Malware Analysis

Malware Analysis – discovery – 306873e273f3438ba4209c587c584f10

November 6, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 306873e273f3438ba4209c587c584f10SHA1: 32f9869a560f1ac7e52de2233d2360d0af4ad7d3ANALYSIS DATE: 2022-11-06T05:04:41ZTTPS: T1222, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – discovery – 250c1b6bcc5fe9b36a485d0debe048a0

November 6, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 250c1b6bcc5fe9b36a485d0debe048a0SHA1: 5ba0c24a3e61c66793e594be30ba4c2ac9401641ANALYSIS DATE: 2022-11-06T05:04:44ZTTPS: T1222, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – smokeloader – 21e1eef72e17c352692ef0be36c570e4

November 6, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 21e1eef72e17c352692ef0be36c570e4SHA1: 9f86c47eae56197854c5518db9994c34fbbdca67ANALYSIS DATE: 2022-11-06T04:32:06ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 0fb86805bc3c7e0d5ed26bbf57a4724d

November 6, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 0fb86805bc3c7e0d5ed26bbf57a4724dSHA1: 78c9b1e7c52fa37dcb4660397188ec713a2a44c7ANALYSIS DATE: 2022-11-06T05:20:32ZTTPS: T1091, T1005, T1081, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – discovery – 10b60193e3723958abf271e79434dd80

November 6, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 10b60193e3723958abf271e79434dd80SHA1: 6a6552952fe17a8e34248bd947d536bb17ac0327ANALYSIS DATE: 2022-11-06T05:04:47ZTTPS: T1222, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – azov – 7129291fc3d97377200f8a24ad06930a

November 6, 2022

Score: 10 MALWARE FAMILY: azovTAGS:family:azov, persistence, ransomware, spyware, stealer, wiperMD5: 7129291fc3d97377200f8a24ad06930aSHA1: 3f858d2837529e6c973ffa7c26c643e9748e7282ANALYSIS DATE: 2022-11-06T05:24:34ZTTPS: T1005, T1081, T1012, T1120, T1082, T1060,...

Malware Analysis – djvu – 1a1e17a50fc5346c17137b95629d62c8

November 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: 1a1e17a50fc5346c17137b95629d62c8SHA1: 859ea4abdd308bb59136c2e21d412f8c154800e5ANALYSIS DATE: 2022-11-06T05:39:09ZTTPS:...

Malware Analysis – smokeloader – a4e80d2af5df9e2918ebcb4bd8bb26f4

November 6, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: a4e80d2af5df9e2918ebcb4bd8bb26f4SHA1: a6e9113a3c12d3d55cb4e6abd4ee8a8600ffd218ANALYSIS DATE: 2022-11-05T21:34:33ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 9cb04eca9e0c2866a72fd657360a677f

November 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 9cb04eca9e0c2866a72fd657360a677fSHA1: 34a66ff60cd8a0e2543dff4f2b82063349927dc9ANALYSIS DATE: 2022-11-05T21:30:52ZTTPS: T1005, T1081, T1012, T1082, T1060, T1112,...

Malware Analysis – chaos – d7b6db1727fbce074304a7f52e745410

November 6, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, ransomwareMD5: d7b6db1727fbce074304a7f52e745410SHA1: 05289d8730edcf6998f7ca1ee04c15fb1287a106ANALYSIS DATE: 2022-11-05T22:00:32ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – bfbad58a404b8acfb4065c3dd31dd740

November 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: bfbad58a404b8acfb4065c3dd31dd740SHA1: 1a6d008d59959351cb60f39161eb85a25c1befc9ANALYSIS DATE: 2022-11-05T22:22:19ZTTPS: T1082, T1012, T1005, T1081, T1060, T1112,...

Malware Analysis – smokeloader – f7bb27e406c5b92ec0438699eb76c2af

November 6, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: f7bb27e406c5b92ec0438699eb76c2afSHA1: e65e3a09b9eff143917a6ca5283e5c22016634c3ANALYSIS DATE: 2022-11-05T22:31:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 0714fef21fa2058d90d1bc67b2356cc9

November 6, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 0714fef21fa2058d90d1bc67b2356cc9SHA1: c8ac3e16023a064e54384f1eef93d57c71dc2b04ANALYSIS DATE: 2022-11-05T22:14:54ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – – 250a23219a576180547734430d71b0e6

November 6, 2022

Score: 7 MALWARE FAMILY: TAGS:MD5: 250a23219a576180547734430d71b0e6SHA1: a5bcdb824d325d44c5e0feb5bf9389da520e6f82ANALYSIS DATE: 2022-11-05T22:45:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – djvu – 5039097901c0a2d3a17f528c80e49a52

November 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, botnet:mast1000, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: 5039097901c0a2d3a17f528c80e49a52SHA1: fed22f4080fe0cbbf6e7755e71748f53db4c1adcANALYSIS DATE:...

Malware Analysis – djvu – 3581e600b562f13a0a23d301cf45e97f

November 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 3581e600b562f13a0a23d301cf45e97fSHA1: 7bbc34ed95d9f65e08a6440748b1676ef6cf16d8ANALYSIS DATE: 2022-11-05T23:16:20ZTTPS: T1005, T1081, T1060, T1112, T1012, T1053,...

