Malware Analysis

Malware Analysis – djvu – 4caa7052f4ee833a16c8c0ba7f0db275

November 4, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, botnet:slovarik1btc, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: 4caa7052f4ee833a16c8c0ba7f0db275SHA1: 8e4fb478b445822a78c4722b53f4ff3f180a32ecANALYSIS DATE:...

Malware Analysis – discovery – 199cad31ad21ac6a8edb62035892669a

November 4, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, ransomwareMD5: 199cad31ad21ac6a8edb62035892669aSHA1: abc8509b631cdd4063f4bb22213ad9961043cfd6ANALYSIS DATE: 2022-11-04T09:59:30ZTTPS: T1082, T1057, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – ef7834fb0c42f4ee862e531bf570227b

November 4, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, botnet:mario23_10, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: ef7834fb0c42f4ee862e531bf570227bSHA1: 761538aa9bed93f4bb3252c04d6856904d93811fANALYSIS DATE:...

Malware Analysis – smokeloader – 8c5802d28df242578c2b1bf06fb05816

November 4, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 8c5802d28df242578c2b1bf06fb05816SHA1: 4f851c4b86f65c1198512865742eac529f7c7284ANALYSIS DATE: 2022-11-04T11:34:29ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 2edfe3bc031c5cc9cc5bdf18aa7c3a02

November 4, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 2edfe3bc031c5cc9cc5bdf18aa7c3a02SHA1: b557b50822a2d788b410ead1e005197a0a4130d7ANALYSIS DATE: 2022-11-04T10:56:05ZTTPS: T1005, T1081, T1222, T1082, T1012, T1060,...

Malware Analysis – djvu – ac975fb5af0a817d64a23d721b525548

November 4, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: ac975fb5af0a817d64a23d721b525548SHA1: 45c53870a65c9fb494ab5e522a9a52124f0c60b6ANALYSIS DATE: 2022-11-04T10:31:04ZTTPS: T1130, T1112, T1060, T1222, T1082, T1053 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – 46caeb9b470ef973d88cace1fae23f25

November 4, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, botnet:slovarik1btc, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: 46caeb9b470ef973d88cace1fae23f25SHA1: 3d8c919f658bdcb22e96bc55852db4dd565fce2aANALYSIS DATE:...

Malware Analysis – – 045f8512e0b82b10dcd510492ae75a02

November 4, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 045f8512e0b82b10dcd510492ae75a02SHA1: db7936f5f9e2f75634f5b39597bd68e1dc2d9618ANALYSIS DATE: 2022-11-04T03:18:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – wannacry – 328ec0632c2a5318d3c189eceab6b488

November 4, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 328ec0632c2a5318d3c189eceab6b488SHA1: bbd958285c9744c460f7da1ccda942c47d245cc6ANALYSIS DATE: 2022-11-04T03:00:34ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – a8cf6c4ce9bae2e0433a9d6f5a9090b0

November 4, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, botnet:mario23_10, botnet:slovarik1btc, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: a8cf6c4ce9bae2e0433a9d6f5a9090b0SHA1: 2b33cde4309e82bb278132dfddbf90319b2c9139ANALYSIS...

Malware Analysis – djvu – c8974837ee9e62f78817492ef2cc71ff

November 4, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, botnet:mario23_10, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: c8974837ee9e62f78817492ef2cc71ffSHA1: 7e580765dd04d1c42c33611d39bd2682f0e5aa29ANALYSIS DATE:...

Malware Analysis – smokeloader – 8611fcd3c059993ae37c038f0682507a

November 4, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 8611fcd3c059993ae37c038f0682507aSHA1: 82a2f78e8594faff95889690b93fb37ed96ad242ANALYSIS DATE: 2022-11-04T05:05:33ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – dc64e4857ede57bf4a938088261cbce4

November 4, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: dc64e4857ede57bf4a938088261cbce4SHA1: 4f35ebc663ef9df15ddd9e5676f63e43a0138665ANALYSIS DATE: 2022-11-04T05:31:17ZTTPS: T1053, T1005, T1081, T1012, T1060, T1112,...

Malware Analysis – smokeloader – 8aeee4f03c86f2d4377129edc204d26c

November 4, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 8aeee4f03c86f2d4377129edc204d26cSHA1: 931c011b463b6f122ff0009d1cbb022786ea70acANALYSIS DATE: 2022-11-04T05:31:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 52f22a333f60f4af27239ae51eb9d3d7

November 4, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 52f22a333f60f4af27239ae51eb9d3d7SHA1: 3bc9e4286878a61737763f260e5eefec96f1f20bANALYSIS DATE: 2022-11-04T05:51:22ZTTPS: T1012, T1082, T1053, T1005, T1081, T1060,...

Malware Analysis – djvu – 699492f15db1ff4e2986033063127fc5

November 4, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 699492f15db1ff4e2986033063127fc5SHA1: 13813b993be8b1840d40a71fc35e430a17c18b2cANALYSIS DATE: 2022-11-03T21:20:05ZTTPS: T1130, T1112, T1060, T1222, T1082, T1053 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – 541c0d595c06b744bc017f57a3f4a62c

November 4, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, botnet:slovarik1btc, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: 541c0d595c06b744bc017f57a3f4a62cSHA1: c3e3cf1d2b0fdb30801cac652c10b0b114b2ed96ANALYSIS DATE:...

