022-11-29T21:55:31ZTTPS: T1222, T1082, T1012, T1005,...

Malware Analysis – djvu – 41001fdd7879ce9ede214e92c7e492be

November 30, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 41001fdd7879ce9ede214e92c7e492beSHA1: 215964b0399da37b41b7f420806a72feb72a7c28ANALYSIS DATE: 2022-11-29T23:21:03ZTTPS: T1222, T1012, T1082, T1060,...

Malware Analysis – smokeloader – d24cefe18c680c5901545ed9b1efaf81

November 30, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: d24cefe18c680c5901545ed9b1efaf81SHA1: 40fd9989c083181970e872803fe3eb3fbb789ebdANALYSIS DATE: 2022-11-29T22:55:58ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – amadey – 93366f27a626ccf9bc5404430f18608c

November 30, 2022

Malware Analysis – djvu – bab03c2ce9374981269596f8577cc553

November 30, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: bab03c2ce9374981269596f8577cc553SHA1: 30128f07491475d34ee8eead5dafbb73ef3fbb33ANALYSIS DATE: 2022-11-29T23:56:42ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – evasion – 1d44c07d4511e0f8487ae8ae49c635c5

November 29, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 1d44c07d4511e0f8487ae8ae49c635c5SHA1: 7912eaaccc61299660807e1a65aa70e3f6db1e70ANALYSIS DATE: 2022-11-28T10:07:35ZTTPS: T1082, T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – 2d95aa6bad4882a0b4619233a666b404

November 29, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 2d95aa6bad4882a0b4619233a666b404SHA1: c0edb04e730964ac4a6229f9a5d2fc6c62b1848dANALYSIS DATE: 2022-11-28T09:29:58ZTTPS: T1107, T1490, T1060, T1112, T1088, T1089, T1158 ScoreMeaningExample10Known...

Malware Analysis – evasion – c9f816fa3da7cda14f0818d8d7d0d626

November 29, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: c9f816fa3da7cda14f0818d8d7d0d626SHA1: 2b4e7f608c11eb610b8ce8fcd40db0937fe5c0bdANALYSIS DATE: 2022-11-28T09:57:15ZTTPS: T1082, T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – 97b0a298b70cbb33056e43cd3360a096

November 29, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 97b0a298b70cbb33056e43cd3360a096SHA1: a6ccdae016b8330c0ff44a694b44108f37eea595ANALYSIS DATE: 2022-11-28T09:56:34ZTTPS: T1060, T1112, T1107, T1490, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – be62854618491cb4fe30b2299102bb1b

November 29, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: be62854618491cb4fe30b2299102bb1bSHA1: 9eefa9228fef11bd0ee3d064f06ab3a91667edcdANALYSIS DATE: 2022-11-28T10:19:31ZTTPS: T1012, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – evasion – df242c86641477e73211e4d927fbb740

November 29, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: df242c86641477e73211e4d927fbb740SHA1: 40a9cec0c7b615322932b38f07f03c617e4d2468ANALYSIS DATE: 2022-11-28T10:07:42ZTTPS: T1060, T1112, T1107, T1490, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – 0f13d9ed970ebee02da16c74254befd1

November 29, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealerMD5: 0f13d9ed970ebee02da16c74254befd1SHA1: 08182f1a4b6567fda4055e046c909ed62d4e89d0ANALYSIS DATE: 2022-11-28T10:24:54ZTTPS: T1490, T1060, T1112, T1107, T1130, T1005, T1081,...

