Malware Analysis

Malware Analysis – djvu – 0b4ac285577c9f33c9e3ee30948f4704

November 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 0b4ac285577c9f33c9e3ee30948f4704SHA1: 67d5501ea4fcdb37e15d71759dc31eac5a0b9ca3ANALYSIS DATE: 2022-11-06T09:11:09ZTTPS: T1005, T1081, T1012, T1082, T1060, T1112,...

Malware Analysis – evasion – 0cda00016dafd9c505d4b491f262f37d

November 6, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 0cda00016dafd9c505d4b491f262f37dSHA1: 778540664df52b94bda6ca167746d018479d1de6ANALYSIS DATE: 2022-11-06T13:00:30ZTTPS: T1060, T1112, T1004, T1042, T1012, T1120, T1082, T1091,...

Malware Analysis – djvu – 2a48d7bcfe5050c4a83525bc4b5c455f

November 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 2a48d7bcfe5050c4a83525bc4b5c455fSHA1: e7cfdbca29274455e44465f270d209ae7fcb517cANALYSIS DATE: 2022-11-06T12:21:11ZTTPS: T1005, T1081, T1012, T1082, T1222, T1060,...

Malware Analysis – amadey – 9ad6c9a655878577c8335bd6cf6aaffd

November 6, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, botnet:mast1000, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: 9ad6c9a655878577c8335bd6cf6aaffdSHA1: 665c6dbb4729f25af1f708bc9fde944fd1fe5b92ANALYSIS...

Malware Analysis – amadey – 399dbde569fd5be70901eaf962498ae0

November 6, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, botnet:google2, botnet:mast1000, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: 399dbde569fd5be70901eaf962498ae0SHA1:...

Malware Analysis – djvu – 9af246175d3aad6567d80a9321cbf3f5

November 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 9af246175d3aad6567d80a9321cbf3f5SHA1: d88e1017b30de070e3bb71190dd5641194a96168ANALYSIS DATE: 2022-11-06T13:08:47ZTTPS: T1060, T1112, T1082, T1053, T1005, T1081,...

Malware Analysis – evasion – 0f31eca0c350bd084573af4fd3c55835

November 6, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, upxMD5: 0f31eca0c350bd084573af4fd3c55835SHA1: a258d85eae493ac152ebeef24eb7d33087f9d8d8ANALYSIS DATE: 2022-11-06T13:13:13ZTTPS: T1112, T1060, T1158, T1012, T1120, T1082 ScoreMeaningExample10Known badA...

Malware Analysis – evasion – 20092d6774a7a044dccad662d8b6c4e1

November 6, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 20092d6774a7a044dccad662d8b6c4e1SHA1: 028fc537f2b6d075742940bdbe23403396d7ee7dANALYSIS DATE: 2022-11-06T13:00:33ZTTPS: T1158, T1112, T1012, T1120, T1082, T1060, T1042, T1091,...

Malware Analysis – djvu – 6a7cec5f400a75bc4ba866d1742283d8

November 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, botnet:mast1000, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: 6a7cec5f400a75bc4ba866d1742283d8SHA1: d2f8c9b43994887b7ec979f513d9343020d0914dANALYSIS DATE:...

Malware Analysis – smokeloader – a8ed8173770845fcdae4c2a5d54540d2

November 6, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: a8ed8173770845fcdae4c2a5d54540d2SHA1: 745e4ea2e98224214a837344a902b3dfb7d738afANALYSIS DATE: 2022-11-06T15:02:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – wannacry – 32899ed3680e121ffa948bca159a9136

November 6, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 32899ed3680e121ffa948bca159a9136SHA1: 9c58da55106e8f067c009de32c592bd815e43905ANALYSIS DATE: 2022-11-06T15:20:27ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – b4e3abf0d3ce1968b7164c9b8aa581e4

November 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: b4e3abf0d3ce1968b7164c9b8aa581e4SHA1: 6cc3296c37cc5415f7209e61070d61d435a67a3eANALYSIS DATE: 2022-11-06T17:05:16ZTTPS: T1012, T1082, T1005, T1081, T1060, T1112,...

Malware Analysis – joker – 7fea757ea8d41dcf19ae0f71e045893a

November 6, 2022

Score: 10 MALWARE FAMILY: jokerTAGS:family:joker, evasion, infostealer, ransomware, trojanMD5: 7fea757ea8d41dcf19ae0f71e045893aSHA1: 9dc27c1fd80c369118f9caeb864198896c1e10d4ANALYSIS DATE: 2022-11-06T16:39:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – c27a5d94ce500cbf368f35a01ae45ee6

November 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, botnet:mast1000, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: c27a5d94ce500cbf368f35a01ae45ee6SHA1: 195cd4c26260fcd94e541f96b6f20848c2835f74ANALYSIS DATE:...

Malware Analysis – ransomware – f339c9ec92bd0832ba10ac145aace6bc

November 6, 2022

Score: 5 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: f339c9ec92bd0832ba10ac145aace6bcSHA1: a7fbe5d47a0c08ee1185c08c101b0c7621da2f2eANALYSIS DATE: 2022-11-06T17:45:26ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – b9e814a62b41fa8fce7d5e2d0eca430c

November 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: b9e814a62b41fa8fce7d5e2d0eca430cSHA1: c69d2503062e6b9688ff4be6e91a02bd58ee938aANALYSIS DATE: 2022-11-06T17:46:33ZTTPS: T1005, T1081, T1060, T1112, T1222, T1082,...