Malware Analysis – djvu – b0f8a4260a89b630ba09bd866b6fae36

November 6, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: b0f8a4260a89b630ba09bd866b6fae36SHA1: 54f8db159fee8cec990873f2a0013e3e4b078dd7ANALYSIS DATE: 2022-11-05T23:52:46ZTTPS: T1060, T1112, T1222, T1082, T1005, T1081,...

Malware Analysis – smokeloader – d009f95436e5463a7fa7f34777bf144d

November 4, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: d009f95436e5463a7fa7f34777bf144dSHA1: 0a6b604a81c747282d8996cc6f525e2d94c894e5ANALYSIS DATE: 2022-11-04T15:42:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – e4cae2a45bcc39307fac1025b6b6a0e7

November 4, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: e4cae2a45bcc39307fac1025b6b6a0e7SHA1: 8ba5159154296c4214d009b2d66ee0fc932a43d0ANALYSIS DATE: 2022-11-04T15:38:32ZTTPS: T1060, T1112, T1082, T1005, T1081, T1012,...

Malware Analysis – ransomware – c164a7ebb4813fda6834f8f086b90ff9

November 4, 2022

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: c164a7ebb4813fda6834f8f086b90ff9SHA1: 1a3577cc48e20c4e1652fb6d84a88f68f46520dfANALYSIS DATE: 2022-11-04T15:00:18ZTTPS: T1082, T1012, T1120, T1018 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – be93f9d3e4d424fbc63f2eafd1f4fee9

November 4, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: be93f9d3e4d424fbc63f2eafd1f4fee9SHA1: 7d5c3e56027f2847da1cf3fe65445b2335305051ANALYSIS DATE: 2022-11-04T16:21:12ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – smokeloader – 04f42a75d636304a10fca42dcf43fe81

November 4, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 04f42a75d636304a10fca42dcf43fe81SHA1: 08c305330fc18de28c7881098fbf57271e7cf3c6ANALYSIS DATE: 2022-11-04T17:12:00ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – b97a1ccc6515bce1ff1d1fd4641e3cfe

November 4, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: b97a1ccc6515bce1ff1d1fd4641e3cfeSHA1: 279026fc4c59439cb4019ce2ca8a06ee3d63c071ANALYSIS DATE: 2022-11-04T17:14:18ZTTPS: T1130, T1112, T1053, T1012, T1082, T1005,...

Malware Analysis – xorist – e598e5ae61f73fb6b3883f6e79f05916

November 4, 2022

Score: 10 MALWARE FAMILY: xoristTAGS:family:xorist, adware, persistence, ransomware, spyware, stealer, upxMD5: e598e5ae61f73fb6b3883f6e79f05916SHA1: 84063d5808f58c73871f8acea020f6a3e2382a30ANALYSIS DATE: 2022-11-04T17:20:12ZTTPS: T1112, T1176, T1060, T1005, T1081,...

Malware Analysis

Malware Analysis – discovery – 306873e273f3438ba4209c587c584f10

Malware Analysis – discovery – 250c1b6bcc5fe9b36a485d0debe048a0

Malware Analysis – smokeloader – 21e1eef72e17c352692ef0be36c570e4

Malware Analysis – ransomware – 0fb86805bc3c7e0d5ed26bbf57a4724d

Malware Analysis – discovery – 10b60193e3723958abf271e79434dd80

Malware Analysis – azov – 7129291fc3d97377200f8a24ad06930a

Malware Analysis – djvu – 1a1e17a50fc5346c17137b95629d62c8

Malware Analysis – smokeloader – a4e80d2af5df9e2918ebcb4bd8bb26f4

Malware Analysis – djvu – 9cb04eca9e0c2866a72fd657360a677f

Malware Analysis – chaos – d7b6db1727fbce074304a7f52e745410

Malware Analysis – djvu – bfbad58a404b8acfb4065c3dd31dd740

Malware Analysis – smokeloader – f7bb27e406c5b92ec0438699eb76c2af

Malware Analysis – smokeloader – 0714fef21fa2058d90d1bc67b2356cc9

Malware Analysis – – 250a23219a576180547734430d71b0e6

Malware Analysis – djvu – 5039097901c0a2d3a17f528c80e49a52

Malware Analysis – djvu – 3581e600b562f13a0a23d301cf45e97f

Malware Analysis – djvu – b0f8a4260a89b630ba09bd866b6fae36

Malware Analysis – smokeloader – d009f95436e5463a7fa7f34777bf144d

Malware Analysis – djvu – e4cae2a45bcc39307fac1025b6b6a0e7

Malware Analysis – ransomware – c164a7ebb4813fda6834f8f086b90ff9

Malware Analysis – ransomware – be93f9d3e4d424fbc63f2eafd1f4fee9

Malware Analysis – smokeloader – 04f42a75d636304a10fca42dcf43fe81

Malware Analysis – djvu – b97a1ccc6515bce1ff1d1fd4641e3cfe

Malware Analysis – xorist – e598e5ae61f73fb6b3883f6e79f05916

[QILIN] – Ransomware Victim: Wasserverband Wulkatal

[QILIN] – Ransomware Victim: Gadge USA

TISZA Világ – 198,520 breached accounts

Cobalt Strike Beacon Detected – 47[.]116[.]208[.]81:8001

Cobalt Strike Beacon Detected – 152[.]136[.]139[.]105:6666

You may have missed