Malware Analysis

Malware Analysis – smokeloader – f93f2422c55f945845b58f89ac271a98

November 6, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: f93f2422c55f945845b58f89ac271a98SHA1: de9bcc38486eda24c6eaa8ea41daeacf3739e6c5ANALYSIS DATE: 2022-11-06T09:31:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – 09c9cc3ad2ce8533dc525922f59ba5f1

November 6, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 09c9cc3ad2ce8533dc525922f59ba5f1SHA1: 287b44545e7e3c350f228959675a6499d6bf4a91ANALYSIS DATE: 2022-11-06T09:13:30ZTTPS: T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – discovery – 3b25ea812162be530e7f824533765a20

November 6, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, persistenceMD5: 3b25ea812162be530e7f824533765a20SHA1: 68f5d8cbf8517b0f06468c9d0d6d585072fd69b5ANALYSIS DATE: 2022-11-06T09:49:21ZTTPS: T1060, T1112, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – 31e822142b821050a1d9a440b3e10836

November 6, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomware, spyware, stealer, vmprotectMD5: 31e822142b821050a1d9a440b3e10836SHA1: 8d3a09107b308eef76db21ea09b7081530b9b2f8ANALYSIS DATE: 2022-11-06T09:31:08ZTTPS: T1012, T1082, T1005, T1081, T1107, T1490, T1112,...

Malware Analysis – discovery – 2308c0ef8af77bdfe3b73238c758d171

November 6, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, persistenceMD5: 2308c0ef8af77bdfe3b73238c758d171SHA1: 4e467083db470ee57517886631bac97d27c75595ANALYSIS DATE: 2022-11-06T09:41:52ZTTPS: T1060, T1112, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 913a7259cfb60933171036d6de2f0ca5

November 6, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 913a7259cfb60933171036d6de2f0ca5SHA1: 63a2fe5e1c7e19fadb2eeb37eb0de59d23924c1fANALYSIS DATE: 2022-11-06T10:33:25ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – wannacry – 48482583c7d32290b3319faffc948969

November 6, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 48482583c7d32290b3319faffc948969SHA1: 070a837386b10c1fc878cfaccea18a8988a02f1dANALYSIS DATE: 2022-11-06T11:40:24ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – smokeloader – 399dbde569fd5be70901eaf962498ae0

November 6, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 399dbde569fd5be70901eaf962498ae0SHA1: baadce40115cb93b2f5a9715df829c9ba0b5cff4ANALYSIS DATE: 2022-11-06T11:34:30ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – persistence – 753b10b7a41aa3cbb9aacbb18f609f75

November 6, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 753b10b7a41aa3cbb9aacbb18f609f75SHA1: b7e2b6db6a32746f31203a130814888f7ab51eabANALYSIS DATE: 2022-11-06T11:24:39ZTTPS: T1060, T1130, T1112, T1012, T1082, T1120 ScoreMeaningExample10Known badA malware family...

Malware Analysis – chaos – ea0eddceefd20c303a1e844ce7eed747

November 6, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, ransomware, spyware, stealerMD5: ea0eddceefd20c303a1e844ce7eed747SHA1: be960535747fcb679363cb74b77fe60dbe8f1babANALYSIS DATE: 2022-11-06T11:43:03ZTTPS: T1490, T1059, T1107, T1005, T1081, T1082, T1491,...

Malware Analysis – wannacry – 199bcd85f09b424e79e5e971b435f029

November 6, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 199bcd85f09b424e79e5e971b435f029SHA1: b72be60efb40b3405d9cd08e700e4769765f8b53ANALYSIS DATE: 2022-11-06T03:00:51ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – 9cd308b76d8e9d815c9e8b16ac91a009

November 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 9cd308b76d8e9d815c9e8b16ac91a009SHA1: 7e9778886f03970b7dd59315125568b55d1a9605ANALYSIS DATE: 2022-11-06T04:04:42ZTTPS: T1130, T1112, T1060, T1222, T1082, T1053 ScoreMeaningExample10Known badA...

Malware Analysis – smokeloader – 38b9cb090f2a2600849848914d1a7e9d

November 6, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 38b9cb090f2a2600849848914d1a7e9dSHA1: 9a652dc66ec926e4587b406c83ed29415844c231ANALYSIS DATE: 2022-11-06T03:42:31ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – adware – 31fc29eaf6a68de98f5e3f0d5ba27750

November 6, 2022

Score: 8 MALWARE FAMILY: adwareTAGS:adware, discovery, exploit, persistence, stealer, upxMD5: 31fc29eaf6a68de98f5e3f0d5ba27750SHA1: 082a15a5c65eb5049f420e0c3c7e3dce630ed816ANALYSIS DATE: 2022-11-06T04:18:58ZTTPS: T1112, T1176, T1060, T1222 ScoreMeaningExample10Known badA...

Malware Analysis – smokeloader – 9406cd9075e57c5bf28b8a5ab2eb3186

November 6, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 9406cd9075e57c5bf28b8a5ab2eb3186SHA1: de4b70864539064c383ad108e001efa8a74526ecANALYSIS DATE: 2022-11-06T03:34:50ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – adware – 30898d305c059d8c1e74b4b3bfc46db0

November 6, 2022

Score: 8 MALWARE FAMILY: adwareTAGS:adware, discovery, exploit, persistence, stealer, upxMD5: 30898d305c059d8c1e74b4b3bfc46db0SHA1: b68399ee1dc5777839879400674ac94f694aca96ANALYSIS DATE: 2022-11-06T04:19:00ZTTPS: T1222, T1112, T1176, T1060 ScoreMeaningExample10Known badA...

