Malware Analysis

Malware Analysis – quasar – 400e6840d7481c535d4dd1cf118f128f

November 24, 2022

Score: 10 MALWARE FAMILY: quasarTAGS:family:quasar, evasion, persistence, ransomware, spyware, trojanMD5: 400e6840d7481c535d4dd1cf118f128fSHA1: ce7b34e004cd85769405d55f2fdd5562f91b9811ANALYSIS DATE: 2022-11-24T17:34:40ZTTPS: T1112, T1031, T1107, T1490, T1089, T1082,...

Malware Analysis – smokeloader – 43e6d1d9679ac16402ff92f9602bdb00

November 24, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 43e6d1d9679ac16402ff92f9602bdb00SHA1: e7787dfa155a707bdde86956c333718ae324e1c4ANALYSIS DATE: 2022-11-24T17:05:16ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – royal – 846274ff97d7e0bffcc993cab1851270

November 24, 2022

Score: 10 MALWARE FAMILY: royalTAGS:family:royal, ransomwareMD5: 846274ff97d7e0bffcc993cab1851270SHA1: f5eac094d9eb8f1f691d66d1cfc1a9ada6548defANALYSIS DATE: 2022-11-24T17:20:23ZTTPS: T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – evasion – 253491ad824e156971c957cd15254844

November 24, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 253491ad824e156971c957cd15254844SHA1: d47161e939cc823a331fff50859b915c3f876342ANALYSIS DATE: 2022-11-24T06:14:54ZTTPS: T1107, T1490, T1082, T1060, T1112 ScoreMeaningExample10Known badA malware...

Malware Analysis – collection – d4e6d50ab01a9b3762049dca22a02abf

November 24, 2022

Score: 9 MALWARE FAMILY: collectionTAGS:collection, evasion, persistence, ransomware, trojanMD5: d4e6d50ab01a9b3762049dca22a02abfSHA1: ca3f10184c809c35fa4b32e144e0cbd11f20e436ANALYSIS DATE: 2022-11-24T06:04:04ZTTPS: T1114, T1082, T1060, T1112, T1107, T1490 ScoreMeaningExample10Known...

Malware Analysis – persistence – 8e1bdc1c484bc03880c67424d80e351d

November 24, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 8e1bdc1c484bc03880c67424d80e351dSHA1: 122a845fa053dcbc16a7148313f27525619a1818ANALYSIS DATE: 2022-11-24T06:14:03ZTTPS: T1082, T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – evasion – be98338e8170418b624915328377710e

November 24, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: be98338e8170418b624915328377710eSHA1: bd772bbbec24866fbb45dc59f7ef961f926cf3fbANALYSIS DATE: 2022-11-24T06:15:03ZTTPS: T1060, T1112, T1107, T1490, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – collection – bedcf9aeacffdf4e975cb6bb253ed2f9

November 24, 2022

Score: 9 MALWARE FAMILY: collectionTAGS:collection, evasion, persistence, ransomware, trojanMD5: bedcf9aeacffdf4e975cb6bb253ed2f9SHA1: b976f8d7b2a0a4d7bef4e3f4b125938f6d2de60cANALYSIS DATE: 2022-11-24T06:56:13ZTTPS: T1082, T1060, T1112, T1107, T1490, T1114 ScoreMeaningExample10Known...

Malware Analysis – evasion – e93ea59e4358bddffe1536ffa914ba54

November 24, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: e93ea59e4358bddffe1536ffa914ba54SHA1: f6373f75940a88c005d3bc45676c7d803109dd20ANALYSIS DATE: 2022-11-24T06:46:13ZTTPS: T1082, T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – infostealer – e0bfb1bfbcee3542a77e4e9a0a47d1c4

November 24, 2022

Score: 7 MALWARE FAMILY: infostealerTAGS:infostealer, ransomwareMD5: e0bfb1bfbcee3542a77e4e9a0a47d1c4SHA1: 22302b16c65f318176c7095aaf166bada1716358ANALYSIS DATE: 2022-11-24T06:21:30ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – collection – b273ceaf433d040208ffb0d80001dfd9

November 24, 2022

Score: 9 MALWARE FAMILY: collectionTAGS:collection, evasion, persistence, ransomware, trojanMD5: b273ceaf433d040208ffb0d80001dfd9SHA1: 4247e667c9cf949b55040eeff63d678310c9e375ANALYSIS DATE: 2022-11-24T07:42:42ZTTPS: T1107, T1490, T1114, T1082, T1060, T1112 ScoreMeaningExample10Known...

Malware Analysis – evasion – dcd6e52f2caeafa113f1c60001869b77

November 24, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: dcd6e52f2caeafa113f1c60001869b77SHA1: a79961c2b141b7b428a77f920c3840d7414e76ceANALYSIS DATE: 2022-11-24T07:27:43ZTTPS: T1082, T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – 1325ea7384a4653a3a337381cfe180fa

November 24, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 1325ea7384a4653a3a337381cfe180faSHA1: eb2eae4cc2a5c7356b4e00c0f3d44788c4ae27e0ANALYSIS DATE: 2022-11-24T07:25:59ZTTPS: T1082, T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – bc1cf7a80a21356b81bbf41d153a5d0f

November 24, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: bc1cf7a80a21356b81bbf41d153a5d0fSHA1: bf24d533d95fc1f2397bf3aae638b10de5ffd513ANALYSIS DATE: 2022-11-24T07:25:34ZTTPS: T1107, T1490, T1082, T1060, T1112 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – e2e275413ad1246b9ac9de9d175f5103

