Malware Analysis

Malware Analysis – djvu – 2a4ba51b2761b26883558fb2f316ae2e

November 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 2a4ba51b2761b26883558fb2f316ae2eSHA1: a3af31464eafb47e4f2064b6c671224fbbfffb19ANALYSIS DATE: 2022-11-21T16:12:50ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – agilenet – 6c90fa5b5c9de97a444b366ec0d14255

November 21, 2022

Score: 9 MALWARE FAMILY: agilenetTAGS:agilenet, evasion, persistence, ransomware, themida, trojanMD5: 6c90fa5b5c9de97a444b366ec0d14255SHA1: 90cd4499a264ac9e589a0a0c98e0258067aa22a7ANALYSIS DATE: 2022-11-21T16:55:07ZTTPS: T1012, T1082, T1497, T1060, T1112, T1491...

Malware Analysis – xorist – 1222ed64e9e26f248791d66485906363

November 21, 2022

Score: 10 MALWARE FAMILY: xoristTAGS:family:xorist, persistence, ransomware, spyware, stealer, upxMD5: 1222ed64e9e26f248791d66485906363SHA1: c65e557698063038ede9ac2c20fa08deb5a86fa3ANALYSIS DATE: 2022-11-21T17:22:22ZTTPS: T1005, T1081, T1060, T1112 ScoreMeaningExample10Known badA...

Malware Analysis – dcrat – 744e647a0b6a070d50b41927dda80dfc

November 21, 2022

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealer, trojanMD5: 744e647a0b6a070d50b41927dda80dfcSHA1:...

Malware Analysis – xorist – 040d31fee8dc69b4c0585494696d4a50

November 21, 2022

Score: 10 MALWARE FAMILY: xoristTAGS:family:xorist, persistence, ransomware, spyware, stealer, upxMD5: 040d31fee8dc69b4c0585494696d4a50SHA1: 9434a9b4f3e17a66de0ca3f7c1fd4d5e88ddc188ANALYSIS DATE: 2022-11-21T17:22:20ZTTPS: T1060, T1112, T1005, T1081 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – 6739446b547d4fcb92d882afbb29b27b

November 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 6739446b547d4fcb92d882afbb29b27bSHA1: d773a4c4a29bf927124cfa6a43f35af87c619ab7ANALYSIS DATE: 2022-11-21T17:00:37ZTTPS: T1053, T1222, T1005, T1081,...

Malware Analysis – evasion – 1162ee821f5b1dd6c1a44be48d0f9b00

November 21, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 1162ee821f5b1dd6c1a44be48d0f9b00SHA1: b62df88337d258505a8ff11297a78faabcf5861fANALYSIS DATE: 2022-11-21T17:23:29ZTTPS: T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – persistence – 1ce76c8db971b1444b6856f26990e450

November 21, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 1ce76c8db971b1444b6856f26990e450SHA1: 062dd92f8bcf5136e8dc5c6da0ec8fc9d75c57acANALYSIS DATE: 2022-11-21T17:22:26ZTTPS: T1107, T1490, T1082, T1112, T1060 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – djvu – d58d383bf9394e1a7dd26d1f96b644bc

November 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: d58d383bf9394e1a7dd26d1f96b644bcSHA1: 4a472430d5c071d17b3ca30419ece8868dde48caANALYSIS DATE: 2022-11-21T17:31:07ZTTPS:...

Malware Analysis – evasion – 94d087166651c0020a9e6cc2fdacdc0c

November 21, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 94d087166651c0020a9e6cc2fdacdc0cSHA1: 99be22569ba9b1e49d3fd36f65faa6795672fcc0ANALYSIS DATE: 2022-11-21T17:26:44ZTTPS: T1491, T1112, T1031, T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family...

Malware Analysis – djvu – b8a3b7f9c04e2522b454963e5c7d67be

November 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:mario23_10, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: b8a3b7f9c04e2522b454963e5c7d67beSHA1:...

Malware Analysis – djvu – 8e637847078984ede008e53a549aaf59

November 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 8e637847078984ede008e53a549aaf59SHA1: 7dd746cfecce7b728918bd15d7d7eb3e2da70474ANALYSIS DATE: 2022-11-21T04:20:44ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – djvu – c1ba21c6be66db5f18e143f95df50241

November 21, 2022

Malware Analysis – djvu – e31c38e9f1ab45320a0053dd649ec8f9

November 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: e31c38e9f1ab45320a0053dd649ec8f9SHA1: 3047d3bf2654a5fb51a4438bb44dacab296e1d70ANALYSIS DATE: 2022-11-21T05:40:10ZTTPS: T1060, T1112, T1222, T1082, T1012, T1053 ScoreMeaningExample10Known badA...

Malware Analysis – evasion – 14e5a91d1292a99bb872f4b31acd9646

November 21, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, upxMD5: 14e5a91d1292a99bb872f4b31acd9646SHA1: d2b91d461ab3e9bd0c70b49860d455f841673eccANALYSIS DATE: 2022-11-21T05:25:42ZTTPS: T1091, T1082, T1158, T1112, T1060, T1491 ScoreMeaningExample10Known badA...

