Malware Analysis

Malware Analysis – ransomware – bd1753c21a8f5df46d0fc15a6e955fc2

November 16, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: bd1753c21a8f5df46d0fc15a6e955fc2SHA1: d91aed5a66c9d81d158dd5f0974af111ffd2193fANALYSIS DATE: 2022-11-16T11:03:04ZTTPS: T1082, T1005, T1081, T1491, T1112 ScoreMeaningExample10Known badA malware family...

Malware Analysis – djvu – 20551207f58fa8b35fb27f48522dfb4f

November 16, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 20551207f58fa8b35fb27f48522dfb4fSHA1: a5cd0b9d6329c1d2277d207c6ffb78acfc21c3f8ANALYSIS DATE: 2022-11-16T10:42:40ZTTPS: T1082, T1005, T1081, T1012,...

Malware Analysis – – 23781b8f02e972874393d04b97870bee

November 16, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 23781b8f02e972874393d04b97870beeSHA1: c3fa521b358b1a59a56dc38527fec8d8c5c286e4ANALYSIS DATE: 2022-11-16T10:58:10ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – smokeloader – c75afff0fab61d5210bcc2c2bede60be

November 16, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: c75afff0fab61d5210bcc2c2bede60beSHA1: a7f126e2305f6e15b7b2b0aaf878e27f74f7f817ANALYSIS DATE: 2022-11-16T03:16:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – amadey – 68cc01ae9ae11af059f93d03053480b8

November 16, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:eternity, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:mario23_10, backdoor, collection, discovery, evasion, infostealer, persistence, ransomware, spyware,...

Malware Analysis – persistence – fce023be1fb28b656e419c5c817deb73

November 16, 2022

Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: fce023be1fb28b656e419c5c817deb73SHA1: 589b78fcde00583615e85c16b0a63d0806cf621cANALYSIS DATE: 2022-11-16T04:49:20ZTTPS: T1060, T1112, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 15103cc5f77da69f8563b4ba0e718d5e

November 16, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 15103cc5f77da69f8563b4ba0e718d5eSHA1: 7a1655817f7439e02f8924822e771479bf986312ANALYSIS DATE: 2022-11-16T04:34:31ZTTPS: T1005, T1081, T1060, T1112,...

Malware Analysis – djvu – a9b1f92a3513a444bdeaaa0c04252c25

November 16, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:mario23_10, backdoor, collection, discovery, evasion, infostealer, persistence, ransomware, spyware, stealer, trojanMD5:...

Malware Analysis – azov – 7675302777989b94bd9912988bd78937

November 16, 2022

Score: 10 MALWARE FAMILY: azovTAGS:family:azov, persistence, ransomware, spyware, stealer, wiperMD5: 7675302777989b94bd9912988bd78937SHA1: e888de6410255dcef79278437fab04766423bdeaANALYSIS DATE: 2022-11-16T05:38:52ZTTPS: T1060, T1112, T1012, T1120, T1082, T1005,...

Malware Analysis – ransomware – 07563c3b4988c221314fdab4b0500d2f

November 16, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 07563c3b4988c221314fdab4b0500d2fSHA1: a5f53c9b0f7956790248607e4122db18ba2b8bd9ANALYSIS DATE: 2022-11-16T05:38:50ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 8da4d636acf2965db8a07d006f7697fb

November 16, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 8da4d636acf2965db8a07d006f7697fbSHA1: 9abff3c3aab27852709b5679e5212be96410cf4cANALYSIS DATE: 2022-11-16T05:34:21ZTTPS: T1053, T1082, T1005, T1081,...

Malware Analysis – conti – ce3b141aa84f121127b37adecc908db8

November 16, 2022

Score: 10 MALWARE FAMILY: contiTAGS:family:conti, ransomware, upxMD5: ce3b141aa84f121127b37adecc908db8SHA1: c761ca6f202558b752efa76058264f01065d8171ANALYSIS DATE: 2022-11-16T05:38:52ZTTPS: T1107, T1490, T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family...

Malware Analysis – ransomware – a18ac3bfb1be7773182e1367c53ec854

November 16, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: a18ac3bfb1be7773182e1367c53ec854SHA1: c3d5c1f5ece8f0cf498d4812f981116ad7667286ANALYSIS DATE: 2022-11-16T05:38:55ZTTPS: T1005, T1081, T1102 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 9be47a6394a32e371869298cdf4bdd56

November 16, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 9be47a6394a32e371869298cdf4bdd56SHA1: ca349c0ddd6cda3a53ada634c3c1e1d6f494da8aANALYSIS DATE: 2022-11-16T05:38:53ZTTPS: T1005, T1081, T1102 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – medusalocker – 8474039d83805eb7b447325c3a8d1ebb

November 16, 2022

Score: 10 MALWARE FAMILY: medusalockerTAGS:family:medusalocker, family:neshta, evasion, persistence, ransomware, spyware, stealer, trojanMD5: 8474039d83805eb7b447325c3a8d1ebbSHA1: a07d537f4253745a087709a9a07c449f84deed8dANALYSIS DATE: 2022-11-16T05:38:54ZTTPS: T1112, T1012, T1120, T1082,...

Malware Analysis – evasion – 6a90538a2e0c5cb52ab4bf050565012c

November 16, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 6a90538a2e0c5cb52ab4bf050565012cSHA1: ab9544a858fd0afd6d1f2996a44793edf3dbc344ANALYSIS DATE: 2022-11-16T05:38:54ZTTPS: T1490, T1107, T1060, T1112, T1012, T1120, T1082, T1018 ScoreMeaningExample10Known...

