Malware Analysis

Malware Analysis – azov – f2a75b25f7e0cfee3fa861754d01bee2

November 13, 2022

Score: 10 MALWARE FAMILY: azovTAGS:family:azov, persistence, ransomware, spyware, stealer, wiperMD5: f2a75b25f7e0cfee3fa861754d01bee2SHA1: 107692789d688eede43064c44b6a07958cbc3eddANALYSIS DATE: 2022-11-13T15:32:07ZTTPS: T1012, T1120, T1082, T1005, T1081, T1060,...

Malware Analysis – azov – fb211c2ac0f37a104de1b4377e87982c

November 13, 2022

Score: 10 MALWARE FAMILY: azovTAGS:family:azov, persistence, ransomware, spyware, stealer, wiperMD5: fb211c2ac0f37a104de1b4377e87982cSHA1: 39fc0b935b35c6d2ffd5664467606765cb207c45ANALYSIS DATE: 2022-11-13T15:33:07ZTTPS: T1012, T1120, T1082, T1005, T1081, T1060,...

Malware Analysis – smokeloader – f5c178148b3caf9df80d0ebdad21247f

November 13, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: f5c178148b3caf9df80d0ebdad21247fSHA1: ff30214f2095dc71308dac946fe15e087cfd6e14ANALYSIS DATE: 2022-11-13T15:36:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – azov – c4e7ddc4f4de56d81cb9a1155b427cc0

November 13, 2022

Score: 10 MALWARE FAMILY: azovTAGS:family:azov, persistence, ransomware, spyware, stealer, wiperMD5: c4e7ddc4f4de56d81cb9a1155b427cc0SHA1: c6457b8e4d2a1c5665c1aa03b0e4c47ac8f01c67ANALYSIS DATE: 2022-11-13T15:33:08ZTTPS: T1012, T1120, T1082, T1005, T1081, T1060,...

Malware Analysis – azov – 53acba6e2bd5c5cebeb5d07512cfb221

November 13, 2022

Score: 10 MALWARE FAMILY: azovTAGS:family:azov, persistence, ransomware, wiperMD5: 53acba6e2bd5c5cebeb5d07512cfb221SHA1: e8f2b5f3eae1b64f52906eee3c0f32286281b9a2ANALYSIS DATE: 2022-11-13T15:33:07ZTTPS: T1012, T1120, T1082, T1060, T1112 ScoreMeaningExample10Known badA malware...

Malware Analysis – smokeloader – 1478f2913021fbe3d058d7b3f8deafb8

November 13, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 1478f2913021fbe3d058d7b3f8deafb8SHA1: 9022fdfa23e138007f4c619ac694d66c4ad9fdceANALYSIS DATE: 2022-11-13T16:18:20ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – 0df0ea0bbf8131122c6d615e1c64211c

November 13, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomware, spyware, stealerMD5: 0df0ea0bbf8131122c6d615e1c64211cSHA1: e9113b243fecb9225fe4f3fa30bd96d5d3fe2390ANALYSIS DATE: 2022-11-13T16:06:25ZTTPS: T1012, T1082, T1102, T1120, T1005, T1081, T1060,...

Malware Analysis – djvu – 2c1c98563468777f8212368893e1f73a

November 13, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:google2, botnet:mario23_10, botnet:new1113, backdoor, collection, discovery, evasion, exploit, infostealer, persistence, ransomware,...

Malware Analysis – smokeloader – 401d39e7fe0115353cbde76ee50bb76b

November 13, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 401d39e7fe0115353cbde76ee50bb76bSHA1: a6f9f492400891fcf16aa385cd83e87e64758cb9ANALYSIS DATE: 2022-11-13T16:23:40ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – f15138be4b4b93a969484db49a26ca77

November 13, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:google2, botnet:mario23_10, backdoor, collection, discovery, evasion, exploit, infostealer, persistence, ransomware, spyware,...

Malware Analysis – smokeloader – a885cd95a68cdde169ccfcd8a2907820

November 13, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: a885cd95a68cdde169ccfcd8a2907820SHA1: 360109fcc8e456fbccc291bfa45083fa860168e2ANALYSIS DATE: 2022-11-13T17:13:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 43fef15833cf87dca57905c0f11f8f8b

November 13, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 43fef15833cf87dca57905c0f11f8f8bSHA1: 9c8cd929f27fdea71ed1abc4b0f100369747a504ANALYSIS DATE: 2022-11-13T17:00:30ZTTPS: T1082, T1012, T1491, T1112, T1120 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – xmrig – 3db308a4a293420df30a444944f2ccb6

November 13, 2022

Score: 10 MALWARE FAMILY: xmrigTAGS:family:xmrig, discovery, evasion, exploit, minerMD5: 3db308a4a293420df30a444944f2ccb6SHA1: 4cae8d8a25167bc0ce3e8bfae7ccde1b82f7b0eaANALYSIS DATE: 2022-11-13T17:06:36ZTTPS: T1112, T1222, T1053, T1031, T1562, T1489 ScoreMeaningExample10Known...

Malware Analysis – discovery – 5026ed09cc5a093093461066d16a8f30

November 13, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, exploitMD5: 5026ed09cc5a093093461066d16a8f30SHA1: 34d60b874d9d3f8841c721692ea1daf31f330653ANALYSIS DATE: 2022-11-13T17:42:47ZTTPS: T1112, T1222, T1031, T1562, T1489, T1130, T1102, T1082, T1053...

