Malware Analysis

Malware Analysis – lockbit – 02ad715191b64a46120e38ca6cb1ef6a

November 17, 2022

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, discovery, evasion, persistence, ransomwareMD5: 02ad715191b64a46120e38ca6cb1ef6aSHA1: cfd8d84b1013e5cf88878ca36021272ee0231504ANALYSIS DATE: 2022-11-17T11:39:09ZTTPS: T1490, T1046, T1107, T1491, T1112, T1060, T1082,...

Malware Analysis – amadey – c90d70bb6c573d5eb9da902d67447fac

November 17, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:1827, botnet:517, botnet:mario23_10, backdoor, collection, discovery, evasion, infostealer, persistence, ransomware, spyware,...

Malware Analysis – amadey – 601b88f56a0d282cba6e6b0c651475a5

November 17, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:1827, botnet:517, botnet:mario23_10, botnet:srt, backdoor, collection, discovery, evasion, infostealer, persistence, ransomware,...

Malware Analysis – amadey – 735b8638c111937fe3cecf0b6fe95ec1

November 17, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:dcrat, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:1827, botnet:517, botnet:mario23_10, backdoor, collection, discovery, evasion, infostealer, persistence, ransomware,...

Malware Analysis – ransomware – b7285d0e7e64677f7bc70dcd71b4a18a

November 17, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: b7285d0e7e64677f7bc70dcd71b4a18aSHA1: cb3264a61e2af8722e7bfe58268052c7d500c2c3ANALYSIS DATE: 2022-11-17T05:08:19ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – amadey – 76fb892989a0e9898ae9f1c8f8273560

November 17, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:mario23_10, backdoor, collection, discovery, evasion, infostealer, persistence, ransomware, spyware, stealer,...

Malware Analysis – djvu – 4b9a47a102eedbf7ae264602f2334ef4

November 17, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 4b9a47a102eedbf7ae264602f2334ef4SHA1: 178b943c7497d091d837729c4c86e63a0f6d6766ANALYSIS DATE: 2022-11-17T05:40:47ZTTPS: T1060, T1112, T1005, T1081,...

Malware Analysis – djvu – 8af7de57dc5ba4d68ae95d169f673282

November 17, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 8af7de57dc5ba4d68ae95d169f673282SHA1: b55c3a90e5d9ad29aefad62910fdbc62c8df902fANALYSIS DATE: 2022-11-17T04:49:40ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – amadey – e56bdbd3bbf16c712fd3964d47a2284d

November 17, 2022

Malware Analysis – dcrat – 079fa9293dc34904e2dc1dfe4450e17a

November 17, 2022

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:1827, botnet:517, botnet:mario23_10, backdoor, collection, discovery, evasion, infostealer, persistence, ransomware, rat,...

Malware Analysis – amadey – 000e96a33f00b6e8f473f96680e97105

November 17, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:dcrat, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:1827, botnet:517, botnet:mario23_10, botnet:srt, backdoor, collection, discovery, evasion, infostealer, persistence,...

Malware Analysis – smokeloader – 71f0f10d55a7c76842144f85aa453b1e

November 17, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 71f0f10d55a7c76842144f85aa453b1eSHA1: 0465ab92492754c17b2fe0ac8a9c77657d4010b0ANALYSIS DATE: 2022-11-16T22:51:58ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 4af869180d81d4cfb263e86d7161a18a

November 16, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 4af869180d81d4cfb263e86d7161a18aSHA1: 01a0428bb825147cde47c922f04b6e074f908ca0ANALYSIS DATE: 2022-11-16T15:16:16ZTTPS: T1060, T1112, T1082, T1005,...

Malware Analysis – djvu – 26bc838e4d36c0d4f7c8e45458670276

November 16, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 26bc838e4d36c0d4f7c8e45458670276SHA1: ea289be9fbd1f6252caa58f7e41dc0ed4f4a3ea3ANALYSIS DATE: 2022-11-16T16:25:43ZTTPS: T1005, T1081, T1222, T1082,...

Malware Analysis – amadey – 114a29e4828e47605fb68bbda1c91cd4

November 16, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:asyncrat, family:dcrat, family:djvu, family:eternity, family:raccoon, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:@redlinevip cloud (tg: @fatherofcarders), botnet:client6, botnet:dbffbdbc9786a5c270e6dd2d647e18ea,...

Malware Analysis – evasion – 06121671b9de18edfc74f1ca3c566001

November 16, 2022

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 06121671b9de18edfc74f1ca3c566001SHA1: 12d586ccb57197b5ea48ff978f6e59ed20a1f7a3ANALYSIS DATE: 2022-11-16T15:12:04ZTTPS: T1082, T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – smokeloader – 5ca04c00a108bc8a1ebc6f2acb206914

November 16, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 5ca04c00a108bc8a1ebc6f2acb206914SHA1: 1aa8c66127e76ee084070eb985d9a5f776bde6d4ANALYSIS DATE: 2022-11-16T17:52:07ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – amadey – 7960146c3ce0103f7c63f99952955c3c

November 16, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:dcrat, family:djvu, family:eternity, family:raccoon, family:redline, family:smokeloader, family:vidar, botnet:3m, botnet:517, botnet:@redlinevip cloud (tg: @fatherofcarders), botnet:dbffbdbc9786a5c270e6dd2d647e18ea, botnet:mario23_10,...

