Malware Analysis

Malware Analysis – djvu – 375ec00e2e4319d0f51fdce08ba10c8a

November 25, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 375ec00e2e4319d0f51fdce08ba10c8aSHA1: 04b6c4855ea47a5eb1cd7862ab338ce22129c006ANALYSIS DATE: 2022-11-25T10:53:13ZTTPS: T1060, T1112, T1222, T1082,...

Malware Analysis – djvu – 58b5209aa0001d580ab13ecf79d09750

November 25, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 58b5209aa0001d580ab13ecf79d09750SHA1: 2d5f3452cf6358aa8e5810774e668fc918875b13ANALYSIS DATE: 2022-11-25T10:14:41ZTTPS: T1005, T1081, T1012, T1060,...

Malware Analysis – amadey – ea94bcabd73267ef225bb9e52aec3659

November 25, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, stealer, trojanMD5: ea94bcabd73267ef225bb9e52aec3659SHA1: f7fe137bc0431e04ec0bd4a83f9f9f5f867286a0ANALYSIS DATE: 2022-11-25T10:31:35ZTTPS:...

Malware Analysis – djvu – 4e8b949ac446e0ac8f2caa7878a3134e

November 25, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 4e8b949ac446e0ac8f2caa7878a3134eSHA1: 3d07ab9ad186bd2f95803e8565334f83232b4c29ANALYSIS DATE: 2022-11-25T11:37:45ZTTPS: T1060, T1112, T1222, T1053,...

Malware Analysis – ransomware – ff88397d0fdd02e072a80f38358c4253

November 25, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: ff88397d0fdd02e072a80f38358c4253SHA1: 83333da8fc0f1dfb716dfa82ee7470702356ad76ANALYSIS DATE: 2022-11-25T10:57:55ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 87b7c8de029618c4a1e08792a1f36f03

November 25, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 87b7c8de029618c4a1e08792a1f36f03SHA1: cb852f97675ebb210ed82b3153f897990035a093ANALYSIS DATE: 2022-11-25T11:22:28ZTTPS: T1082, T1053, T1005, T1081,...

Malware Analysis – amadey – cb08a961a70f8b2417f8975f4ceb81aa

November 25, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, backdoor, ransomware, trojanMD5: cb08a961a70f8b2417f8975f4ceb81aaSHA1: 52356c0c6dcb273eeda64aba7c484dbf52e7464eANALYSIS DATE: 2022-11-25T11:05:07ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – gozi – 4165eb68c959487dad6ef02646aa29c3

November 25, 2022

Score: 10 MALWARE FAMILY: goziTAGS:family:gozi, botnet:2782923, banker, isfb, persistence, ransomware, trojanMD5: 4165eb68c959487dad6ef02646aa29c3SHA1: fb3afa14170009086adb3a8e48ccdc189908a324ANALYSIS DATE: 2022-11-24T22:28:35ZTTPS: T1060, T1112, T1491, T1158, T1082...

Malware Analysis – persistence – acb05e95d713b1772fb96a5e607d539f

November 25, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: acb05e95d713b1772fb96a5e607d539fSHA1: 0017b03a38d00cf43fa36e40dd9f65da499c09f7ANALYSIS DATE: 2022-11-25T01:03:09ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – adware – ddc768346d02d4480cd5b2abb87c2ed1

November 25, 2022

Score: 8 MALWARE FAMILY: adwareTAGS:adware, discovery, exploit, persistence, stealer, upxMD5: ddc768346d02d4480cd5b2abb87c2ed1SHA1: 86401ed9da9be11850e2cc2f521252a34c124fa1ANALYSIS DATE: 2022-11-24T22:20:12ZTTPS: T1112, T1176, T1060, T1222 ScoreMeaningExample10Known badA...

Malware Analysis – amadey – bdcb6fd328b0c7e776bf5ed4dd3c0b6e

November 25, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:1859, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: bdcb6fd328b0c7e776bf5ed4dd3c0b6eSHA1: 89268d5cde88f06a9868fbbe19dd0521a748e9f9ANALYSIS...

Malware Analysis – djvu – 9655c0e3c128e217029d30ac3b302d72

November 25, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 9655c0e3c128e217029d30ac3b302d72SHA1: 599cd1a303dd4b81c2f8b11066eb6b88e9d96490ANALYSIS DATE: 2022-11-25T05:29:46ZTTPS: T1060, T1112, T1222, T1082, T1012, T1053 ScoreMeaningExample10Known badA...

Malware Analysis – discovery – 74161da72b92f3dc29efa72b75dcf86c

November 25, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, evasion, exploit, persistence, spyware, stealer, upxMD5: 74161da72b92f3dc29efa72b75dcf86cSHA1: 8490c1331b1c40ce986306d5dda51670f93fd78cANALYSIS DATE: 2022-11-25T03:28:59ZTTPS: T1031, T1562, T1489, T1082, T1112,...

Malware Analysis – djvu – a221e8cd10096d0b1fcfd9b5fc14fc21

November 25, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: a221e8cd10096d0b1fcfd9b5fc14fc21SHA1: 12492f9257ebe410a009aa2ad5c365cd601a01acANALYSIS DATE: 2022-11-25T05:42:05ZTTPS: T1060, T1112, T1082, T1053,...

Malware Analysis – djvu – d12cb8326be8a6acbd51b68e369b0d8a

November 25, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: d12cb8326be8a6acbd51b68e369b0d8aSHA1: 16a440ad6438fc916b3691d8080b6ac553f67c50ANALYSIS DATE: 2022-11-24T21:00:03ZTTPS: T1222, T1005, T1081, T1012,...

