Malware Analysis

Malware Analysis – wannacry – eea2153661910584cf63390ca3adb28b

October 26, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, persistence, ransomware, spyware, stealer, wormMD5: eea2153661910584cf63390ca3adb28bSHA1: 1e90186e9054aec6bdce46ad2ccec11e164440eeANALYSIS DATE: 2022-10-26T09:40:20ZTTPS: T1046, T1158, T1222, T1082, T1005,...

Malware Analysis – djvu – 11a56eaa628aa4a2576a0e7fb15a52c7

October 26, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:1752, botnet:517, botnet:google2, botnet:mario23_10, botnet:nam7, botnet:slovarik15btc, backdoor, collection, discovery, infostealer, persistence, ransomware,...

Malware Analysis – wannacry – 5535a78a4b4a483f5eeef222c4a142f0

October 26, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, persistence, ransomware, spyware, stealer, wormMD5: 5535a78a4b4a483f5eeef222c4a142f0SHA1: 1697a46489e50c54520aa0bfc6f3663bbce12920ANALYSIS DATE: 2022-10-26T10:00:21ZTTPS: T1082, T1005, T1081, T1491, T1112,...

Malware Analysis – wannacry – eea571229a25bc2f5b59dce07c361cb2

October 26, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: eea571229a25bc2f5b59dce07c361cb2SHA1: b341437a1f94d645e5628d8491f068de1a049fb9ANALYSIS DATE: 2022-10-26T08:30:43ZTTPS: T1082, T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 042fd0315eccd1810935b117f8c1f80d

October 26, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:1752, botnet:517, botnet:mario23_10, botnet:nam7, botnet:slovarik15btc, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware,...

Malware Analysis – discovery – 223a5331677dccb0d104c4ff1932a222

October 26, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, ransomwareMD5: 223a5331677dccb0d104c4ff1932a222SHA1: 08875300c7bc8cdfcfb714c221404773f1c7da57ANALYSIS DATE: 2022-10-26T10:14:58ZTTPS: T1012, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – wannacry – c0ca2ff66deb363ad5186ca42387a1ec

October 26, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: c0ca2ff66deb363ad5186ca42387a1ecSHA1: e2ea45088d801a4654c6e80ba3813a666eba3074ANALYSIS DATE: 2022-10-26T10:00:31ZTTPS: T1046, T1158, T1222 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – wannacry – 0e4c64bd0db07a8da4a577ce09ad2ce5

October 26, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 0e4c64bd0db07a8da4a577ce09ad2ce5SHA1: 8ace3f83841d5e7d4ffb28692378dea58edb3dc1ANALYSIS DATE: 2022-10-26T10:00:26ZTTPS: T1158, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 27e067421cc490a5e99e2115f0bb4277

October 26, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 27e067421cc490a5e99e2115f0bb4277SHA1: 162b5729e0255d3cd5f22ac454e7a57b23ff0abcANALYSIS DATE: 2022-10-26T10:40:32ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – wannacry – 60d2fd5a1b013f6e6ea6a937a85aea86

October 26, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 60d2fd5a1b013f6e6ea6a937a85aea86SHA1: 75c509bf1842bb13def4137e61ec2b2e177e95deANALYSIS DATE: 2022-10-26T10:20:21ZTTPS: T1158, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 6b0c04b30f34d975a34cd1b789d29db7

October 26, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 6b0c04b30f34d975a34cd1b789d29db7SHA1: 3198404e4f97321720829dae641e06d360d705d1ANALYSIS DATE: 2022-10-26T10:40:27ZTTPS: T1091, T1005, T1081, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 4aa20e139e4599ff9a50edf65716677f

October 26, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 4aa20e139e4599ff9a50edf65716677fSHA1: 1d01c5b9b852ac3291c7c6a1e35e168d80ed239cANALYSIS DATE: 2022-10-26T10:40:20ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 8cdbf9a671071ade99212446a7088671

October 25, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 8cdbf9a671071ade99212446a7088671SHA1: 6832b0dd4cbb6fccec9ae134b7127d03040dbb03ANALYSIS DATE: 2022-10-24T20:00:20ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – asyncrat – 1f8d2846109b9b9fdadb28ba1492dbff

October 25, 2022

Score: 10 MALWARE FAMILY: asyncratTAGS:family:asyncrat, family:azorult, family:blackmoon, family:dcrat, family:fickerstealer, family:gh0strat, family:hawkeye, family:nanocore, family:oski, family:pony, family:purplefox, family:raccoon, family:redline, family:smokeloader, botnet:5781468cedb3a203003fdf1f12e72fe98d6f1c0f, botnet:@zhilsholi,...