Malware Analysis – buran – 3ea0ab42bcab5745ba3631f01c4d4cd3

November 21, 2022

Score: 10 MALWARE FAMILY: buranTAGS:family:buran, ransomwareMD5: 3ea0ab42bcab5745ba3631f01c4d4cd3SHA1: 9eb457ce8568fa4a4375cdebbf3b181976a99718ANALYSIS DATE: 2022-11-21T05:47:20ZTTPS: T1018, T1102, T1082, T1012, T1120 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – ransomware – 6ba66ac7b56c6f31417db0c1ca9fe6b1

November 21, 2022

Score: 5 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 6ba66ac7b56c6f31417db0c1ca9fe6b1SHA1: 8ccc065e083d78b3a6b8996a687235234c2cd07dANALYSIS DATE: 2022-11-20T20:54:35ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – dcrat – d609d7888ebd66e4cb502ae75ca86885

November 21, 2022

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:mario23_10, backdoor, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealer,...

Malware Analysis – djvu – c87b0936f8df9e15a4f1b80ec67b1e7c

November 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: c87b0936f8df9e15a4f1b80ec67b1e7cSHA1: b8079093e721cc3bec75aefdea51eb89aca07797ANALYSIS DATE: 2022-11-20T21:52:57ZTTPS: T1222, T1082, T1012, T1005,...

Malware Analysis – dcrat – f789ab6aeccc2819d9c8a1c16ee74ac0

November 21, 2022

Malware Analysis – djvu – e9ad549423799c0b5c2cafa201b58064

November 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: e9ad549423799c0b5c2cafa201b58064SHA1: c52a88d026937faef2066b108a4b4ba3aee1412eANALYSIS DATE: 2022-11-20T21:45:06ZTTPS: T1082, T1005, T1081, T1222,...

Malware Analysis – dcrat – d9ed38e3ba39acbfa4ed8d69e233c67e

November 21, 2022

Malware Analysis – dcrat – e617ddfbd2fd3407103b9ed8371cdc72

November 20, 2022

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, family:djvu, family:redline, family:smokeloader, botnet:mario23_10, backdoor, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealer, trojanMD5: e617ddfbd2fd3407103b9ed8371cdc72SHA1:...

Malware Analysis – djvu – a12cdf363ffc22dda705083793aad3dc

November 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: a12cdf363ffc22dda705083793aad3dcSHA1: 77004309fadecdbfc95e0815eb18b01697d692c2ANALYSIS DATE: 2022-11-20T16:57:45ZTTPS: T1082, T1005, T1081, T1012,...

Malware Analysis

Malware Analysis – djvu – 2a4ba51b2761b26883558fb2f316ae2e

Malware Analysis – agilenet – 6c90fa5b5c9de97a444b366ec0d14255

Malware Analysis – xorist – 1222ed64e9e26f248791d66485906363

Malware Analysis – dcrat – 744e647a0b6a070d50b41927dda80dfc

Malware Analysis – xorist – 040d31fee8dc69b4c0585494696d4a50

Malware Analysis – djvu – 6739446b547d4fcb92d882afbb29b27b

Malware Analysis – evasion – 1162ee821f5b1dd6c1a44be48d0f9b00

Malware Analysis – persistence – 1ce76c8db971b1444b6856f26990e450

Malware Analysis – djvu – d58d383bf9394e1a7dd26d1f96b644bc

Malware Analysis – evasion – 94d087166651c0020a9e6cc2fdacdc0c

Malware Analysis – djvu – b8a3b7f9c04e2522b454963e5c7d67be

Malware Analysis – djvu – 8e637847078984ede008e53a549aaf59

Malware Analysis – djvu – c1ba21c6be66db5f18e143f95df50241

Malware Analysis – djvu – e31c38e9f1ab45320a0053dd649ec8f9

Malware Analysis – evasion – 14e5a91d1292a99bb872f4b31acd9646

Malware Analysis – buran – 3ea0ab42bcab5745ba3631f01c4d4cd3

Malware Analysis – ransomware – 6ba66ac7b56c6f31417db0c1ca9fe6b1

Malware Analysis – dcrat – d609d7888ebd66e4cb502ae75ca86885

Malware Analysis – djvu – c87b0936f8df9e15a4f1b80ec67b1e7c

Malware Analysis – dcrat – f789ab6aeccc2819d9c8a1c16ee74ac0

Malware Analysis – djvu – e9ad549423799c0b5c2cafa201b58064

Malware Analysis – dcrat – d9ed38e3ba39acbfa4ed8d69e233c67e

Malware Analysis – dcrat – e617ddfbd2fd3407103b9ed8371cdc72

Malware Analysis – djvu – a12cdf363ffc22dda705083793aad3dc

[MEDUSA] – Ransomware Victim: Atrium Living Centers

[BEAST] – Ransomware Victim: Ringmor

[NIGHTSPIRE] – Ransomware Victim: Servicios del Valle del Fuerte, Mexico

[NIGHTSPIRE] – Ransomware Victim: Fidelity Pension Managers, Nigeria

[NIGHTSPIRE] – Ransomware Victim: Instituto Nacional de Oftalmologia, Peru

You may have missed