Malware Analysis

Malware Analysis – xorist – 0fbf8c91afd09939c5ad7edc5ebb3c62

November 10, 2022

Score: 10 MALWARE FAMILY: xoristTAGS:family:xorist, persistence, ransomware, spyware, stealer, upxMD5: 0fbf8c91afd09939c5ad7edc5ebb3c62SHA1: a13a0edaf4b9619d594ea661f210d398bb48ff9eANALYSIS DATE: 2022-11-08T16:17:21ZTTPS: T1005, T1081, T1060, T1112 ScoreMeaningExample10Known badA...

Malware Analysis – discovery – 28e292e874ee9da1341b55783ffc9c02

November 10, 2022

Score: 9 MALWARE FAMILY: discoveryTAGS:discovery, ransomware, spyware, stealerMD5: 28e292e874ee9da1341b55783ffc9c02SHA1: 0148b8e1c49981fc4ddaf6e988b0559161f31b51ANALYSIS DATE: 2022-11-08T16:04:46ZTTPS: T1046, T1082, T1107, T1490, T1005, T1081 ScoreMeaningExample10Known badA...

Malware Analysis – discovery – 4c53a92e0df2605998bd68c62af5e1a7

November 10, 2022

Score: 9 MALWARE FAMILY: discoveryTAGS:discovery, evasion, persistence, ransomware, spyware, stealerMD5: 4c53a92e0df2605998bd68c62af5e1a7SHA1: c306b4f344174a64be1c805e7da4ee987377cd5aANALYSIS DATE: 2022-11-08T17:11:21ZTTPS: T1490, T1046, T1060, T1112, T1005, T1081,...

Malware Analysis – discovery – 200f0128ad46c7261ca8e23975e5010b

November 10, 2022

Score: 9 MALWARE FAMILY: discoveryTAGS:discovery, evasion, persistence, ransomware, spyware, stealerMD5: 200f0128ad46c7261ca8e23975e5010bSHA1: ac73ed7794487f0eea8cf4f517f5f9d8b2d7082aANALYSIS DATE: 2022-11-08T17:38:18ZTTPS: T1490, T1046, T1107, T1018, T1005, T1081,...

Malware Analysis – adware – 01202732d53aa438f714aa18a1969b30

November 10, 2022

Score: 8 MALWARE FAMILY: adwareTAGS:adware, discovery, exploit, persistence, stealer, upxMD5: 01202732d53aa438f714aa18a1969b30SHA1: ae3ffc7b5c00a3288658034586ebeaa848cb9594ANALYSIS DATE: 2022-11-08T17:38:13ZTTPS: T1112, T1176, T1060, T1222 ScoreMeaningExample10Known badA...

Malware Analysis – evasion – 3d901fb04dead3e603589fee484fb4d5

November 10, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 3d901fb04dead3e603589fee484fb4d5SHA1: 8d2599c9227f7568a1196f3b1f1ac6d26ba4376fANALYSIS DATE: 2022-11-08T16:35:53ZTTPS: T1490, T1112, T1060, T1107, T1082 ScoreMeaningExample10Known badA malware family...

Malware Analysis – discovery – 0e802b3b568dcf9badd19b9428b3fb00

November 10, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, persistenceMD5: 0e802b3b568dcf9badd19b9428b3fb00SHA1: 0fc7f6a10576a9207d1dff51dbab951a3428c687ANALYSIS DATE: 2022-11-08T17:52:08ZTTPS: T1060, T1112, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – 0dc401aac511effdaf0a4d3724f31ac6

November 10, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, persistenceMD5: 0dc401aac511effdaf0a4d3724f31ac6SHA1: 57020400308709d58237717c467af86fe35803e1ANALYSIS DATE: 2022-11-08T17:52:00ZTTPS: T1060, T1112, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – 038c8e6648b325cffa8d73b5ae2f42e0