Malware Analysis – ransomware – 2acba7d6e7fdff0650b942d051601346

October 25, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 2acba7d6e7fdff0650b942d051601346SHA1: c4bf28dc8c81c7bc1f0f2b93cec0860acb7a5ff8ANALYSIS DATE: 2022-10-24T20:12:30ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – ransomware – 8d1d8ea68874e740eb74826f402a96eb

October 25, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 8d1d8ea68874e740eb74826f402a96ebSHA1: 7bd7e2e20a0bc7915826ee9263bcb35707080daaANALYSIS DATE: 2022-10-24T20:20:19ZTTPS: T1091, T1005, T1081, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 85c74aec951433b76fd8479cf632975f

October 25, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 85c74aec951433b76fd8479cf632975fSHA1: ff1ae5a673630b6b93bf8978544b4e7d081901b3ANALYSIS DATE: 2022-10-24T20:00:33ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 6b9efcae830a5ffcc656118f5f0d6297

October 25, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 6b9efcae830a5ffcc656118f5f0d6297SHA1: 5a8601f3406b4a68b7e995628e3b8f6b802c15aaANALYSIS DATE: 2022-10-24T21:40:19ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – fe78aa640bbfe61d0363ce43521f7fad

October 25, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: fe78aa640bbfe61d0363ce43521f7fadSHA1: ccb85ef6f5f18eda9c90214c063dad81f3750285ANALYSIS DATE: 2022-10-24T21:20:20ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – redline – 03bf9239a1c35ef0f6f162180499167f

October 25, 2022

Score: 10 MALWARE FAMILY: redlineTAGS:family:redline, discovery, evasion, infostealer, persistence, spyware, stealer, trojanMD5: 03bf9239a1c35ef0f6f162180499167fSHA1: b1921d4747ed0ca08ecb31dda5b57079dcd6085dANALYSIS DATE: 2022-10-24T20:50:15ZTTPS: T1082, T1112, T1031, T1089,...

Malware Analysis – smokeloader – 94301ae8afdd2d4ade377521f2066ee9

October 25, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 94301ae8afdd2d4ade377521f2066ee9SHA1: e6c6fdcd68ffa04f6631d1869de6f8c0a0217bf3ANALYSIS DATE: 2022-10-24T21:11:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – e7a56ac2f0f6f3cae173a93ac2e1d858

October 25, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:google2, botnet:mario23_10, botnet:nam7, botnet:slovarik15btc, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware,...

Malware Analysis – ransomware – f80050268e39f91fa34ce75ec8b6cfe3

October 25, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: f80050268e39f91fa34ce75ec8b6cfe3SHA1: 96c63bdc35010230b259748d6efd62abefc85e63ANALYSIS DATE: 2022-10-24T21:40:22ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – e49d70b619a1220ebb880dc4f19f730c

October 25, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: e49d70b619a1220ebb880dc4f19f730cSHA1: ef68f39b5908b8405ce55a51d6e3c599839c3cbbANALYSIS DATE: 2022-10-24T22:39:53ZTTPS: T1491, T1112, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis

Malware Analysis – wannacry – eea2153661910584cf63390ca3adb28b

Malware Analysis – djvu – 11a56eaa628aa4a2576a0e7fb15a52c7

Malware Analysis – wannacry – 5535a78a4b4a483f5eeef222c4a142f0

Malware Analysis – wannacry – eea571229a25bc2f5b59dce07c361cb2

Malware Analysis – djvu – 042fd0315eccd1810935b117f8c1f80d

Malware Analysis – discovery – 223a5331677dccb0d104c4ff1932a222

Malware Analysis – wannacry – c0ca2ff66deb363ad5186ca42387a1ec

Malware Analysis – wannacry – 0e4c64bd0db07a8da4a577ce09ad2ce5

Malware Analysis – ransomware – 27e067421cc490a5e99e2115f0bb4277

Malware Analysis – wannacry – 60d2fd5a1b013f6e6ea6a937a85aea86

Malware Analysis – ransomware – 6b0c04b30f34d975a34cd1b789d29db7

Malware Analysis – ransomware – 4aa20e139e4599ff9a50edf65716677f

Malware Analysis – ransomware – 8cdbf9a671071ade99212446a7088671

Malware Analysis – asyncrat – 1f8d2846109b9b9fdadb28ba1492dbff

Malware Analysis – ransomware – 2acba7d6e7fdff0650b942d051601346

Malware Analysis – ransomware – 8d1d8ea68874e740eb74826f402a96eb

Malware Analysis – ransomware – 85c74aec951433b76fd8479cf632975f

Malware Analysis – ransomware – 6b9efcae830a5ffcc656118f5f0d6297

Malware Analysis – ransomware – fe78aa640bbfe61d0363ce43521f7fad

Malware Analysis – redline – 03bf9239a1c35ef0f6f162180499167f

Malware Analysis – smokeloader – 94301ae8afdd2d4ade377521f2066ee9

Malware Analysis – djvu – e7a56ac2f0f6f3cae173a93ac2e1d858

Malware Analysis – ransomware – f80050268e39f91fa34ce75ec8b6cfe3

Malware Analysis – ransomware – e49d70b619a1220ebb880dc4f19f730c

Cobalt Strike Beacon Detected – 119[.]91[.]203[.]199:88

Cobalt Strike Beacon Detected – 106[.]54[.]239[.]134:80

Cobalt Strike Beacon Detected – 81[.]69[.]98[.]230:50010

Cobalt Strike Beacon Detected – 103[.]43[.]18[.]10:80

Cobalt Strike Beacon Detected – 38[.]190[.]198[.]55:80

You may have missed