Malware Analysis

Malware Analysis – ransomware – 59bff0a38a04c372e4896a4fb2eea8fb

April 25, 2023

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 59bff0a38a04c372e4896a4fb2eea8fbSHA1: 2b487ceb3b34cf509b271579160656ca6e1328e2ANALYSIS DATE: 2023-04-25T17:27:14ZTTPS: T1082, T1005, T1081, T1491, T1112 ScoreMeaningExample10Known badA malware family...

Malware Analysis – ransomware – 370546a376345688e5ad3ef836e2ea78

April 25, 2023

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 370546a376345688e5ad3ef836e2ea78SHA1: bebff2850dad06a48426e569f526f01df6e024ebANALYSIS DATE: 2023-04-25T17:27:14ZTTPS: T1491, T1112, T1082, T1005, T1081 ScoreMeaningExample10Known badA malware family...

Malware Analysis – persistence – 5f74d2826c1fb2b60dbf6d3de14a773d

April 25, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 5f74d2826c1fb2b60dbf6d3de14a773dSHA1: 759b2298650613e5ba4654669b1c31ba6b1530bcANALYSIS DATE: 2023-04-25T17:27:15ZTTPS: T1107, T1490, T1060, T1112, T1012, T1120, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – persistence – 03efa23cb13898fdfda7821ea7dc5e10

April 25, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 03efa23cb13898fdfda7821ea7dc5e10SHA1: e25e2f68f0c159378f133d0e161a980d7f148a91ANALYSIS DATE: 2023-04-25T17:27:15ZTTPS: T1082, T1060, T1112, T1012, T1120, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – persistence – df80cbaadb754de14c97dc05995fdc4a

April 25, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: df80cbaadb754de14c97dc05995fdc4aSHA1: 6f9369c9d2f174b4abd642d4fb43cff690f364dfANALYSIS DATE: 2023-04-25T17:27:16ZTTPS: T1107, T1490, T1112, T1012, T1120, T1082, T1060 ScoreMeaningExample10Known badA malware...

Malware Analysis – persistence – 420b2f010edbc63a68b2cce2cdf1e5e9

April 25, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 420b2f010edbc63a68b2cce2cdf1e5e9SHA1: 4cf5072cfe0eb42d387713067e2706902c89b294ANALYSIS DATE: 2023-04-25T17:27:15ZTTPS: T1130, T1112, T1107, T1490, T1082, T1060, T1012, T1120 ScoreMeaningExample10Known badA...

Malware Analysis – persistence – 3bceadd4c2c546aba24e24307f1defcd

April 25, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 3bceadd4c2c546aba24e24307f1defcdSHA1: 81e4110a72821a1b1f01a3f3a8bf89188af40067ANALYSIS DATE: 2023-04-25T17:27:20ZTTPS: T1107, T1490, T1082, T1060, T1112, T1012, T1120 ScoreMeaningExample10Known badA malware...

Malware Analysis – persistence – e736d07744f89f05460b1f12daeb8172

April 25, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: e736d07744f89f05460b1f12daeb8172SHA1: 19fb70308f0d47947eb6d2d5b572e96539d345bbANALYSIS DATE: 2023-04-25T17:27:21ZTTPS: T1012, T1120, T1082, T1107, T1490, T1112, T1060 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 66f62279e9722368a730adc3b67f2315

April 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, stealerMD5: 66f62279e9722368a730adc3b67f2315SHA1: a9804ada1a10d8a5827029342283f6ffeea6f3d3ANALYSIS DATE: 2023-04-25T17:35:04ZTTPS: T1053, T1130, T1112, T1222, T1060,...

Malware Analysis – persistence – a202914a34dc528aa137bd394518d9b0

April 25, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: a202914a34dc528aa137bd394518d9b0SHA1: 4724934b61687cb1abe96bab137c7b1d4476f271ANALYSIS DATE: 2023-04-25T17:27:21ZTTPS: T1060, T1112, T1012, T1120, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 900c5a8f4afb3473c9dac0f984d746f4

April 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, stealerMD5: 900c5a8f4afb3473c9dac0f984d746f4SHA1: 00dadacc6119c3e8ccdbe4477da2452d06e8a992ANALYSIS DATE: 2023-04-25T17:32:11ZTTPS: T1130, T1112, T1060, T1222, T1082,...

Malware Analysis – quasar – 5ec1610f2529bf6c482f43e8d7cb6235

April 25, 2023

Score: 10 MALWARE FAMILY: quasarTAGS:family:quasar, evasion, persistence, ransomware, spyware, trojanMD5: 5ec1610f2529bf6c482f43e8d7cb6235SHA1: a356a2a69d0551967f133b4b18c43703027e2383ANALYSIS DATE: 2023-04-25T17:40:13ZTTPS: T1107, T1490, T1088, T1089, T1112, T1031,...

Malware Analysis – evasion – 2c2bd73dcba2e7eb7fa78105c84ca2b1

April 25, 2023

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 2c2bd73dcba2e7eb7fa78105c84ca2b1SHA1: 24d7defc1e00739461dda0b275bd8304277aafd1ANALYSIS DATE: 2023-04-25T17:37:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – babuk – f9afb31bc17811e5ab4fa406f105b1fe

April 25, 2023

Score: 10 MALWARE FAMILY: babukTAGS:family:babuk, family:darkside, ransomwareMD5: f9afb31bc17811e5ab4fa406f105b1feSHA1: d1a9449dcc8a3aa0c887bce71f128866175f679aANALYSIS DATE: 2023-04-25T17:44:04ZTTPS: T1107, T1490, T1082, T1012, T1120 ScoreMeaningExample10Known badA malware family...

