Malware Analysis

Malware Analysis – ransomware – 0ae5fddc4a858868fc3db14c51618116

November 2, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 0ae5fddc4a858868fc3db14c51618116SHA1: a57b0f1ded08abcb8f2430d0d54e2f51df91e8f6ANALYSIS DATE: 2022-11-02T15:19:58ZTTPS: T1005, T1081, T1107, T1490, T1082, T1012, T1120 ScoreMeaningExample10Known badA...

Malware Analysis – evasion – 6671d139c65f08a309f41703287409a4

November 2, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealerMD5: 6671d139c65f08a309f41703287409a4SHA1: e94def6f8384999a6c994c4e26c52c13f458271cANALYSIS DATE: 2022-11-02T15:20:15ZTTPS: T1107, T1490, T1070, T1005, T1081, T1018, T1158,...

Malware Analysis – medusalocker – 87fc357cfaa43f6766a5efef072871bc

November 2, 2022

Score: 10 MALWARE FAMILY: medusalockerTAGS:family:medusalocker, evasion, ransomware, spyware, stealer, trojanMD5: 87fc357cfaa43f6766a5efef072871bcSHA1: ab77612d19ab9ec9f3bff9f13bf18cffc82799a7ANALYSIS DATE: 2022-11-02T15:21:10ZTTPS: T1082, T1005, T1081, T1088, T1089, T1112,...

Malware Analysis – evasion – 813704db631ee44f572b4cd0c1067695

November 2, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomware, trojanMD5: 813704db631ee44f572b4cd0c1067695SHA1: ca9118d99b160b3b5fb12df9230831eaec400dd1ANALYSIS DATE: 2022-11-02T15:20:05ZTTPS: T1112, T1088, T1089, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – amadey – 0ea04d00739c5b503ac7a0b085a4e07d

November 2, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, botnet:mario23_10, botnet:slovarik1btc, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojan, upxMD5:...

Malware Analysis – djvu – e20a320b8ff66f8e136150233f22e369

November 2, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, botnet:mario23_10, botnet:slovarik1btc, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: e20a320b8ff66f8e136150233f22e369SHA1: 18e52d360e4c171cf1a28986c33450350143fb10ANALYSIS...

Malware Analysis – evasion – 183ad97d55d1170f21a8d10a8339fdab

November 2, 2022

Score: 6 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 183ad97d55d1170f21a8d10a8339fdabSHA1: 427b302690b2418b5b414fee3ac6ce585e6fe375ANALYSIS DATE: 2022-11-02T16:06:02ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – 9a164cede19b9203c508c386fabb2a45

November 2, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 9a164cede19b9203c508c386fabb2a45SHA1: f00e3ed4d51a5296ce350ec071c0e8ede05f3cdfANALYSIS DATE: 2022-11-02T16:21:17ZTTPS: T1005, T1081, T1222, T1053, T1012, T1082,...

Malware Analysis – discovery – 0dde0c9450eed08bf80da8f7a2ec2a86

November 2, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, pyinstaller, ransomware, upxMD5: 0dde0c9450eed08bf80da8f7a2ec2a86SHA1: 9bfd776b25d4eeb9224adff4846471d12cbe285eANALYSIS DATE: 2022-11-02T09:15:49ZTTPS: T1012, T1082, T1060, T1120 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – eadb17b5927d0d3ede787219fe4cdf16

November 2, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: eadb17b5927d0d3ede787219fe4cdf16SHA1: 8cacc18b9c25bc93ba340f5b1902f783ca23a4b6ANALYSIS DATE: 2022-11-02T09:06:38ZTTPS: T1031, T1082, T1112, T1107, T1490, T1012, T1060, T1120 ScoreMeaningExample10Known...

Malware Analysis – djvu – 4a399bbce7a83483767712b5f4f1b080

November 2, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 4a399bbce7a83483767712b5f4f1b080SHA1: 742529c0d685527f8aa72c530819a72379117103ANALYSIS DATE: 2022-11-02T10:20:31ZTTPS: T1082, T1005, T1081, T1012, T1060, T1112,...

Malware Analysis – evasion – 1829589d95bdd2c30f0bef154decd426

November 2, 2022

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 1829589d95bdd2c30f0bef154decd426SHA1: 0c173a34bece843e8e30024c18a9307038f223f4ANALYSIS DATE: 2022-11-02T10:08:13ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – smokeloader – 52db9d38ee83efe292d8e51e7fdbf19d

November 2, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 52db9d38ee83efe292d8e51e7fdbf19dSHA1: e6dc2646fd00cc12745eec29ddda38fbfdf5494dANALYSIS DATE: 2022-11-02T10:02:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 1552564d0af2fa30bbb740b1a0ad54a2

November 2, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 1552564d0af2fa30bbb740b1a0ad54a2SHA1: 95c378e063cfeeea3a7cf3e7857234baf3877e88ANALYSIS DATE: 2022-11-02T10:11:03ZTTPS: T1130, T1112, T1060, T1053, T1005, T1081,...

Malware Analysis – amadey – c2d648c94f708dca1cbe10cb60260fa9

November 2, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, botnet:google2, botnet:mario23_10, botnet:slovarik1btc, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5:...