November 24, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: e2e275413ad1246b9ac9de9d175f5103SHA1: dac9e13cf3289c7870da32a94e76e7bef34b945dANALYSIS DATE: 2022-11-24T08:08:31ZTTPS: T1018, T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – e46421290522060e95dc6c6ac9bab9c8

November 24, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: e46421290522060e95dc6c6ac9bab9c8SHA1: 08aaa1203dca088e366ea31253ec264ca710f015ANALYSIS DATE: 2022-11-24T07:48:05ZTTPS: T1060, T1112, T1107, T1490, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – b0710804b8d1057855fdefcfa0112e66

November 24, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: b0710804b8d1057855fdefcfa0112e66SHA1: 78db1b4541e821fb43d147e7809607733180b3ceANALYSIS DATE: 2022-11-24T07:48:10ZTTPS: T1060, T1112, T1107, T1490, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – persistence – b725067c7926e8a3268d2fabfcad7b4e

November 24, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: b725067c7926e8a3268d2fabfcad7b4eSHA1: 2518fb688bec920f49e6b20144dc385866a2a70cANALYSIS DATE: 2022-11-24T07:48:23ZTTPS: T1107, T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – a5b4c672812208b47b9a9370902d4e1c

November 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: a5b4c672812208b47b9a9370902d4e1cSHA1: 0efd3da2bcad33fc6c91fc8a1c2a499c889eb2f6ANALYSIS DATE: 2022-11-24T10:33:48ZTTPS: T1060, T1112, T1222, T1082, T1012 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – fecea0c22b3fc1a848902bcae0d16027

November 24, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: fecea0c22b3fc1a848902bcae0d16027SHA1: a5fd3809a7640e4ec3bf7617fff3f70eaff1562bANALYSIS DATE: 2022-11-24T09:02:55ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – djvu – dfb556e14a10b5145a33f1a3efabdf88

November 24, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: dfb556e14a10b5145a33f1a3efabdf88SHA1: adb76813eda263afa706327cf52ef099f024fd36ANALYSIS DATE: 2022-11-24T10:25:26ZTTPS: T1005, T1081, T1130, T1112,...

Malware Analysis – banker – 425ca585e1689771f69c442036192d78

November 24, 2022

Score: 8 MALWARE FAMILY: bankerTAGS:banker, ransomwareMD5: 425ca585e1689771f69c442036192d78SHA1: 3d7e48669307cc962f18de5639ae0697ed950d1eANALYSIS DATE: 2022-11-24T09:53:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – evasion – a4cea260c512dde09d9166744e42aba0

November 24, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: a4cea260c512dde09d9166744e42aba0SHA1: 4f0f80519e424c56db49e6287d92af29812f5791ANALYSIS DATE: 2022-11-24T00:09:21ZTTPS: T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – d63c30ec13eab98c1795858f2f29daa7

November 24, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: d63c30ec13eab98c1795858f2f29daa7SHA1: 91af4149274d49d4560ea5ba7de87b07bde283fdANALYSIS DATE: 2022-11-24T02:16:30ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis

Malware Analysis – quasar – 400e6840d7481c535d4dd1cf118f128f

Malware Analysis – smokeloader – 43e6d1d9679ac16402ff92f9602bdb00

Malware Analysis – royal – 846274ff97d7e0bffcc993cab1851270

Malware Analysis – evasion – 253491ad824e156971c957cd15254844

Malware Analysis – collection – d4e6d50ab01a9b3762049dca22a02abf

Malware Analysis – persistence – 8e1bdc1c484bc03880c67424d80e351d

Malware Analysis – evasion – be98338e8170418b624915328377710e

Malware Analysis – collection – bedcf9aeacffdf4e975cb6bb253ed2f9

Malware Analysis – evasion – e93ea59e4358bddffe1536ffa914ba54

Malware Analysis – infostealer – e0bfb1bfbcee3542a77e4e9a0a47d1c4

Malware Analysis – collection – b273ceaf433d040208ffb0d80001dfd9

Malware Analysis – evasion – dcd6e52f2caeafa113f1c60001869b77

Malware Analysis – evasion – 1325ea7384a4653a3a337381cfe180fa

Malware Analysis – evasion – bc1cf7a80a21356b81bbf41d153a5d0f

Malware Analysis – ransomware – e2e275413ad1246b9ac9de9d175f5103

Malware Analysis – evasion – e46421290522060e95dc6c6ac9bab9c8

Malware Analysis – evasion – b0710804b8d1057855fdefcfa0112e66

Malware Analysis – persistence – b725067c7926e8a3268d2fabfcad7b4e

Malware Analysis – djvu – a5b4c672812208b47b9a9370902d4e1c

Malware Analysis – ransomware – fecea0c22b3fc1a848902bcae0d16027

Malware Analysis – djvu – dfb556e14a10b5145a33f1a3efabdf88

Malware Analysis – banker – 425ca585e1689771f69c442036192d78

Malware Analysis – evasion – a4cea260c512dde09d9166744e42aba0

Malware Analysis – ransomware – d63c30ec13eab98c1795858f2f29daa7

[SINOBI] – Ransomware Victim: Seward County, KS

[SINOBI] – Ransomware Victim: CapitalPlus Exchange

Cobalt Strike Beacon Detected – 43[.]163[.]112[.]217:443

Cobalt Strike Beacon Detected – 45[.]204[.]216[.]24:443

Cobalt Strike Beacon Detected – 8[.]155[.]0[.]238:443

You may have missed