Malware Analysis – djvu – fede749488d54142d94708f511161471

November 4, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, botnet:google2, botnet:slovarik1btc, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: fede749488d54142d94708f511161471SHA1: 03a60a830d6c0164674ce25e33d32d9ece0b4a80ANALYSIS...

Malware Analysis – djvu – 27e35280d11289868999c49386ffc464

November 4, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 27e35280d11289868999c49386ffc464SHA1: b849a693fca46527e864ff72c7d1feb5da924b5aANALYSIS DATE: 2022-11-03T22:02:46ZTTPS: T1222, T1082, T1012, T1005, T1081, T1060,...

Malware Analysis – djvu – c15d429af10a5dadaabad820b29cb1d2

November 4, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, botnet:google2, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: c15d429af10a5dadaabad820b29cb1d2SHA1: 9fc1b439ec70adafb20b5b9326e26425cd2bf6d2ANALYSIS DATE:...

Malware Analysis – djvu – 7f32cdd1db495a336145bca2758b2e06

November 4, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 7f32cdd1db495a336145bca2758b2e06SHA1: f2bf30b2935aebe75f68d2e57ccae512421acee3ANALYSIS DATE: 2022-11-03T22:20:41ZTTPS: T1060, T1112, T1082, T1005, T1081, T1222,...

Malware Analysis – discovery – b4775fcffd1877ffa155fffc0832cbd8

November 4, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, evasion, exploit, persistenceMD5: b4775fcffd1877ffa155fffc0832cbd8SHA1: c1e419c89fbd9aadcd1d436ec2c98f3be1db8dadANALYSIS DATE: 2022-11-03T23:19:51ZTTPS: T1112, T1082, T1158, T1222, T1060, T1031, T1562, T1489...

Malware Analysis – smokeloader – 09dc0f75d1c3abf6ee1e64e53ba8360b

November 4, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 09dc0f75d1c3abf6ee1e64e53ba8360bSHA1: 172a1d68594d260d938354502195a4a78eabc15fANALYSIS DATE: 2022-11-03T22:36:12ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – troldesh – cc2bd1e896fe8dc1a0116527d6f00b43

November 4, 2022

Score: 10 MALWARE FAMILY: troldeshTAGS:family:troldesh, discovery, persistence, ransomware, spyware, stealer, trojan, upxMD5: cc2bd1e896fe8dc1a0116527d6f00b43SHA1: 3be26ba3ef9b854062acfdc603d068755863282fANALYSIS DATE: 2022-11-03T23:49:57ZTTPS: T1082, T1005, T1081, T1107,...

Malware Analysis

Malware Analysis – djvu – 4caa7052f4ee833a16c8c0ba7f0db275

Malware Analysis – discovery – 199cad31ad21ac6a8edb62035892669a

Malware Analysis – djvu – ef7834fb0c42f4ee862e531bf570227b

Malware Analysis – smokeloader – 8c5802d28df242578c2b1bf06fb05816

Malware Analysis – djvu – 2edfe3bc031c5cc9cc5bdf18aa7c3a02

Malware Analysis – djvu – ac975fb5af0a817d64a23d721b525548

Malware Analysis – djvu – 46caeb9b470ef973d88cace1fae23f25

Malware Analysis – – 045f8512e0b82b10dcd510492ae75a02

Malware Analysis – wannacry – 328ec0632c2a5318d3c189eceab6b488

Malware Analysis – djvu – a8cf6c4ce9bae2e0433a9d6f5a9090b0

Malware Analysis – djvu – c8974837ee9e62f78817492ef2cc71ff

Malware Analysis – smokeloader – 8611fcd3c059993ae37c038f0682507a

Malware Analysis – djvu – dc64e4857ede57bf4a938088261cbce4

Malware Analysis – smokeloader – 8aeee4f03c86f2d4377129edc204d26c

Malware Analysis – djvu – 52f22a333f60f4af27239ae51eb9d3d7

Malware Analysis – djvu – 699492f15db1ff4e2986033063127fc5

Malware Analysis – djvu – 541c0d595c06b744bc017f57a3f4a62c

Malware Analysis – djvu – fede749488d54142d94708f511161471

Malware Analysis – djvu – 27e35280d11289868999c49386ffc464

Malware Analysis – djvu – c15d429af10a5dadaabad820b29cb1d2

Malware Analysis – djvu – 7f32cdd1db495a336145bca2758b2e06

Malware Analysis – discovery – b4775fcffd1877ffa155fffc0832cbd8

Malware Analysis – smokeloader – 09dc0f75d1c3abf6ee1e64e53ba8360b

Malware Analysis – troldesh – cc2bd1e896fe8dc1a0116527d6f00b43

TISZA Világ – 198,520 breached accounts

Cobalt Strike Beacon Detected – 47[.]116[.]208[.]81:8001

Cobalt Strike Beacon Detected – 152[.]136[.]139[.]105:6666

Cobalt Strike Beacon Detected – 47[.]120[.]70[.]161:6666

Cobalt Strike Beacon Detected – 106[.]75[.]215[.]96:8081

You may have missed