November 10, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 038c8e6648b325cffa8d73b5ae2f42e0SHA1: 8cb59c7073ce1190f6cb4f80e2c443ec72b74502ANALYSIS DATE: 2022-11-08T17:51:49ZTTPS: T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – discovery – 0e3b32e60c15cff7578950fd90a273d1

November 10, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, persistenceMD5: 0e3b32e60c15cff7578950fd90a273d1SHA1: 9ed559dbd02cbb488afb03d20cb1d1d099fd8811ANALYSIS DATE: 2022-11-08T17:51:55ZTTPS: T1060, T1112, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – c841edc4a14ff66ab28ab5dfbed65c29

November 10, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: c841edc4a14ff66ab28ab5dfbed65c29SHA1: d47d453eac33d68f0d67b714ae874857c8794f40ANALYSIS DATE: 2022-11-09T21:44:03ZTTPS: T1060, T1112, T1005, T1081,...

Malware Analysis – discovery – 0f60ad15d0e4a95cc9ebb714bc6e09a6

November 10, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, persistenceMD5: 0f60ad15d0e4a95cc9ebb714bc6e09a6SHA1: cac29412b775c76a60d7c7cee1ba0cb9e46eadabANALYSIS DATE: 2022-11-08T17:52:16ZTTPS: T1060, T1112, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – a50f6c065873d9c55811563e15acae3c

November 10, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: a50f6c065873d9c55811563e15acae3cSHA1: 2e48f57e3411559944590b51cb01ee02d0091a09ANALYSIS DATE: 2022-11-09T22:00:12ZTTPS: T1053, T1060, T1112, T1005,...

Malware Analysis – djvu – 515be22b066338622e6cb7639ceb20c9

November 10, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:1515, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 515be22b066338622e6cb7639ceb20c9SHA1: ea517178380c6a31a6ddb25ede9663f38b335bc0ANALYSIS DATE:...

Malware Analysis – persistence – 3b3a50b242841e1789a919b1291051f1

November 10, 2022

Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 3b3a50b242841e1789a919b1291051f1SHA1: 7b74a50352bb16ba94201c8a9e35b3c1d8a9dc8cANALYSIS DATE: 2022-11-09T23:46:14ZTTPS: T1012, T1082, T1120, T1060, T1112 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – ransomware – 937d8f5da4adff6309bfa4c3b63a2708

November 10, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 937d8f5da4adff6309bfa4c3b63a2708SHA1: f697230ba32c437760bf2ac36e6bb33b86684244ANALYSIS DATE: 2022-11-09T23:36:55ZTTPS: T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – d24a10199e04cd6574fdbed175734f7a

November 10, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:1515, botnet:517, botnet:gg, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5:...

Malware Analysis – evasion – a6b2e7d1bfa8909c234f251b7224774d

November 10, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: a6b2e7d1bfa8909c234f251b7224774dSHA1: c0c4b1c4d07214d946ff63594c15e34c0a710280ANALYSIS DATE: 2022-11-09T23:58:26ZTTPS: T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – evasion – a95d19c9b1972f9f6c8a66b148e08918

November 9, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: a95d19c9b1972f9f6c8a66b148e08918SHA1: ce6f76f1181355dbb1e559f1d15d43d513d80702ANALYSIS DATE: 2022-11-08T12:31:50ZTTPS: T1112, T1158, T1088, T1089, T1082, T1005,...

Malware Analysis – evasion – a956802c8406310e6ec9c92f37a9a840

November 9, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: a956802c8406310e6ec9c92f37a9a840SHA1: c0d5f1acd810277b48de5406a398ac9775644541ANALYSIS DATE: 2022-11-08T12:42:59ZTTPS: T1088, T1089, T1112, T1158, T1082, T1060,...