Malware Analysis – blacknet – 5ca4d167e4df2aca3495c6651d5333ff

November 16, 2022

Score: 10 MALWARE FAMILY: blacknetTAGS:family:blacknet, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:mario23_10, botnet:round3, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer,...

Malware Analysis – discovery – 0169e63e83084ed1f794ab9a56dfaf9b

November 16, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, ransomwareMD5: 0169e63e83084ed1f794ab9a56dfaf9bSHA1: 392d8cb7b3029bf7e0a22e5176fe2f2a0f050668ANALYSIS DATE: 2022-11-16T05:40:48ZTTPS: T1012, T1082, T1057 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – ad1c2d9a87ebc01fa187f2f44d9a977c

November 16, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: ad1c2d9a87ebc01fa187f2f44d9a977cSHA1: 03d871509a7369f5622e9ba0e21a14a7e813536dANALYSIS DATE: 2022-11-16T05:38:57ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – ab2c19f4c79bc7a2527ab4df85c69559

November 16, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: ab2c19f4c79bc7a2527ab4df85c69559SHA1: 60a692c6eaf34a042717f54dbec4372848d7a3e3ANALYSIS DATE: 2022-11-16T05:38:57ZTTPS: T1102, T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – sodinokibi – b67606d382f50ebf76848d023decee20

November 15, 2022

Score: 10 MALWARE FAMILY: sodinokibiTAGS:family:sodinokibi, persistence, ransomwareMD5: b67606d382f50ebf76848d023decee20SHA1: 6c72756b12b03a2a594b8bb308944396438ec979ANALYSIS DATE: 2022-11-15T15:46:03ZTTPS: T1012, T1120, T1082, T1060, T1112, T1491 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 6a05c4dc74ef3eb3cbe3b9e67c07af24

November 15, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 6a05c4dc74ef3eb3cbe3b9e67c07af24SHA1: 32951c8b1f7740aad9a2ecaafc1075cc826c441eANALYSIS DATE: 2022-11-15T15:04:35ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – blackrock – 0d4a272052b87d098271ddfb6f4ea191

November 15, 2022

Score: 10 MALWARE FAMILY: blackrockTAGS:family:blackrock, banker, infostealer, ransomware, trojanMD5: 0d4a272052b87d098271ddfb6f4ea191SHA1: c1b3db52e0aa1798b9193ea7f1a2c8d7747aeec8ANALYSIS DATE: 2022-11-15T15:10:10ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – 1152e2ea6ef7eae60fd914a02f333d3f

November 15, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 1152e2ea6ef7eae60fd914a02f333d3fSHA1: fa49c4a1a397d4fa53ad5685b3239b038e3f1f13ANALYSIS DATE: 2022-11-15T15:59:09ZTTPS: T1005, T1081, T1060, T1112,...

Malware Analysis

Malware Analysis – ransomware – bd1753c21a8f5df46d0fc15a6e955fc2

Malware Analysis – djvu – 20551207f58fa8b35fb27f48522dfb4f

Malware Analysis – – 23781b8f02e972874393d04b97870bee

Malware Analysis – smokeloader – c75afff0fab61d5210bcc2c2bede60be

Malware Analysis – amadey – 68cc01ae9ae11af059f93d03053480b8

Malware Analysis – persistence – fce023be1fb28b656e419c5c817deb73

Malware Analysis – djvu – 15103cc5f77da69f8563b4ba0e718d5e

Malware Analysis – djvu – a9b1f92a3513a444bdeaaa0c04252c25

Malware Analysis – azov – 7675302777989b94bd9912988bd78937

Malware Analysis – ransomware – 07563c3b4988c221314fdab4b0500d2f

Malware Analysis – djvu – 8da4d636acf2965db8a07d006f7697fb

Malware Analysis – conti – ce3b141aa84f121127b37adecc908db8

Malware Analysis – ransomware – a18ac3bfb1be7773182e1367c53ec854

Malware Analysis – ransomware – 9be47a6394a32e371869298cdf4bdd56

Malware Analysis – medusalocker – 8474039d83805eb7b447325c3a8d1ebb

Malware Analysis – evasion – 6a90538a2e0c5cb52ab4bf050565012c

Malware Analysis – blacknet – 5ca4d167e4df2aca3495c6651d5333ff

Malware Analysis – discovery – 0169e63e83084ed1f794ab9a56dfaf9b

Malware Analysis – ransomware – ad1c2d9a87ebc01fa187f2f44d9a977c

Malware Analysis – ransomware – ab2c19f4c79bc7a2527ab4df85c69559

Malware Analysis – sodinokibi – b67606d382f50ebf76848d023decee20

Malware Analysis – ransomware – 6a05c4dc74ef3eb3cbe3b9e67c07af24

Malware Analysis – blackrock – 0d4a272052b87d098271ddfb6f4ea191

Malware Analysis – djvu – 1152e2ea6ef7eae60fd914a02f333d3f

[INCRANSOM] – Ransomware Victim: erniesinceresco[.]com

Cobalt Strike Beacon Detected – 49[.]233[.]32[.]31:9443

Cobalt Strike Beacon Detected – 103[.]171[.]35[.]26:9443

Cobalt Strike Beacon Detected – 45[.]141[.]233[.]66:8080

Cobalt Strike Beacon Detected – 8[.]216[.]80[.]229:9443

You may have missed