Malware Analysis

Malware Analysis – wannacry – aadd501e7f87ad9279eec57a5ea987ca

November 1, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, persistence, ransomware, spyware, stealer, wormMD5: aadd501e7f87ad9279eec57a5ea987caSHA1: a378ed3f7e758e1c8389fdd33a1774ff5e38daa8ANALYSIS DATE: 2022-11-01T05:38:43ZTTPS: T1158, T1491, T1112, T1060, T1107,...

Malware Analysis – wannacry – ab9f94f05ce248f32989529ad31f6a58

November 1, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: ab9f94f05ce248f32989529ad31f6a58SHA1: d17160bfcf0c17dcf50eebaee4bbaf8f7d220df3ANALYSIS DATE: 2022-11-01T05:38:38ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – babuk – 8e18c2da2c202697eb9552c07db3be1c

November 1, 2022

Score: 10 MALWARE FAMILY: babukTAGS:family:babuk, ransomwareMD5: 8e18c2da2c202697eb9552c07db3be1cSHA1: 93d20b75e18dd53ed16215262f43c1074e55f025ANALYSIS DATE: 2022-11-01T05:37:40ZTTPS: T1082, T1107, T1490, T1012, T1120 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – wannacry – 761fd6c82180421aa39bf04182ec3f11

November 1, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 761fd6c82180421aa39bf04182ec3f11SHA1: a2068f92316993137cb3d47b13d018dfcebcb13dANALYSIS DATE: 2022-11-01T05:38:31ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – wannacry – 34b2fff498fd17c625649b957373e676

November 1, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 34b2fff498fd17c625649b957373e676SHA1: b03a94807620159b69240e74aa6c88b8a36096e0ANALYSIS DATE: 2022-11-01T05:39:30ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – wannacry – 07e0ad4a92e0ccd54bbccf2fa459c0ed

November 1, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 07e0ad4a92e0ccd54bbccf2fa459c0edSHA1: 353b03de9345510a14cd2999bafbe27641dc367cANALYSIS DATE: 2022-11-01T05:39:13ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – wannacry – 96179101f776c0584e3346cb1d1370dd

November 1, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 96179101f776c0584e3346cb1d1370ddSHA1: 21eb0f89b7f50795269065a76664e86b00206483ANALYSIS DATE: 2022-11-01T05:39:01ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – wannacry – bc18e8c27142dcf420699175dda2c6a8

November 1, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: bc18e8c27142dcf420699175dda2c6a8SHA1: 596b77c461e0ec8c72087ade6482f8565767bca5ANALYSIS DATE: 2022-11-01T05:39:25ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – wannacry – 05684d41163d03eb3c6c77c6847a1f7e

November 1, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 05684d41163d03eb3c6c77c6847a1f7eSHA1: d8b5ea646e7353c445339812c4597b275533c324ANALYSIS DATE: 2022-11-01T05:40:11ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – wannacry – eda52d122490d82a632607af6f14692a

November 1, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: eda52d122490d82a632607af6f14692aSHA1: 4c0b8d04de0466e0de6d78e91906733848e1b12eANALYSIS DATE: 2022-11-01T05:39:50ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – wannacry – 22e0ffb0ea5922d9c40436e575c67b4b

November 1, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 22e0ffb0ea5922d9c40436e575c67b4bSHA1: 54c6e125db94fd99d152b17b2c35c8fc12f43615ANALYSIS DATE: 2022-11-01T05:39:57ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – wannacry – ab55281ebac6036c3537ecf2132d3fd3

November 1, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: ab55281ebac6036c3537ecf2132d3fd3SHA1: 2d447e5b854a005035bcaf62316c1db72fcce4cfANALYSIS DATE: 2022-11-01T05:40:03ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – smokeloader – a29a9654cc4f0adf9fb39b1fd0560ab6

November 1, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: a29a9654cc4f0adf9fb39b1fd0560ab6SHA1: 6eee54ed2a8c6c7a8c1cbbcbc67eb93c799784b6ANALYSIS DATE: 2022-10-31T21:12:40ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 7f859bff12a742015c4722384f08f5da

November 1, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, botnet:mario23_10, botnet:slovarik1btc, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: 7f859bff12a742015c4722384f08f5daSHA1: 9090f98500ddc5dd41b1c9e89c572181e2e58816ANALYSIS...

Malware Analysis – djvu – 1c2cbe4fd8fdf6bfc328bfd771aec0a0

November 1, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, botnet:mario23_10, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: 1c2cbe4fd8fdf6bfc328bfd771aec0a0SHA1: ac856d3a08a190c65597d1bcbc4aeb879ac0f43cANALYSIS DATE:...

Malware Analysis – djvu – 588a1f4f060dde2049362697a2daaf07

November 1, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, botnet:mario23_10, botnet:slovarik1btc, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: 588a1f4f060dde2049362697a2daaf07SHA1: 7891825c5559cd2ca61b1a55b785fff419ee36e1ANALYSIS...