Malware Analysis – persistence – 2c886d776dac34579ea147dc66abe3e5

November 29, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 2c886d776dac34579ea147dc66abe3e5SHA1: 451eecd94930fb212bd5bc534179af46c4a226b0ANALYSIS DATE: 2022-11-28T10:30:47ZTTPS: T1082, T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – evasion – c49a2a84cd4a3a3c96df6f684eb14e31

November 29, 2022

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, upxMD5: c49a2a84cd4a3a3c96df6f684eb14e31SHA1: f96dd1ad14101b6206519b2ff4068f8ed8164bbbANALYSIS DATE: 2022-11-28T10:35:55ZTTPS: T1082, T1158, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – evasion – d46ecab072a53f343f8c094f57495dbd

November 29, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: d46ecab072a53f343f8c094f57495dbdSHA1: 6d3022fff9fbd3d99b2ac091ed5b5441affae799ANALYSIS DATE: 2022-11-28T10:33:57ZTTPS: T1060, T1112, T1107, T1490, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – 13004eb38e065479848c7da745c3fd20

November 29, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 13004eb38e065479848c7da745c3fd20SHA1: 0c6e72c39a9a90417226a9ffd50249dfdb9e8ad1ANALYSIS DATE: 2022-11-28T10:33:55ZTTPS: T1107, T1490, T1082, T1060, T1112 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – a2ad88326a309c5731a3dcc160e03a36

November 29, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: a2ad88326a309c5731a3dcc160e03a36SHA1: a7def85ccc5052b5769bd6bd31ae72db872beb4cANALYSIS DATE: 2022-11-28T10:34:52ZTTPS: T1060, T1112, T1107, T1490, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – persistence – c3bca74abc8e17ac6c47d1004426664a

November 29, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: c3bca74abc8e17ac6c47d1004426664aSHA1: 6011d91780bc06d654f535aacb86db430b521e2cANALYSIS DATE: 2022-11-28T10:38:31ZTTPS: T1107, T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis

Malware Analysis – persistence – 13d8d4a482cfcb67c2281e84b4f756a3

Malware Analysis – persistence – 5210f168f2d7f59b5b9c3f66e58b205c

Malware Analysis – evasion – f11f9d800e0130517df79e019dbae757

Malware Analysis – evasion – 033d1c48ba9d6bdd28dd6c9395e25fd6

Malware Analysis – ragnarlocker – 9bfb49abbfea8f5f8b89f2f377e973e1

Malware Analysis – amadey – d7bc03281e761a7b3d729fb6ef803b6e

Malware Analysis – djvu – d9afdbf7050e0973224b267dbffa9457

Malware Analysis – djvu – 41001fdd7879ce9ede214e92c7e492be

Malware Analysis – smokeloader – d24cefe18c680c5901545ed9b1efaf81

Malware Analysis – amadey – 93366f27a626ccf9bc5404430f18608c

Malware Analysis – djvu – bab03c2ce9374981269596f8577cc553

Malware Analysis – evasion – 1d44c07d4511e0f8487ae8ae49c635c5

Malware Analysis – evasion – 2d95aa6bad4882a0b4619233a666b404

Malware Analysis – evasion – c9f816fa3da7cda14f0818d8d7d0d626

Malware Analysis – evasion – 97b0a298b70cbb33056e43cd3360a096

Malware Analysis – ransomware – be62854618491cb4fe30b2299102bb1b

Malware Analysis – evasion – df242c86641477e73211e4d927fbb740

Malware Analysis – evasion – 0f13d9ed970ebee02da16c74254befd1

Malware Analysis – persistence – 2c886d776dac34579ea147dc66abe3e5

Malware Analysis – evasion – c49a2a84cd4a3a3c96df6f684eb14e31

Malware Analysis – evasion – d46ecab072a53f343f8c094f57495dbd

Malware Analysis – evasion – 13004eb38e065479848c7da745c3fd20

Malware Analysis – evasion – a2ad88326a309c5731a3dcc160e03a36

Malware Analysis – persistence – c3bca74abc8e17ac6c47d1004426664a

Google Chrome Multiple Vulnerabilities

Cobalt Strike Beacon Detected – 124[.]221[.]116[.]169:80

Cobalt Strike Beacon Detected – 196[.]251[.]87[.]191:4433

Cobalt Strike Beacon Detected – 179[.]43[.]186[.]243:80

Cobalt Strike Beacon Detected – 118[.]25[.]91[.]151:80

You may have missed