Malware Analysis – redline – c87dcd21b0dcb51699a4735ac76ad3de

November 13, 2022

Score: 10 MALWARE FAMILY: redlineTAGS:family:redline, botnet:123, botnet:new1113, discovery, evasion, exploit, infostealer, spyware, stealer, upxMD5: c87dcd21b0dcb51699a4735ac76ad3deSHA1: 87d3d0a8aca200fc85ac9646b710141a4098932bANALYSIS DATE: 2022-11-13T17:15:04ZTTPS: T1064, T1102,...

Malware Analysis – djvu – c433a81871969b5f7e246a7e8ce9bb97

November 13, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: c433a81871969b5f7e246a7e8ce9bb97SHA1: 6188157a2a314b2eaebd675556cdf60763e9523fANALYSIS DATE: 2022-11-13T17:55:28ZTTPS: T1005, T1081, T1060, T1112,...

Malware Analysis – djvu – fafa559b20cb1f187ce45263a1c4659d

November 13, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: fafa559b20cb1f187ce45263a1c4659dSHA1: 20875a05c1bd25c75905597b79c0d9e28ca2093cANALYSIS DATE: 2022-11-13T17:34:05ZTTPS: T1012, T1060, T1112, T1082,...

Malware Analysis – djvu – b80625694ee01d78a66203d2bdd91c65

November 13, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:google2, botnet:mario23_10, backdoor, collection, discovery, evasion, infostealer, persistence, ransomware, spyware, stealer,...

Malware Analysis – smokeloader – a31728f1578939de11bcf95509015f35

November 13, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: a31728f1578939de11bcf95509015f35SHA1: 0fce37afab13319f182849da37d97f5e75774794ANALYSIS DATE: 2022-11-13T09:39:09ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – – 7d35375e09623e3fa95b059dc1df32a9

November 13, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 7d35375e09623e3fa95b059dc1df32a9SHA1: bc63fa13e1b500ad6f8f52f073c1d9073ac4e3f3ANALYSIS DATE: 2022-11-13T09:23:05ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 8af26984586b5276ca34484df634c57c

November 13, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 8af26984586b5276ca34484df634c57cSHA1: 676f4703088ca9d85a46d9bd66816a06ea19dcdcANALYSIS DATE: 2022-11-13T10:09:52ZTTPS: T1012, T1053, T1005, T1081,...

Malware Analysis – djvu – f5c178148b3caf9df80d0ebdad21247f

November 13, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:123, botnet:517, botnet:mario23_10, backdoor, collection, discovery, evasion, infostealer, persistence, ransomware, spyware, stealer,...

Malware Analysis – ransomware – 379cbdbb5b3221615dd1802d906eb23c

November 13, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 379cbdbb5b3221615dd1802d906eb23cSHA1: a891e774eeb9671ff2dd1334e1628ba18fb60575ANALYSIS DATE: 2022-11-13T10:07:17ZTTPS: T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – e8e8624d902450b62ca0435ae8757d0b

November 13, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:mario23_10, backdoor, collection, discovery, evasion, infostealer, persistence, ransomware, spyware, stealer, themida,...

Malware Analysis

Malware Analysis – azov – f2a75b25f7e0cfee3fa861754d01bee2

Malware Analysis – azov – fb211c2ac0f37a104de1b4377e87982c

Malware Analysis – smokeloader – f5c178148b3caf9df80d0ebdad21247f

Malware Analysis – azov – c4e7ddc4f4de56d81cb9a1155b427cc0

Malware Analysis – azov – 53acba6e2bd5c5cebeb5d07512cfb221

Malware Analysis – smokeloader – 1478f2913021fbe3d058d7b3f8deafb8

Malware Analysis – discovery – 0df0ea0bbf8131122c6d615e1c64211c

Malware Analysis – djvu – 2c1c98563468777f8212368893e1f73a

Malware Analysis – smokeloader – 401d39e7fe0115353cbde76ee50bb76b

Malware Analysis – djvu – f15138be4b4b93a969484db49a26ca77

Malware Analysis – smokeloader – a885cd95a68cdde169ccfcd8a2907820

Malware Analysis – ransomware – 43fef15833cf87dca57905c0f11f8f8b

Malware Analysis – xmrig – 3db308a4a293420df30a444944f2ccb6

Malware Analysis – discovery – 5026ed09cc5a093093461066d16a8f30

Malware Analysis – redline – c87dcd21b0dcb51699a4735ac76ad3de

Malware Analysis – djvu – c433a81871969b5f7e246a7e8ce9bb97

Malware Analysis – djvu – fafa559b20cb1f187ce45263a1c4659d

Malware Analysis – djvu – b80625694ee01d78a66203d2bdd91c65

Malware Analysis – smokeloader – a31728f1578939de11bcf95509015f35

Malware Analysis – – 7d35375e09623e3fa95b059dc1df32a9

Malware Analysis – djvu – 8af26984586b5276ca34484df634c57c

Malware Analysis – djvu – f5c178148b3caf9df80d0ebdad21247f

Malware Analysis – ransomware – 379cbdbb5b3221615dd1802d906eb23c

Malware Analysis – djvu – e8e8624d902450b62ca0435ae8757d0b

[BEAST] – Ransomware Victim: Punjab Forensic Science Agency

Brute Ratel C4 Detected – 54[.]95[.]111[.]44:80

[QILIN] – Ransomware Victim: Hitzinger

[HANDALA] – Ransomware Victim: Saturday Spotlight

[QILIN] – Ransomware Victim: SHRM New Mexico

You may have missed