Malware Analysis – djvu – 5b95e84a91c972f557690b38cddd8fd4

November 16, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 5b95e84a91c972f557690b38cddd8fd4SHA1: 9c8edebbd80c013835a370484d173fa5abc8053aANALYSIS DATE: 2022-11-16T16:32:01ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – lockbit – 48aa442a0670b65a82eee99c1ed1ac78

November 16, 2022

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, discovery, evasion, persistence, ransomwareMD5: 48aa442a0670b65a82eee99c1ed1ac78SHA1: 12117609b746257a6cdd2808dcb50c6af9c1810dANALYSIS DATE: 2022-11-16T17:50:04ZTTPS: T1490, T1046, T1082, T1107, T1060, T1112 ScoreMeaningExample10Known...

Malware Analysis – amadey – 6567aa75c8bfb976b2c2ac054c94972c

November 16, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:123, botnet:517, botnet:mario23_10, backdoor, collection, discovery, evasion, infostealer, persistence, ransomware, spyware,...

Malware Analysis – djvu – 22aa49033009f6967fd9a53f40b0fa66

November 16, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 22aa49033009f6967fd9a53f40b0fa66SHA1: fa550aea311c22d187df218d909d65dd2e9329e3ANALYSIS DATE: 2022-11-16T09:04:27ZTTPS: T1005, T1081, T1060, T1112,...

Malware Analysis – discovery – 4daaf587e2a1dd41691a4f95a7778083

November 16, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 4daaf587e2a1dd41691a4f95a7778083SHA1: 945526bbea76aa2e4660ca15842b25eac8600753ANALYSIS DATE: 2022-11-16T09:16:00ZTTPS: T1112, T1042, T1012, T1120, T1082, T1060 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 85bf0a8fcb03c3f004e2e0a911c13aa9

November 16, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:mario23_10, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: 85bf0a8fcb03c3f004e2e0a911c13aa9SHA1:...

Malware Analysis

Malware Analysis – lockbit – 02ad715191b64a46120e38ca6cb1ef6a

Malware Analysis – amadey – c90d70bb6c573d5eb9da902d67447fac

Malware Analysis – amadey – 601b88f56a0d282cba6e6b0c651475a5

Malware Analysis – amadey – 735b8638c111937fe3cecf0b6fe95ec1

Malware Analysis – ransomware – b7285d0e7e64677f7bc70dcd71b4a18a

Malware Analysis – amadey – 76fb892989a0e9898ae9f1c8f8273560

Malware Analysis – djvu – 4b9a47a102eedbf7ae264602f2334ef4

Malware Analysis – djvu – 8af7de57dc5ba4d68ae95d169f673282

Malware Analysis – amadey – e56bdbd3bbf16c712fd3964d47a2284d

Malware Analysis – dcrat – 079fa9293dc34904e2dc1dfe4450e17a

Malware Analysis – amadey – 000e96a33f00b6e8f473f96680e97105

Malware Analysis – smokeloader – 71f0f10d55a7c76842144f85aa453b1e

Malware Analysis – djvu – 4af869180d81d4cfb263e86d7161a18a

Malware Analysis – djvu – 26bc838e4d36c0d4f7c8e45458670276

Malware Analysis – amadey – 114a29e4828e47605fb68bbda1c91cd4

Malware Analysis – evasion – 06121671b9de18edfc74f1ca3c566001

Malware Analysis – smokeloader – 5ca04c00a108bc8a1ebc6f2acb206914

Malware Analysis – amadey – 7960146c3ce0103f7c63f99952955c3c

Malware Analysis – djvu – 5b95e84a91c972f557690b38cddd8fd4

Malware Analysis – lockbit – 48aa442a0670b65a82eee99c1ed1ac78

Malware Analysis – amadey – 6567aa75c8bfb976b2c2ac054c94972c

Malware Analysis – djvu – 22aa49033009f6967fd9a53f40b0fa66

Malware Analysis – discovery – 4daaf587e2a1dd41691a4f95a7778083

Malware Analysis – djvu – 85bf0a8fcb03c3f004e2e0a911c13aa9

Cobalt Strike Beacon Detected – 38[.]173[.]19[.]175:8731

Cobalt Strike Beacon Detected – 8[.]219[.]76[.]168:443

Cobalt Strike Beacon Detected – 39[.]104[.]78[.]25:8443

Cobalt Strike Beacon Detected – 8[.]147[.]128[.]54:443

Cobalt Strike Beacon Detected – 43[.]138[.]30[.]109:9999

You may have missed