Malware Analysis

Malware Analysis – discovery – 10b60193e3723958abf271e79434dd80

November 6, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 10b60193e3723958abf271e79434dd80SHA1: 6a6552952fe17a8e34248bd947d536bb17ac0327ANALYSIS DATE: 2022-11-06T05:04:47ZTTPS: T1222, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – azov – 7129291fc3d97377200f8a24ad06930a

November 6, 2022

Score: 10 MALWARE FAMILY: azovTAGS:family:azov, persistence, ransomware, spyware, stealer, wiperMD5: 7129291fc3d97377200f8a24ad06930aSHA1: 3f858d2837529e6c973ffa7c26c643e9748e7282ANALYSIS DATE: 2022-11-06T05:24:34ZTTPS: T1005, T1081, T1012, T1120, T1082, T1060,...

Malware Analysis – djvu – 1a1e17a50fc5346c17137b95629d62c8

November 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: 1a1e17a50fc5346c17137b95629d62c8SHA1: 859ea4abdd308bb59136c2e21d412f8c154800e5ANALYSIS DATE: 2022-11-06T05:39:09ZTTPS:...

Malware Analysis – smokeloader – a4e80d2af5df9e2918ebcb4bd8bb26f4

November 6, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: a4e80d2af5df9e2918ebcb4bd8bb26f4SHA1: a6e9113a3c12d3d55cb4e6abd4ee8a8600ffd218ANALYSIS DATE: 2022-11-05T21:34:33ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 9cb04eca9e0c2866a72fd657360a677f

November 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 9cb04eca9e0c2866a72fd657360a677fSHA1: 34a66ff60cd8a0e2543dff4f2b82063349927dc9ANALYSIS DATE: 2022-11-05T21:30:52ZTTPS: T1005, T1081, T1012, T1082, T1060, T1112,...

Malware Analysis – smokeloader – f7bb27e406c5b92ec0438699eb76c2af

November 6, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: f7bb27e406c5b92ec0438699eb76c2afSHA1: e65e3a09b9eff143917a6ca5283e5c22016634c3ANALYSIS DATE: 2022-11-05T22:31:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 0714fef21fa2058d90d1bc67b2356cc9

November 6, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 0714fef21fa2058d90d1bc67b2356cc9SHA1: c8ac3e16023a064e54384f1eef93d57c71dc2b04ANALYSIS DATE: 2022-11-05T22:14:54ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – chaos – d7b6db1727fbce074304a7f52e745410

November 6, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, ransomwareMD5: d7b6db1727fbce074304a7f52e745410SHA1: 05289d8730edcf6998f7ca1ee04c15fb1287a106ANALYSIS DATE: 2022-11-05T22:00:32ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – bfbad58a404b8acfb4065c3dd31dd740

November 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: bfbad58a404b8acfb4065c3dd31dd740SHA1: 1a6d008d59959351cb60f39161eb85a25c1befc9ANALYSIS DATE: 2022-11-05T22:22:19ZTTPS: T1082, T1012, T1005, T1081, T1060, T1112,...

Malware Analysis – – 250a23219a576180547734430d71b0e6

November 6, 2022

Score: 7 MALWARE FAMILY: TAGS:MD5: 250a23219a576180547734430d71b0e6SHA1: a5bcdb824d325d44c5e0feb5bf9389da520e6f82ANALYSIS DATE: 2022-11-05T22:45:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – djvu – 5039097901c0a2d3a17f528c80e49a52

November 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, botnet:mast1000, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: 5039097901c0a2d3a17f528c80e49a52SHA1: fed22f4080fe0cbbf6e7755e71748f53db4c1adcANALYSIS DATE:...

Malware Analysis – djvu – 3581e600b562f13a0a23d301cf45e97f

November 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 3581e600b562f13a0a23d301cf45e97fSHA1: 7bbc34ed95d9f65e08a6440748b1676ef6cf16d8ANALYSIS DATE: 2022-11-05T23:16:20ZTTPS: T1005, T1081, T1060, T1112, T1012, T1053,...

Malware Analysis – djvu – b0f8a4260a89b630ba09bd866b6fae36

November 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: b0f8a4260a89b630ba09bd866b6fae36SHA1: 54f8db159fee8cec990873f2a0013e3e4b078dd7ANALYSIS DATE: 2022-11-05T23:52:46ZTTPS: T1060, T1112, T1222, T1082, T1005, T1081,...

Malware Analysis – smokeloader – d009f95436e5463a7fa7f34777bf144d

November 4, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: d009f95436e5463a7fa7f34777bf144dSHA1: 0a6b604a81c747282d8996cc6f525e2d94c894e5ANALYSIS DATE: 2022-11-04T15:42:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – e4cae2a45bcc39307fac1025b6b6a0e7

November 4, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: e4cae2a45bcc39307fac1025b6b6a0e7SHA1: 8ba5159154296c4214d009b2d66ee0fc932a43d0ANALYSIS DATE: 2022-11-04T15:38:32ZTTPS: T1060, T1112, T1082, T1005, T1081, T1012,...