Malware Analysis – ransomware – 23a6a98a446c0981e4021867b235bd25

November 25, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 23a6a98a446c0981e4021867b235bd25SHA1: c4f861191578ca4c4f8f0f53ea6a79c25be6b67aANALYSIS DATE: 2022-11-24T17:40:43ZTTPS: T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – amadey – 3b73a7836ad74f3935bbf484f0e52ad6

November 25, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:1859, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 3b73a7836ad74f3935bbf484f0e52ad6SHA1: 50ca09f7540ffb4c965b377d3d819d7824a8c58bANALYSIS...

Malware Analysis – discovery – f755b434e5648f9f2c42102a04da6d3b

November 25, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: f755b434e5648f9f2c42102a04da6d3bSHA1: e4fd50ded0f6cbaa4f1f035c95ec6daea13b93b8ANALYSIS DATE: 2022-11-24T21:44:59ZTTPS: T1060, T1012, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – a6a0f7c173094f8dafef996157751ecf

November 25, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: a6a0f7c173094f8dafef996157751ecfSHA1: c0dcae7c4c80be25661d22400466b4ea074fc580ANALYSIS DATE: 2022-11-24T21:54:07ZTTPS: T1060, T1012, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 601b73d55098dd0f215efcdb52f990a3

November 25, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 601b73d55098dd0f215efcdb52f990a3SHA1: 56f28665f23bf450ca8bd4baa41cd5cdb8b6f2fdANALYSIS DATE: 2022-11-24T21:52:23ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – collection – 3f5d4d5f7d34b4285bac9a47170eccf0

November 24, 2022

Score: 9 MALWARE FAMILY: collectionTAGS:collection, evasion, persistence, ransomware, trojanMD5: 3f5d4d5f7d34b4285bac9a47170eccf0SHA1: 3e5784cb3f8e2e946947b2c4a8da066f92390643ANALYSIS DATE: 2022-11-24T10:47:40ZTTPS: T1114, T1082, T1060, T1112, T1107, T1490 ScoreMeaningExample10Known...

Malware Analysis – infostealer – 7acdd3d24e4d7bf0978f60c12c81dc82

November 24, 2022

Score: 7 MALWARE FAMILY: infostealerTAGS:infostealer, ransomwareMD5: 7acdd3d24e4d7bf0978f60c12c81dc82SHA1: 69e748bfbca4983be2190de6d591ea0b1cca6629ANALYSIS DATE: 2022-11-24T10:57:51ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – collection – 4c9e3d4c4bd2e3a960489500f658acca

November 24, 2022

Score: 9 MALWARE FAMILY: collectionTAGS:collection, evasion, persistence, ransomware, trojanMD5: 4c9e3d4c4bd2e3a960489500f658accaSHA1: 5c3385ef5dbf3cf07c834f64a2930778748e5230ANALYSIS DATE: 2022-11-24T10:53:12ZTTPS: T1114, T1082, T1060, T1112, T1107, T1490 ScoreMeaningExample10Known...

Malware Analysis – evasion – 3346650620e7a2161f761bb9d1958220

November 24, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 3346650620e7a2161f761bb9d1958220SHA1: 1c7e265e0a9c7cacc4f073f506279907d02ed6fbANALYSIS DATE: 2022-11-24T11:51:00ZTTPS: T1060, T1112, T1107, T1490, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis

Malware Analysis – djvu – 375ec00e2e4319d0f51fdce08ba10c8a

Malware Analysis – djvu – 58b5209aa0001d580ab13ecf79d09750

Malware Analysis – amadey – ea94bcabd73267ef225bb9e52aec3659

Malware Analysis – djvu – 4e8b949ac446e0ac8f2caa7878a3134e

Malware Analysis – ransomware – ff88397d0fdd02e072a80f38358c4253

Malware Analysis – djvu – 87b7c8de029618c4a1e08792a1f36f03

Malware Analysis – amadey – cb08a961a70f8b2417f8975f4ceb81aa

Malware Analysis – gozi – 4165eb68c959487dad6ef02646aa29c3

Malware Analysis – persistence – acb05e95d713b1772fb96a5e607d539f

Malware Analysis – adware – ddc768346d02d4480cd5b2abb87c2ed1

Malware Analysis – amadey – bdcb6fd328b0c7e776bf5ed4dd3c0b6e

Malware Analysis – djvu – 9655c0e3c128e217029d30ac3b302d72

Malware Analysis – discovery – 74161da72b92f3dc29efa72b75dcf86c

Malware Analysis – djvu – a221e8cd10096d0b1fcfd9b5fc14fc21

Malware Analysis – djvu – d12cb8326be8a6acbd51b68e369b0d8a

Malware Analysis – ransomware – 23a6a98a446c0981e4021867b235bd25

Malware Analysis – amadey – 3b73a7836ad74f3935bbf484f0e52ad6

Malware Analysis – discovery – f755b434e5648f9f2c42102a04da6d3b

Malware Analysis – discovery – a6a0f7c173094f8dafef996157751ecf

Malware Analysis – ransomware – 601b73d55098dd0f215efcdb52f990a3

Malware Analysis – collection – 3f5d4d5f7d34b4285bac9a47170eccf0

Malware Analysis – infostealer – 7acdd3d24e4d7bf0978f60c12c81dc82

Malware Analysis – collection – 4c9e3d4c4bd2e3a960489500f658acca

Malware Analysis – evasion – 3346650620e7a2161f761bb9d1958220

[SINOBI] – Ransomware Victim: Seward County, KS

[SINOBI] – Ransomware Victim: CapitalPlus Exchange

Cobalt Strike Beacon Detected – 43[.]163[.]112[.]217:443

Cobalt Strike Beacon Detected – 45[.]204[.]216[.]24:443

Cobalt Strike Beacon Detected – 8[.]155[.]0[.]238:443

You may have missed