Malware Analysis – discovery – 01dc2d1847f1ec016717148e991b04d0

November 9, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 01dc2d1847f1ec016717148e991b04d0SHA1: e08b0a35f9dd1e130232577c29fe8ed4e7a05ac7ANALYSIS DATE: 2022-11-08T13:25:19ZTTPS: T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – teslacrypt – 6eb1c8fb571684bd3d219b963fad3d6f

November 9, 2022

Score: 10 MALWARE FAMILY: teslacryptTAGS:family:teslacrypt, persistence, ransomwareMD5: 6eb1c8fb571684bd3d219b963fad3d6fSHA1: b9205cd714e320fbac5f8c22171d40cc005a26abANALYSIS DATE: 2022-11-08T13:29:21ZTTPS: T1082, T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family...

Malware Analysis – discovery – 0ffa05c5bcecaee09bac1f5f1ed25f80

November 9, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 0ffa05c5bcecaee09bac1f5f1ed25f80SHA1: 9acffa92149b0db7a243d59f5780054f5e024e3aANALYSIS DATE: 2022-11-08T13:25:13ZTTPS: T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – teslacrypt – 52ec44494fed2c9bebd5ce99903b7775

November 9, 2022

Score: 10 MALWARE FAMILY: teslacryptTAGS:family:teslacrypt, persistence, ransomware, spyware, stealerMD5: 52ec44494fed2c9bebd5ce99903b7775SHA1: 6191526cf35f080922830412c795df4fed5f8696ANALYSIS DATE: 2022-11-08T13:52:35ZTTPS: T1082, T1060, T1112, T1107, T1490, T1005, T1081,...

Malware Analysis

Malware Analysis – xorist – 0fbf8c91afd09939c5ad7edc5ebb3c62

Malware Analysis – discovery – 28e292e874ee9da1341b55783ffc9c02

Malware Analysis – discovery – 4c53a92e0df2605998bd68c62af5e1a7

Malware Analysis – discovery – 200f0128ad46c7261ca8e23975e5010b

Malware Analysis – adware – 01202732d53aa438f714aa18a1969b30

Malware Analysis – evasion – 3d901fb04dead3e603589fee484fb4d5

Malware Analysis – discovery – 0e802b3b568dcf9badd19b9428b3fb00

Malware Analysis – discovery – 0dc401aac511effdaf0a4d3724f31ac6

Malware Analysis – discovery – 038c8e6648b325cffa8d73b5ae2f42e0

Malware Analysis – discovery – 0e3b32e60c15cff7578950fd90a273d1

Malware Analysis – djvu – c841edc4a14ff66ab28ab5dfbed65c29

Malware Analysis – discovery – 0f60ad15d0e4a95cc9ebb714bc6e09a6

Malware Analysis – djvu – a50f6c065873d9c55811563e15acae3c

Malware Analysis – djvu – 515be22b066338622e6cb7639ceb20c9

Malware Analysis – persistence – 3b3a50b242841e1789a919b1291051f1

Malware Analysis – ransomware – 937d8f5da4adff6309bfa4c3b63a2708

Malware Analysis – djvu – d24a10199e04cd6574fdbed175734f7a

Malware Analysis – evasion – a6b2e7d1bfa8909c234f251b7224774d

Malware Analysis – evasion – a95d19c9b1972f9f6c8a66b148e08918

Malware Analysis – evasion – a956802c8406310e6ec9c92f37a9a840

Malware Analysis – discovery – 01dc2d1847f1ec016717148e991b04d0

Malware Analysis – teslacrypt – 6eb1c8fb571684bd3d219b963fad3d6f

Malware Analysis – discovery – 0ffa05c5bcecaee09bac1f5f1ed25f80

Malware Analysis – teslacrypt – 52ec44494fed2c9bebd5ce99903b7775

Cobalt Strike Beacon Detected – 193[.]112[.]83[.]36:8080

Cobalt Strike Beacon Detected – 60[.]204[.]245[.]37:8080

Cobalt Strike Beacon Detected – 118[.]24[.]117[.]221:8080

Cobalt Strike Beacon Detected – 47[.]120[.]13[.]85:8889

Cobalt Strike Beacon Detected – 20[.]41[.]73[.]175:8080

You may have missed