Malware Analysis – ransomware – c164a7ebb4813fda6834f8f086b90ff9

November 4, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: c164a7ebb4813fda6834f8f086b90ff9SHA1: 1a3577cc48e20c4e1652fb6d84a88f68f46520dfANALYSIS DATE: 2022-11-04T15:00:18ZTTPS: T1082, T1012, T1120, T1018 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – be93f9d3e4d424fbc63f2eafd1f4fee9

November 4, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: be93f9d3e4d424fbc63f2eafd1f4fee9SHA1: 7d5c3e56027f2847da1cf3fe65445b2335305051ANALYSIS DATE: 2022-11-04T16:21:12ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – smokeloader – 04f42a75d636304a10fca42dcf43fe81

November 4, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 04f42a75d636304a10fca42dcf43fe81SHA1: 08c305330fc18de28c7881098fbf57271e7cf3c6ANALYSIS DATE: 2022-11-04T17:12:00ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – b97a1ccc6515bce1ff1d1fd4641e3cfe

November 4, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: b97a1ccc6515bce1ff1d1fd4641e3cfeSHA1: 279026fc4c59439cb4019ce2ca8a06ee3d63c071ANALYSIS DATE: 2022-11-04T17:14:18ZTTPS: T1130, T1112, T1053, T1012, T1082, T1005,...

Malware Analysis – xorist – e598e5ae61f73fb6b3883f6e79f05916

November 4, 2022

Score: 10 MALWARE FAMILY: xoristTAGS:family:xorist, adware, persistence, ransomware, spyware, stealer, upxMD5: e598e5ae61f73fb6b3883f6e79f05916SHA1: 84063d5808f58c73871f8acea020f6a3e2382a30ANALYSIS DATE: 2022-11-04T17:20:12ZTTPS: T1112, T1176, T1060, T1005, T1081,...

Malware Analysis – djvu – 4caa7052f4ee833a16c8c0ba7f0db275

November 4, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, botnet:slovarik1btc, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: 4caa7052f4ee833a16c8c0ba7f0db275SHA1: 8e4fb478b445822a78c4722b53f4ff3f180a32ecANALYSIS DATE:...

Malware Analysis – discovery – 199cad31ad21ac6a8edb62035892669a

November 4, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, ransomwareMD5: 199cad31ad21ac6a8edb62035892669aSHA1: abc8509b631cdd4063f4bb22213ad9961043cfd6ANALYSIS DATE: 2022-11-04T09:59:30ZTTPS: T1082, T1057, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – ef7834fb0c42f4ee862e531bf570227b

November 4, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, botnet:mario23_10, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: ef7834fb0c42f4ee862e531bf570227bSHA1: 761538aa9bed93f4bb3252c04d6856904d93811fANALYSIS DATE:...

Malware Analysis – smokeloader – 8c5802d28df242578c2b1bf06fb05816

November 4, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 8c5802d28df242578c2b1bf06fb05816SHA1: 4f851c4b86f65c1198512865742eac529f7c7284ANALYSIS DATE: 2022-11-04T11:34:29ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis

Malware Analysis – discovery – 10b60193e3723958abf271e79434dd80

Malware Analysis – azov – 7129291fc3d97377200f8a24ad06930a

Malware Analysis – djvu – 1a1e17a50fc5346c17137b95629d62c8

Malware Analysis – smokeloader – a4e80d2af5df9e2918ebcb4bd8bb26f4

Malware Analysis – djvu – 9cb04eca9e0c2866a72fd657360a677f

Malware Analysis – smokeloader – f7bb27e406c5b92ec0438699eb76c2af

Malware Analysis – smokeloader – 0714fef21fa2058d90d1bc67b2356cc9

Malware Analysis – chaos – d7b6db1727fbce074304a7f52e745410

Malware Analysis – djvu – bfbad58a404b8acfb4065c3dd31dd740

Malware Analysis – – 250a23219a576180547734430d71b0e6

Malware Analysis – djvu – 5039097901c0a2d3a17f528c80e49a52

Malware Analysis – djvu – 3581e600b562f13a0a23d301cf45e97f

Malware Analysis – djvu – b0f8a4260a89b630ba09bd866b6fae36

Malware Analysis – smokeloader – d009f95436e5463a7fa7f34777bf144d

Malware Analysis – djvu – e4cae2a45bcc39307fac1025b6b6a0e7

Malware Analysis – ransomware – c164a7ebb4813fda6834f8f086b90ff9

Malware Analysis – ransomware – be93f9d3e4d424fbc63f2eafd1f4fee9

Malware Analysis – smokeloader – 04f42a75d636304a10fca42dcf43fe81

Malware Analysis – djvu – b97a1ccc6515bce1ff1d1fd4641e3cfe

Malware Analysis – xorist – e598e5ae61f73fb6b3883f6e79f05916

Malware Analysis – djvu – 4caa7052f4ee833a16c8c0ba7f0db275

Malware Analysis – discovery – 199cad31ad21ac6a8edb62035892669a

Malware Analysis – djvu – ef7834fb0c42f4ee862e531bf570227b

Malware Analysis – smokeloader – 8c5802d28df242578c2b1bf06fb05816

Cobalt Strike Beacon Detected – 193[.]112[.]83[.]36:8080

Cobalt Strike Beacon Detected – 60[.]204[.]245[.]37:8080

Cobalt Strike Beacon Detected – 118[.]24[.]117[.]221:8080

Cobalt Strike Beacon Detected – 47[.]120[.]13[.]85:8889

Cobalt Strike Beacon Detected – 20[.]41[.]73[.]175:8080

You may have missed