Malware Analysis – adware – 204bfeaaa385a07a53d0368d6ca56ad0

November 6, 2022

Score: 8 MALWARE FAMILY: adwareTAGS:adware, discovery, exploit, persistence, stealer, upxMD5: 204bfeaaa385a07a53d0368d6ca56ad0SHA1: c9de1a8d55452874be23182e4d7093e5a8521fb4ANALYSIS DATE: 2022-11-06T04:19:06ZTTPS: T1222, T1112, T1176, T1060 ScoreMeaningExample10Known badA...

Malware Analysis – adware – 13797d259eae7789cb3c0284f0260b10

November 6, 2022

Score: 8 MALWARE FAMILY: adwareTAGS:adware, discovery, exploit, persistence, stealer, upxMD5: 13797d259eae7789cb3c0284f0260b10SHA1: bfca5302ac52dbec668392e3572f06ca66b5e9abANALYSIS DATE: 2022-11-06T04:19:03ZTTPS: T1112, T1176, T1060, T1222 ScoreMeaningExample10Known badA...

Malware Analysis – evasion – 10a428250ce76a2d5e1a099237271790

November 6, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, spyware, stealer, trojan, upxMD5: 10a428250ce76a2d5e1a099237271790SHA1: 0201d09c99010311846c39024cbac153ead2c74fANALYSIS DATE: 2022-11-06T04:23:47ZTTPS: T1082, T1088, T1089, T1112, T1031, T1005,...

Malware Analysis – discovery – 157e936faae225b8bb827a469d9955c0

November 6, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, persistenceMD5: 157e936faae225b8bb827a469d9955c0SHA1: 54dfd788c00af47c5047f5485bdc15987c89e05dANALYSIS DATE: 2022-11-06T04:26:56ZTTPS: T1060, T1112, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – 306873e273f3438ba4209c587c584f10

November 6, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 306873e273f3438ba4209c587c584f10SHA1: 32f9869a560f1ac7e52de2233d2360d0af4ad7d3ANALYSIS DATE: 2022-11-06T05:04:41ZTTPS: T1222, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – discovery – 250c1b6bcc5fe9b36a485d0debe048a0

November 6, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 250c1b6bcc5fe9b36a485d0debe048a0SHA1: 5ba0c24a3e61c66793e594be30ba4c2ac9401641ANALYSIS DATE: 2022-11-06T05:04:44ZTTPS: T1222, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – smokeloader – 21e1eef72e17c352692ef0be36c570e4

November 6, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 21e1eef72e17c352692ef0be36c570e4SHA1: 9f86c47eae56197854c5518db9994c34fbbdca67ANALYSIS DATE: 2022-11-06T04:32:06ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 0fb86805bc3c7e0d5ed26bbf57a4724d

November 6, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 0fb86805bc3c7e0d5ed26bbf57a4724dSHA1: 78c9b1e7c52fa37dcb4660397188ec713a2a44c7ANALYSIS DATE: 2022-11-06T05:20:32ZTTPS: T1091, T1005, T1081, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis

Malware Analysis – smokeloader – f93f2422c55f945845b58f89ac271a98

Malware Analysis – discovery – 09c9cc3ad2ce8533dc525922f59ba5f1

Malware Analysis – discovery – 3b25ea812162be530e7f824533765a20

Malware Analysis – evasion – 31e822142b821050a1d9a440b3e10836

Malware Analysis – discovery – 2308c0ef8af77bdfe3b73238c758d171

Malware Analysis – smokeloader – 913a7259cfb60933171036d6de2f0ca5

Malware Analysis – wannacry – 48482583c7d32290b3319faffc948969

Malware Analysis – smokeloader – 399dbde569fd5be70901eaf962498ae0

Malware Analysis – persistence – 753b10b7a41aa3cbb9aacbb18f609f75

Malware Analysis – chaos – ea0eddceefd20c303a1e844ce7eed747

Malware Analysis – wannacry – 199bcd85f09b424e79e5e971b435f029

Malware Analysis – djvu – 9cd308b76d8e9d815c9e8b16ac91a009

Malware Analysis – smokeloader – 38b9cb090f2a2600849848914d1a7e9d

Malware Analysis – adware – 31fc29eaf6a68de98f5e3f0d5ba27750

Malware Analysis – smokeloader – 9406cd9075e57c5bf28b8a5ab2eb3186

Malware Analysis – adware – 30898d305c059d8c1e74b4b3bfc46db0

Malware Analysis – adware – 204bfeaaa385a07a53d0368d6ca56ad0

Malware Analysis – adware – 13797d259eae7789cb3c0284f0260b10

Malware Analysis – evasion – 10a428250ce76a2d5e1a099237271790

Malware Analysis – discovery – 157e936faae225b8bb827a469d9955c0

Malware Analysis – discovery – 306873e273f3438ba4209c587c584f10

Malware Analysis – discovery – 250c1b6bcc5fe9b36a485d0debe048a0

Malware Analysis – smokeloader – 21e1eef72e17c352692ef0be36c570e4

Malware Analysis – ransomware – 0fb86805bc3c7e0d5ed26bbf57a4724d

Cobalt Strike Beacon Detected – 193[.]112[.]83[.]36:8080

Cobalt Strike Beacon Detected – 60[.]204[.]245[.]37:8080

Cobalt Strike Beacon Detected – 118[.]24[.]117[.]221:8080

Cobalt Strike Beacon Detected – 47[.]120[.]13[.]85:8889

Cobalt Strike Beacon Detected – 20[.]41[.]73[.]175:8080

You may have missed