Malware Analysis – djvu – 4bc6e26f6bf9258473180f9805bbe508

April 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 4bc6e26f6bf9258473180f9805bbe508SHA1: dacc8979f7e59e60be9cb842982ee0deca5b3248ANALYSIS DATE: 2023-04-25T17:41:03ZTTPS: T1130, T1112, T1060, T1222, T1082, T1053 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – 18d171bc6fea9f638c4d76698b2b7d7f

April 24, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, spyware, stealerMD5: 18d171bc6fea9f638c4d76698b2b7d7fSHA1: ab1aa609f0395ab1a410a8aeef94d9fc6f9b0fb6ANALYSIS DATE: 2023-04-24T15:22:21ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – evasion – 8effcc3b16c124f3ba46fe8e86947105

April 24, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 8effcc3b16c124f3ba46fe8e86947105SHA1: d6b4f76d9bfbaae0fc944adb8cb9dd8f487050efANALYSIS DATE: 2023-04-24T14:32:46ZTTPS: T1012, T1082, T1112, T1060, T1158, T1491, T1120 ScoreMeaningExample10Known badA...

Malware Analysis – amadey – 0e5768e5106ad5956530ada9cbd08647

April 24, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:raccoon, family:rhadamanthys, family:smokeloader, family:vidar, botnet:5c24dc0e9726fcc756a18038ae4e0e67, botnet:5cb879265de0011bfc7588d5d251aee6, botnet:fc8427198f843d72c1aa8a66db1a98f3, botnet:pub1, backdoor, collection, discovery, evasion, persistence, ransomware,...

Malware Analysis – amadey – ca89840f1259ebfe7a0e945c15ed79e5

April 24, 2023

Malware Analysis – djvu – 9d416753c2a076fa65105a7d34fbe1cb

April 24, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, spyware, stealerMD5: 9d416753c2a076fa65105a7d34fbe1cbSHA1: 52e01796a7c5f0492d832f86708d4bfab0f2b690ANALYSIS DATE: 2023-04-24T15:43:58ZTTPS: T1005, T1081, T1012, T1060,...

Malware Analysis – evasion – b209c6502e2fecd11fbdeb4fe602e90a

April 24, 2023

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: b209c6502e2fecd11fbdeb4fe602e90aSHA1: 5abd3b562aa38db2a1f14ec0997a5e9d6fa4fc9eANALYSIS DATE: 2023-04-24T17:23:51ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – 8729348bb91d4712cde74e6ae4949bbe

April 24, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, spyware, stealerMD5: 8729348bb91d4712cde74e6ae4949bbeSHA1: 996a94a902d668107532ba251f8224d6b7225ddcANALYSIS DATE: 2023-04-24T17:25:53ZTTPS: T1012, T1082, T1053, T1005,...

Malware Analysis – amadey – 6f067e24ed07adc6b424ac9a0e7f5a61

April 24, 2023

Malware Analysis – djvu – 9e152141b4c83bd73477b543860668df

April 24, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, spyware, stealerMD5: 9e152141b4c83bd73477b543860668dfSHA1: 841b2caff78d9dd1e8ad6b6a1493c9892d698dceANALYSIS DATE: 2023-04-24T17:32:45ZTTPS: T1082, T1012, T1005, T1081,...

Malware Analysis

Malware Analysis – ransomware – 59bff0a38a04c372e4896a4fb2eea8fb

Malware Analysis – ransomware – 370546a376345688e5ad3ef836e2ea78

Malware Analysis – persistence – 5f74d2826c1fb2b60dbf6d3de14a773d

Malware Analysis – persistence – 03efa23cb13898fdfda7821ea7dc5e10

Malware Analysis – persistence – df80cbaadb754de14c97dc05995fdc4a

Malware Analysis – persistence – 420b2f010edbc63a68b2cce2cdf1e5e9

Malware Analysis – persistence – 3bceadd4c2c546aba24e24307f1defcd

Malware Analysis – persistence – e736d07744f89f05460b1f12daeb8172

Malware Analysis – djvu – 66f62279e9722368a730adc3b67f2315

Malware Analysis – persistence – a202914a34dc528aa137bd394518d9b0

Malware Analysis – djvu – 900c5a8f4afb3473c9dac0f984d746f4

Malware Analysis – quasar – 5ec1610f2529bf6c482f43e8d7cb6235

Malware Analysis – evasion – 2c2bd73dcba2e7eb7fa78105c84ca2b1

Malware Analysis – babuk – f9afb31bc17811e5ab4fa406f105b1fe

Malware Analysis – djvu – 4bc6e26f6bf9258473180f9805bbe508

Malware Analysis – djvu – 18d171bc6fea9f638c4d76698b2b7d7f

Malware Analysis – evasion – 8effcc3b16c124f3ba46fe8e86947105

Malware Analysis – amadey – 0e5768e5106ad5956530ada9cbd08647

Malware Analysis – amadey – ca89840f1259ebfe7a0e945c15ed79e5

Malware Analysis – djvu – 9d416753c2a076fa65105a7d34fbe1cb

Malware Analysis – evasion – b209c6502e2fecd11fbdeb4fe602e90a

Malware Analysis – djvu – 8729348bb91d4712cde74e6ae4949bbe

Malware Analysis – amadey – 6f067e24ed07adc6b424ac9a0e7f5a61

Malware Analysis – djvu – 9e152141b4c83bd73477b543860668df

Cobalt Strike Beacon Detected – 121[.]43[.]37[.]134:4434

Cobalt Strike Beacon Detected – 119[.]29[.]231[.]118:443

Cobalt Strike Beacon Detected – 39[.]101[.]74[.]162:443

Cobalt Strike Beacon Detected – 8[.]218[.]112[.]112:8880

Cobalt Strike Beacon Detected – 47[.]109[.]48[.]57:443

You may have missed