Malware Analysis – ransomware – faae0c9ff75a84111700e7ee0345747f

November 6, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: faae0c9ff75a84111700e7ee0345747fSHA1: 2f3848bba4a0e9384afd144aa399fbb4a3467f36ANALYSIS DATE: 2022-11-06T17:32:04ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – discovery – 12493d8568e0e4718f1cb98b9c926630

November 6, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, persistenceMD5: 12493d8568e0e4718f1cb98b9c926630SHA1: 23e6dfb75a7be7e3c6dd1abcbf517e3cca1dc3b5ANALYSIS DATE: 2022-11-06T07:52:57ZTTPS: T1060, T1112, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – 23024ab23bc365bf0717613331c85840

November 6, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, persistenceMD5: 23024ab23bc365bf0717613331c85840SHA1: 067ae2baea2307912787cbadfc90eaf21b7cf164ANALYSIS DATE: 2022-11-06T08:08:16ZTTPS: T1060, T1112, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – 09ca2311b84a66711318fb4d2b05b8f6

November 6, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 09ca2311b84a66711318fb4d2b05b8f6SHA1: a82a0de4ca864ebf874a36becbac8df16d222d2fANALYSIS DATE: 2022-11-06T08:14:27ZTTPS: T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – evasion – 0a211295d3703d30c6e181c7e1a6c77f

November 6, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 0a211295d3703d30c6e181c7e1a6c77fSHA1: 2266d5d1ebdd8ee64b8309bac7ecda52890585efANALYSIS DATE: 2022-11-06T08:38:51ZTTPS: T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – adware – 0a3d897064bc8e8f8ead808689a7ef80

November 6, 2022

Score: 8 MALWARE FAMILY: adwareTAGS:adware, discovery, exploit, persistence, stealerMD5: 0a3d897064bc8e8f8ead808689a7ef80SHA1: 6532f8bfe1d1fbcabbc146d5f84d64dd68301c94ANALYSIS DATE: 2022-11-06T08:46:53ZTTPS: T1060, T1112, T1222, T1012, T1120, T1082, T1176...

Malware Analysis – smokeloader – 2212724d7ecac2d8523678b73ab3e017

November 6, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 2212724d7ecac2d8523678b73ab3e017SHA1: 9c6f185bf01f4e92aa23e0fe5c20a738d9651430ANALYSIS DATE: 2022-11-06T09:02:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – 20f8dc3a7b75446aad33e4341ea17c90

November 6, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: 20f8dc3a7b75446aad33e4341ea17c90SHA1: 4bbfa08c1c39f392eba04485c668dd64649538feANALYSIS DATE: 2022-11-06T09:05:17ZTTPS: T1088, T1089, T1112, T1012, T1082, T1060,...

Malware Analysis

Malware Analysis – djvu – 0b4ac285577c9f33c9e3ee30948f4704

Malware Analysis – evasion – 0cda00016dafd9c505d4b491f262f37d

Malware Analysis – djvu – 2a48d7bcfe5050c4a83525bc4b5c455f

Malware Analysis – amadey – 9ad6c9a655878577c8335bd6cf6aaffd

Malware Analysis – amadey – 399dbde569fd5be70901eaf962498ae0

Malware Analysis – djvu – 9af246175d3aad6567d80a9321cbf3f5

Malware Analysis – evasion – 0f31eca0c350bd084573af4fd3c55835

Malware Analysis – evasion – 20092d6774a7a044dccad662d8b6c4e1

Malware Analysis – djvu – 6a7cec5f400a75bc4ba866d1742283d8

Malware Analysis – smokeloader – a8ed8173770845fcdae4c2a5d54540d2

Malware Analysis – wannacry – 32899ed3680e121ffa948bca159a9136

Malware Analysis – djvu – b4e3abf0d3ce1968b7164c9b8aa581e4

Malware Analysis – joker – 7fea757ea8d41dcf19ae0f71e045893a

Malware Analysis – djvu – c27a5d94ce500cbf368f35a01ae45ee6

Malware Analysis – ransomware – f339c9ec92bd0832ba10ac145aace6bc

Malware Analysis – djvu – b9e814a62b41fa8fce7d5e2d0eca430c

Malware Analysis – ransomware – faae0c9ff75a84111700e7ee0345747f

Malware Analysis – discovery – 12493d8568e0e4718f1cb98b9c926630

Malware Analysis – discovery – 23024ab23bc365bf0717613331c85840

Malware Analysis – discovery – 09ca2311b84a66711318fb4d2b05b8f6

Malware Analysis – evasion – 0a211295d3703d30c6e181c7e1a6c77f

Malware Analysis – adware – 0a3d897064bc8e8f8ead808689a7ef80

Malware Analysis – smokeloader – 2212724d7ecac2d8523678b73ab3e017

Malware Analysis – evasion – 20f8dc3a7b75446aad33e4341ea17c90

Cobalt Strike Beacon Detected – 193[.]112[.]83[.]36:8080

Cobalt Strike Beacon Detected – 60[.]204[.]245[.]37:8080

Cobalt Strike Beacon Detected – 118[.]24[.]117[.]221:8080

Cobalt Strike Beacon Detected – 47[.]120[.]13[.]85:8889

Cobalt Strike Beacon Detected – 20[.]41[.]73[.]175:8080

You may have missed