Malware Analysis

Malware Analysis – amadey – 6b635d80897c987ca64e28cc9004a249

November 15, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:mario23_10, botnet:rozena1114, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer,...

Malware Analysis – djvu – bf29eecd8ccb668323d7f61ff026b109

November 15, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: bf29eecd8ccb668323d7f61ff026b109SHA1: a19a0edf8ba13b93c0a37c14e7a203a97cb94a2cANALYSIS DATE: 2022-11-15T04:49:33ZTTPS: T1005, T1081, T1012, T1060,...

Malware Analysis – persistence – bbb2eb960cccf3d863bacb7a2f37c07e

November 15, 2022

Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: bbb2eb960cccf3d863bacb7a2f37c07eSHA1: 38dc33eaa979e0afb801cd6182c04bf264bd630aANALYSIS DATE: 2022-11-15T05:16:46ZTTPS: T1102, T1060, T1112, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – f582c50979a0af794c0f2d3b8f94ab16

November 15, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: f582c50979a0af794c0f2d3b8f94ab16SHA1: 6633d9ab4aefffd8298d0f50eaa2192e2fa57099ANALYSIS DATE: 2022-11-15T04:56:49ZTTPS: T1060, T1112, T1158, T1088, T1089, T1082,...

Malware Analysis – nitro – 5c3f73f74ff01937543395e7c97af556

November 15, 2022

Score: 10 MALWARE FAMILY: nitroTAGS:family:nitro, persistence, ransomware, spyware, stealerMD5: 5c3f73f74ff01937543395e7c97af556SHA1: 81ea3ba54b1100945c15bdabf4d49b25f27ed13dANALYSIS DATE: 2022-11-15T05:07:03ZTTPS: T1102, T1060, T1112, T1005, T1081, T1491 ScoreMeaningExample10Known...

Malware Analysis – azov – c85b63aa4526b91acc9ad26f2b142688

November 15, 2022

Score: 10 MALWARE FAMILY: azovTAGS:family:azov, persistence, ransomware, wiperMD5: c85b63aa4526b91acc9ad26f2b142688SHA1: 3adf5f527aa132e874b48a0309f1392f5730430dANALYSIS DATE: 2022-11-15T05:01:13ZTTPS: T1060, T1112, T1012, T1120, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – nitro – 1b01b176dcc36b86e657dc05e680b39a

November 15, 2022

Score: 10 MALWARE FAMILY: nitroTAGS:family:nitro, persistence, ransomware, spyware, stealerMD5: 1b01b176dcc36b86e657dc05e680b39aSHA1: 520a2dd58117656709b09444b37682cdccff07efANALYSIS DATE: 2022-11-15T05:30:38ZTTPS: T1060, T1112, T1491, T1005, T1081, T1102 ScoreMeaningExample10Known...

Malware Analysis – djvu – cbdf6a2d83ff8f674a70ec0bbee7e279

November 15, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: cbdf6a2d83ff8f674a70ec0bbee7e279SHA1: eafd89bb91656aabaff1d3a3b58e798d85e54767ANALYSIS DATE: 2022-11-15T05:28:50ZTTPS: T1005, T1081, T1060, T1112,...

Malware Analysis – amadey – 556620100652076e0efed4b48a0c7499

November 15, 2022

Malware Analysis – – b81672770e0610b00421c8822ed8b1d2

November 15, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: b81672770e0610b00421c8822ed8b1d2SHA1: 9d4c8a7a309957cd9bbf95a1e750cc60760402cbANALYSIS DATE: 2022-11-15T05:19:53ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – amadey – 8a4cca57b1deb47df31fbb78ba0876a2

November 15, 2022

Malware Analysis – smokeloader – 19faeca68a25c97e3d76497a3c5fb439

November 15, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 19faeca68a25c97e3d76497a3c5fb439SHA1: 7b15a524a7ff03c2376c2fbd081ae5d4d3c73819ANALYSIS DATE: 2022-11-14T21:34:54ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – unluckyware – d7924023e6cb8826e6db9c1bb917ee4e

November 15, 2022

Score: 10 MALWARE FAMILY: unluckywareTAGS:family:unluckyware, persistence, ransomwareMD5: d7924023e6cb8826e6db9c1bb917ee4eSHA1: d3727664988db585b9d632d2888963019b5e6e11ANALYSIS DATE: 2022-11-14T23:13:27ZTTPS: T1491, T1112, T1102, T1012, T1082, T1060, T1130 ScoreMeaningExample10Known badA...

Malware Analysis – amadey – 9b429218f2ed709675849d6fca5e6ff4

November 15, 2022

Malware Analysis – djvu – 4d26c402976d2d7329a24c64407ccaa0

November 15, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 4d26c402976d2d7329a24c64407ccaa0SHA1: a5fcdc372907966558ffcfd891b5f6d80f569340ANALYSIS DATE: 2022-11-14T22:50:12ZTTPS: T1222, T1012, T1082, T1060,...

Malware Analysis – njrat – 338307656795cb8779872642e718aabd

November 14, 2022

Score: 10 MALWARE FAMILY: njratTAGS:family:njrat, family:quasar, agilenet, discovery, evasion, persistence, ransomware, spyware, stealer, themida, trojanMD5: 338307656795cb8779872642e718aabdSHA1: fe6f07fc7a8894397863015445a8029cc716d18eANALYSIS DATE: 2022-11-14T14:32:14ZTTPS: T1082,...