Malware Analysis – djvu – 5cccc51e564aaed1220ca88d4d427dd3

November 1, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 5cccc51e564aaed1220ca88d4d427dd3SHA1: efd852e39a3a4825060f8d891137a7d2f56212f6ANALYSIS DATE: 2022-10-31T23:52:39ZTTPS: T1130, T1112, T1060, T1222, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – 91efa3e788805a851d3319d1c75d3770

October 31, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: 91efa3e788805a851d3319d1c75d3770SHA1: 1389eb6b5e83dd20671c0b40cc0e3977715eed71ANALYSIS DATE: 2022-10-30T22:18:17ZTTPS: T1060, T1112, T1004, T1082, T1158, T1088,...

Malware Analysis – evasion – a09d3b0d9ff6e23b97cd1d3359913ef0

October 31, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: a09d3b0d9ff6e23b97cd1d3359913ef0SHA1: 59b46d681d1529abcf0b5663156fd3cf6cdbb04bANALYSIS DATE: 2022-10-30T22:16:56ZTTPS: T1005, T1081, T1004, T1112, T1158, T1088,...

Malware Analysis – evasion – a2122b575133868c70d3d5392613b310

October 31, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: a2122b575133868c70d3d5392613b310SHA1: 404892eade96a6c53610cffc3119cc88e537047cANALYSIS DATE: 2022-10-30T22:17:15ZTTPS: T1088, T1089, T1112, T1082, T1005, T1081,...

Malware Analysis – evasion – a203f16e2fbc3828245edffef314ac60

October 31, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: a203f16e2fbc3828245edffef314ac60SHA1: 84d8a4af0f57d0ee0e8e45a094b4b01ba23dc9aeANALYSIS DATE: 2022-10-30T22:16:51ZTTPS: T1112, T1158, T1088, T1089, T1005, T1081,...

Malware Analysis – evasion – a1074b7705c89bf62f716cd786e42150

October 31, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: a1074b7705c89bf62f716cd786e42150SHA1: 07cf762b02da50ad254fe840cdecb58a00191ab9ANALYSIS DATE: 2022-10-30T22:19:00ZTTPS: T1012, T1082, T1060, T1112, T1004, T1005,...

Malware Analysis – evasion – 82efc027f30d046e66b9dd4cd3dbc5d0

October 31, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: 82efc027f30d046e66b9dd4cd3dbc5d0SHA1: 51e93528077fe32744d0f37283a80bc936bb0a24ANALYSIS DATE: 2022-10-30T22:18:24ZTTPS: T1060, T1112, T1004, T1082, T1158, T1088,...

Malware Analysis – evasion – 9185734b2fef95aab770aebc5f7632a0

October 31, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: 9185734b2fef95aab770aebc5f7632a0SHA1: f66b2a39d937a0042e347199ee99740fa78e3265ANALYSIS DATE: 2022-10-30T22:18:44ZTTPS: T1060, T1112, T1082, T1158, T1005, T1081,...

Malware Analysis

Malware Analysis – wannacry – aadd501e7f87ad9279eec57a5ea987ca

Malware Analysis – wannacry – ab9f94f05ce248f32989529ad31f6a58

Malware Analysis – babuk – 8e18c2da2c202697eb9552c07db3be1c

Malware Analysis – wannacry – 761fd6c82180421aa39bf04182ec3f11

Malware Analysis – wannacry – 34b2fff498fd17c625649b957373e676

Malware Analysis – wannacry – 07e0ad4a92e0ccd54bbccf2fa459c0ed

Malware Analysis – wannacry – 96179101f776c0584e3346cb1d1370dd

Malware Analysis – wannacry – bc18e8c27142dcf420699175dda2c6a8

Malware Analysis – wannacry – 05684d41163d03eb3c6c77c6847a1f7e

Malware Analysis – wannacry – eda52d122490d82a632607af6f14692a

Malware Analysis – wannacry – 22e0ffb0ea5922d9c40436e575c67b4b

Malware Analysis – wannacry – ab55281ebac6036c3537ecf2132d3fd3

Malware Analysis – smokeloader – a29a9654cc4f0adf9fb39b1fd0560ab6

Malware Analysis – djvu – 7f859bff12a742015c4722384f08f5da

Malware Analysis – djvu – 1c2cbe4fd8fdf6bfc328bfd771aec0a0

Malware Analysis – djvu – 588a1f4f060dde2049362697a2daaf07

Malware Analysis – djvu – 5cccc51e564aaed1220ca88d4d427dd3

Malware Analysis – evasion – 91efa3e788805a851d3319d1c75d3770

Malware Analysis – evasion – a09d3b0d9ff6e23b97cd1d3359913ef0

Malware Analysis – evasion – a2122b575133868c70d3d5392613b310

Malware Analysis – evasion – a203f16e2fbc3828245edffef314ac60

Malware Analysis – evasion – a1074b7705c89bf62f716cd786e42150

Malware Analysis – evasion – 82efc027f30d046e66b9dd4cd3dbc5d0

Malware Analysis – evasion – 9185734b2fef95aab770aebc5f7632a0

Cobalt Strike Beacon Detected – 47[.]116[.]208[.]81:8001

Cobalt Strike Beacon Detected – 152[.]136[.]139[.]105:6666

Cobalt Strike Beacon Detected – 47[.]120[.]70[.]161:6666

Cobalt Strike Beacon Detected – 106[.]75[.]215[.]96:8081

Cobalt Strike Beacon Detected – 118[.]25[.]85[.]198:8899

You may have missed