Malware Analysis – djvu – 683716645ccd5866870caf64f21951b2

November 2, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 683716645ccd5866870caf64f21951b2SHA1: 0c138fa06311cc75246c0ee61a2e70fee37cde9eANALYSIS DATE: 2022-11-02T10:21:04ZTTPS: T1222, T1082, T1053, T1005, T1081, T1130,...

Malware Analysis – djvu – 537ecc10bd947a0dd5d9088bf6474fa2

November 2, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 537ecc10bd947a0dd5d9088bf6474fa2SHA1: 6138e922e5bf72d482cb563e1c52486dbe8b9669ANALYSIS DATE: 2022-11-02T11:40:58ZTTPS: T1005, T1081, T1012, T1082, T1222, T1060,...

Malware Analysis – smokeloader – e9f9bedb14d80d6e30192745de74347d

November 2, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: e9f9bedb14d80d6e30192745de74347dSHA1: b1cabbccfdb258835d8684efc400a7db6c3d6498ANALYSIS DATE: 2022-11-02T11:37:01ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – wannacry – eab40b007ca86f362aa392d43847639e

November 2, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: eab40b007ca86f362aa392d43847639eSHA1: 167b8a4514604ec8c2a63d5eaaa3fe9b08e943ceANALYSIS DATE: 2022-11-02T03:00:25ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – d56f709686e8300b90bf1f532b451098

November 2, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: d56f709686e8300b90bf1f532b451098SHA1: 1d560b72e07df6b61824e80505d5fb96a5b11fd9ANALYSIS DATE: 2022-11-02T03:00:33ZTTPS: T1082, T1053, T1005, T1081, T1012, T1060,...

Malware Analysis – – a4fcfcab7e8f332fde1df215505b01c3

November 2, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: a4fcfcab7e8f332fde1df215505b01c3SHA1: b09c7ed21e82cf1710de85500762de43bc3943ffANALYSIS DATE: 2022-11-02T03:39:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – wannacry – 8178a7ed30cf865004edebae2e5e0a4f

November 2, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 8178a7ed30cf865004edebae2e5e0a4fSHA1: 12b649c2e7859e224faf16ed720b8cffc668d6bfANALYSIS DATE: 2022-11-02T03:00:32ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – aca640f5159565dbef2382379dcaf0a9

November 2, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: aca640f5159565dbef2382379dcaf0a9SHA1: d00d0efc22a3315a5a683eef10a4864f5e1e6b32ANALYSIS DATE: 2022-11-02T03:44:16ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – amadey – 83d4ecf239705c042200ec89d3c3bbc8

November 2, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, botnet:google2, botnet:mario23_10, botnet:slovarik1btc, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: 83d4ecf239705c042200ec89d3c3bbc8SHA1: f65ec33ef02435a23606f3f12786fc284a09e975ANALYSIS...

Malware Analysis

Malware Analysis – ransomware – 0ae5fddc4a858868fc3db14c51618116

Malware Analysis – evasion – 6671d139c65f08a309f41703287409a4

Malware Analysis – medusalocker – 87fc357cfaa43f6766a5efef072871bc

Malware Analysis – evasion – 813704db631ee44f572b4cd0c1067695

Malware Analysis – amadey – 0ea04d00739c5b503ac7a0b085a4e07d

Malware Analysis – djvu – e20a320b8ff66f8e136150233f22e369

Malware Analysis – evasion – 183ad97d55d1170f21a8d10a8339fdab

Malware Analysis – djvu – 9a164cede19b9203c508c386fabb2a45

Malware Analysis – discovery – 0dde0c9450eed08bf80da8f7a2ec2a86

Malware Analysis – evasion – eadb17b5927d0d3ede787219fe4cdf16

Malware Analysis – djvu – 4a399bbce7a83483767712b5f4f1b080

Malware Analysis – evasion – 1829589d95bdd2c30f0bef154decd426

Malware Analysis – smokeloader – 52db9d38ee83efe292d8e51e7fdbf19d

Malware Analysis – djvu – 1552564d0af2fa30bbb740b1a0ad54a2

Malware Analysis – amadey – c2d648c94f708dca1cbe10cb60260fa9

Malware Analysis – djvu – 683716645ccd5866870caf64f21951b2

Malware Analysis – djvu – 537ecc10bd947a0dd5d9088bf6474fa2

Malware Analysis – smokeloader – e9f9bedb14d80d6e30192745de74347d

Malware Analysis – wannacry – eab40b007ca86f362aa392d43847639e

Malware Analysis – djvu – d56f709686e8300b90bf1f532b451098

Malware Analysis – – a4fcfcab7e8f332fde1df215505b01c3

Malware Analysis – wannacry – 8178a7ed30cf865004edebae2e5e0a4f

Malware Analysis – ransomware – aca640f5159565dbef2382379dcaf0a9

Malware Analysis – amadey – 83d4ecf239705c042200ec89d3c3bbc8

Cobalt Strike Beacon Detected – 47[.]116[.]208[.]81:8001

Cobalt Strike Beacon Detected – 152[.]136[.]139[.]105:6666

Cobalt Strike Beacon Detected – 47[.]120[.]70[.]161:6666

Cobalt Strike Beacon Detected – 106[.]75[.]215[.]96:8081

Cobalt Strike Beacon Detected – 118[.]25[.]85[.]198:8899

You may have missed