Malware Analysis – amadey – a2376addbda8d143eaa7a151533fb520

November 14, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:mario23_10, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5:...

Malware Analysis – djvu – d1973cdcf0c4bece9b084bfe132ac646

November 14, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: d1973cdcf0c4bece9b084bfe132ac646SHA1: e81906a8c90bc7621e6db284f7baf809c49d1687ANALYSIS DATE: 2022-11-14T15:21:14ZTTPS: T1012, T1082, T1060, T1112,...

Malware Analysis – discovery – d7d3f9503f8cd61e82b159821e67c5a7

November 14, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, persistence, ransomware, spyware, stealer, trojan, upxMD5: d7d3f9503f8cd61e82b159821e67c5a7SHA1: 433ccebedaf60d3aff42811bc32f8ae5fe64570eANALYSIS DATE: 2022-11-14T14:59:25ZTTPS: T1060, T1112, T1031, T1089,...

Malware Analysis – discovery – ad3f76e4dc5baa1ee64142b5c68069de

November 14, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: ad3f76e4dc5baa1ee64142b5c68069deSHA1: 3a63df7eee1733e275aeeda1a2f853fe6fcec2fcANALYSIS DATE: 2022-11-14T14:56:39ZTTPS: T1082, T1012, T1060, T1112, T1042 ScoreMeaningExample10Known badA malware family...

Malware Analysis – djvu – 1143c8f208bab79acbe46861f271cc4d

November 14, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 1143c8f208bab79acbe46861f271cc4dSHA1: 12732617f010643844ca19052a1fa19d6935989cANALYSIS DATE: 2022-11-14T16:01:53ZTTPS: T1130, T1112, T1005, T1081,...

Malware Analysis – evasion – aae3cffcd65424b439135a22b9945214

November 14, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: aae3cffcd65424b439135a22b9945214SHA1: 2122535f42a7bb3629dcf82335b6483bca4e3002ANALYSIS DATE: 2022-11-14T15:44:24ZTTPS: T1012, T1120, T1082, T1031, T1491, T1112 ScoreMeaningExample10Known badA malware family...

Malware Analysis – discovery – 50dd766cdf8e4eaf3f1f551133b36cad

November 14, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 50dd766cdf8e4eaf3f1f551133b36cadSHA1: d057e7cf9007af8c0886a6021a91e65d7be55bdfANALYSIS DATE: 2022-11-14T16:34:17ZTTPS: T1012, T1082, T1120, T1112, T1222, T1057, T1060 ScoreMeaningExample10Known badA...

Malware Analysis – smokeloader – f31e97e5eb2a8288857d0f69f101a272

November 14, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: f31e97e5eb2a8288857d0f69f101a272SHA1: 59a891e040fa64a8b0ae316f3166f8e8219679c1ANALYSIS DATE: 2022-11-14T16:26:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis

Malware Analysis – amadey – 6b635d80897c987ca64e28cc9004a249

Malware Analysis – djvu – bf29eecd8ccb668323d7f61ff026b109

Malware Analysis – persistence – bbb2eb960cccf3d863bacb7a2f37c07e

Malware Analysis – evasion – f582c50979a0af794c0f2d3b8f94ab16

Malware Analysis – nitro – 5c3f73f74ff01937543395e7c97af556

Malware Analysis – azov – c85b63aa4526b91acc9ad26f2b142688

Malware Analysis – nitro – 1b01b176dcc36b86e657dc05e680b39a

Malware Analysis – djvu – cbdf6a2d83ff8f674a70ec0bbee7e279

Malware Analysis – amadey – 556620100652076e0efed4b48a0c7499

Malware Analysis – – b81672770e0610b00421c8822ed8b1d2

Malware Analysis – amadey – 8a4cca57b1deb47df31fbb78ba0876a2

Malware Analysis – smokeloader – 19faeca68a25c97e3d76497a3c5fb439

Malware Analysis – unluckyware – d7924023e6cb8826e6db9c1bb917ee4e

Malware Analysis – amadey – 9b429218f2ed709675849d6fca5e6ff4

Malware Analysis – djvu – 4d26c402976d2d7329a24c64407ccaa0

Malware Analysis – njrat – 338307656795cb8779872642e718aabd

Malware Analysis – amadey – a2376addbda8d143eaa7a151533fb520

Malware Analysis – djvu – d1973cdcf0c4bece9b084bfe132ac646

Malware Analysis – discovery – d7d3f9503f8cd61e82b159821e67c5a7

Malware Analysis – discovery – ad3f76e4dc5baa1ee64142b5c68069de

Malware Analysis – djvu – 1143c8f208bab79acbe46861f271cc4d

Malware Analysis – evasion – aae3cffcd65424b439135a22b9945214

Malware Analysis – discovery – 50dd766cdf8e4eaf3f1f551133b36cad

Malware Analysis – smokeloader – f31e97e5eb2a8288857d0f69f101a272

[BEAST] – Ransomware Victim: Punjab Forensic Science Agency

Brute Ratel C4 Detected – 54[.]95[.]111[.]44:80

[QILIN] – Ransomware Victim: Hitzinger

[HANDALA] – Ransomware Victim: Saturday Spotlight

[QILIN] – Ransomware Victim: SHRM New Mexico

You may have missed