Malware Analysis

Malware Analysis – ransomware – 681ba901bb6deb49ecdc83c9e5dcc548

November 29, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 681ba901bb6deb49ecdc83c9e5dcc548SHA1: 5553534db3d538adab933a74e1399357616cfe4fANALYSIS DATE: 2022-11-29T11:01:18ZTTPS: T1012, T1120, T1082, T1107, T1490, T1112 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – ransomware – a2549904086d3b6ff7373d51125e37ca

November 29, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: a2549904086d3b6ff7373d51125e37caSHA1: af1831807435e933a74d53331e62c14a338d725aANALYSIS DATE: 2022-11-29T11:01:19ZTTPS: T1107, T1490, T1112, T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – djvu – 61b98d561011263318f5f9a3ba4f101a

November 29, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 61b98d561011263318f5f9a3ba4f101aSHA1: f4735c23a90acd9f4fa71c0c1944ffb9f1cbf02cANALYSIS DATE: 2022-11-29T11:52:12ZTTPS: T1060, T1112, T1082, T1012,...

Malware Analysis – ransomware – 7a4e0f1e5e5b9b3f542330817511029e

November 29, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 7a4e0f1e5e5b9b3f542330817511029eSHA1: 7103d2b565a90cfab42e37a7d799dd6ba8538cbcANALYSIS DATE: 2022-11-28T00:51:53ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – 4b03ea25366cdf45947f20891358c39b

November 29, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 4b03ea25366cdf45947f20891358c39bSHA1: eeeffee4ffb10f89d21fcb166d4005c0b6c72235ANALYSIS DATE: 2022-11-28T01:13:36ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – 693f515f3c0be58d6f394399cef4de84

November 29, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 693f515f3c0be58d6f394399cef4de84SHA1: bd2dda542903f84be1cec55cc82a798e45f6daa2ANALYSIS DATE: 2022-11-28T00:53:18ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – 1ec24b91a2b7667075fc07d26c0aa54c

November 29, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 1ec24b91a2b7667075fc07d26c0aa54cSHA1: 28b4898504451627e791f32f6939409b72a0db44ANALYSIS DATE: 2022-11-28T01:02:50ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – 16c08570151a22e173bc9d0735e2edc5

November 29, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 16c08570151a22e173bc9d0735e2edc5SHA1: 3a5c559edcf3975c37c52a003ec4b3240cb9b2b7ANALYSIS DATE: 2022-11-28T00:52:13ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – evasion – e7e2fbcdeafcea12b0d026068e9010bd

November 29, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: e7e2fbcdeafcea12b0d026068e9010bdSHA1: 7cbf6bebdfe564fa1c245e0f4332eb19170b3300ANALYSIS DATE: 2022-11-28T01:19:19ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – evasion – df8ab8b5bdc260b5104c6418740c5b68

November 29, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, infostealer, ransomwareMD5: df8ab8b5bdc260b5104c6418740c5b68SHA1: fc918344fb05fa7a31dfc54675a642ad0b887549ANALYSIS DATE: 2022-11-28T01:22:56ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – ransomware – 9840de6d18ed1a0f03813065b7df4fa0

November 29, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 9840de6d18ed1a0f03813065b7df4fa0SHA1: f8cc6ee35aa38e2502fc9a60517d0c67e04439dcANALYSIS DATE: 2022-11-28T01:21:23ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – 6e75b34e9a16ca1681a018b36dd50f23

November 29, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 6e75b34e9a16ca1681a018b36dd50f23SHA1: 64e4225321f3678405843bd261c2cab3ed0783b1ANALYSIS DATE: 2022-11-28T01:23:33ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – ae8927b545609785522dff98b6848672

November 29, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: ae8927b545609785522dff98b6848672SHA1: e417b38e160998189508f3c32d64109e546271dbANALYSIS DATE: 2022-11-28T01:25:25ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – ec3a5bc6b39bd86b0ed2f936043a545d

November 29, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: ec3a5bc6b39bd86b0ed2f936043a545dSHA1: 895d5f4212bfff42682a35a877fe8e5b04a6bcddANALYSIS DATE: 2022-11-28T01:24:51ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – 676c15c0fac63319591809985510d75f

November 29, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 676c15c0fac63319591809985510d75fSHA1: ad5393fb1f4854f145171622aaf1b6010c5c60afANALYSIS DATE: 2022-11-28T01:26:16ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – evasion – a5fbccd29f43459c644436e1affb6a89

November 29, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: a5fbccd29f43459c644436e1affb6a89SHA1: 7e77ffa0ab7f4e81409e9929b2c817af2db1b480ANALYSIS DATE: 2022-11-28T01:26:56ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – evasion – dfb4b1532bee1ecb3f0862f733711210

November 29, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: dfb4b1532bee1ecb3f0862f733711210SHA1: 8580a087477d46045af318e609abcd5dd0f87053ANALYSIS DATE: 2022-11-28T01:38:42ZTTPS: T1060, T1112, T1107, T1490, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 8358de51bf92e74d2e83021021b90d30

November 29, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 8358de51bf92e74d2e83021021b90d30SHA1: 1ff12b20b1404df4b913b18add374fdcbe269adcANALYSIS DATE: 2022-11-28T01:27:58ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – persistence – 04a49504445bb4530635e4a6708f7ac5

November 29, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 04a49504445bb4530635e4a6708f7ac5SHA1: facee6d8339630117bf9e87a60d8cc659208a34dANALYSIS DATE: 2022-11-28T01:34:22ZTTPS: T1060, T1112, T1107, T1490, T1082 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – ransomware – 459e015c4a6a73d1aac1dd9a636041b5

November 29, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 459e015c4a6a73d1aac1dd9a636041b5SHA1: c3fd47c99d0565c703b499b5dd0ed754f360753dANALYSIS DATE: 2022-11-28T01:30:28ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – cryptowall – b4347012829efc382f852db233582fcd

November 29, 2022

Score: 10 MALWARE FAMILY: cryptowallTAGS:family:cryptowall, ransomwareMD5: b4347012829efc382f852db233582fcdSHA1: c515bfc0e2f5c92945cd4cae8f2b6434c720e344ANALYSIS DATE: 2022-11-28T01:43:12ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – persistence – 6fae4aed182cb0df0ed705acadee2fde

November 29, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 6fae4aed182cb0df0ed705acadee2fdeSHA1: 4c212e5fc88686aa55a1e81f502950bdf89debfaANALYSIS DATE: 2022-11-28T01:41:13ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – gozi – 1021c89494503fdec076272280957248

November 29, 2022

Score: 10 MALWARE FAMILY: goziTAGS:family:gozi, botnet:2782923, banker, isfb, persistence, ransomware, trojanMD5: 1021c89494503fdec076272280957248SHA1: 3aad175ba9003458dd33846c024a09ae989e0686ANALYSIS DATE: 2022-11-28T01:48:43ZTTPS: T1491, T1112, T1060, T1158, T1082...

Malware Analysis – ransomware – 462c7727bba171de11c829c32ba9ad08

November 29, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 462c7727bba171de11c829c32ba9ad08SHA1: d4a8a21d94cd1fe4932e290c736cf6b50e93d875ANALYSIS DATE: 2022-11-28T01:44:24ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis

Malware Analysis – ransomware – 681ba901bb6deb49ecdc83c9e5dcc548

Malware Analysis – ransomware – a2549904086d3b6ff7373d51125e37ca

Malware Analysis – djvu – 61b98d561011263318f5f9a3ba4f101a

Malware Analysis – ransomware – 7a4e0f1e5e5b9b3f542330817511029e

Malware Analysis – ransomware – 4b03ea25366cdf45947f20891358c39b

Malware Analysis – ransomware – 693f515f3c0be58d6f394399cef4de84

Malware Analysis – ransomware – 1ec24b91a2b7667075fc07d26c0aa54c

Malware Analysis – ransomware – 16c08570151a22e173bc9d0735e2edc5

Malware Analysis – evasion – e7e2fbcdeafcea12b0d026068e9010bd

Malware Analysis – evasion – df8ab8b5bdc260b5104c6418740c5b68

Malware Analysis – ransomware – 9840de6d18ed1a0f03813065b7df4fa0

Malware Analysis – ransomware – 6e75b34e9a16ca1681a018b36dd50f23

Malware Analysis – ransomware – ae8927b545609785522dff98b6848672

Malware Analysis – ransomware – ec3a5bc6b39bd86b0ed2f936043a545d

Malware Analysis – ransomware – 676c15c0fac63319591809985510d75f

Malware Analysis – evasion – a5fbccd29f43459c644436e1affb6a89

Malware Analysis – evasion – dfb4b1532bee1ecb3f0862f733711210

Malware Analysis – ransomware – 8358de51bf92e74d2e83021021b90d30

Malware Analysis – persistence – 04a49504445bb4530635e4a6708f7ac5

Malware Analysis – ransomware – 459e015c4a6a73d1aac1dd9a636041b5

Malware Analysis – cryptowall – b4347012829efc382f852db233582fcd

Malware Analysis – persistence – 6fae4aed182cb0df0ed705acadee2fde

Malware Analysis – gozi – 1021c89494503fdec076272280957248

Malware Analysis – ransomware – 462c7727bba171de11c829c32ba9ad08

Cobalt Strike Beacon Detected – 124[.]221[.]116[.]169:80

Cobalt Strike Beacon Detected – 196[.]251[.]87[.]191:4433

Cobalt Strike Beacon Detected – 179[.]43[.]186[.]243:80

Cobalt Strike Beacon Detected – 118[.]25[.]91[.]151:80

Cobalt Strike Beacon Detected – 124[.]223[.]114[.]203:4433

You may have missed