Malware Analysis

Malware Analysis – – d313ccc04176d6084de172cb8aa91a3a

October 23, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: d313ccc04176d6084de172cb8aa91a3aSHA1: 1c661ef24338246e08f8266c4b4a5a877de33138ANALYSIS DATE: 2022-10-23T03:46:46ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – wannacry – 30996328635440bbfdceb2462993c966

October 23, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 30996328635440bbfdceb2462993c966SHA1: f851486d9159dac68ab4d8918f3f4b1d1ea9e078ANALYSIS DATE: 2022-10-23T03:02:52ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – e75153e97c63aec5d1fd87917ab26ae3

October 23, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: e75153e97c63aec5d1fd87917ab26ae3SHA1: 96b25a39463ca4d1c9439eec1c65ffa1fa6688d7ANALYSIS DATE: 2022-10-23T03:02:29ZTTPS: T1060, T1112, T1082, T1053,...

Malware Analysis – persistence – 15ee7e617a3d8f6ac4d6282ecf97633d

October 23, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 15ee7e617a3d8f6ac4d6282ecf97633dSHA1: ad7e9623c943a1c58aaed8aeca4e6b6244e98f5fANALYSIS DATE: 2022-10-23T03:02:40ZTTPS: T1082, T1107, T1490, T1091, T1060, T1112, T1005, T1081...

Malware Analysis – ransomware – f37c9a773215e49e5ebe4cd392a8342f

October 23, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: f37c9a773215e49e5ebe4cd392a8342fSHA1: bdbe8291891304bf2ea5a0da0e222e135d9f7f9bANALYSIS DATE: 2022-10-23T04:20:28ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – persistence – 1fae0187a453b236b50ec4cb0b79bea0

October 23, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 1fae0187a453b236b50ec4cb0b79bea0SHA1: 102d3e24bab008c89b558b02b639c61cb040f40fANALYSIS DATE: 2022-10-23T04:20:24ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091, T1060, T1112...

Malware Analysis – djvu – deffa172bc01d471e42789864668d103

October 23, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: deffa172bc01d471e42789864668d103SHA1: f7cdab17ce2b1a5b6f8cc103f5f0d47eae2f2dcbANALYSIS DATE: 2022-10-23T04:10:05ZTTPS: T1222, T1005, T1081, T1012,...

Malware Analysis – ransomware – fd0957803f2f5d823c11685c8a3a9e73

October 23, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: fd0957803f2f5d823c11685c8a3a9e73SHA1: 80d9a955709cd5f45df3d3b0450c0152e393a25eANALYSIS DATE: 2022-10-23T04:20:32ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 8f4b9aca8df15a22d5ad0ba4ea1488cc

October 23, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 8f4b9aca8df15a22d5ad0ba4ea1488ccSHA1: 1c6d6ffaa726980f645d7f89bf84f6f9c2715fe5ANALYSIS DATE: 2022-10-23T04:20:41ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – d278a12d260a48cb9ea30d45b58cbeed

October 23, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: d278a12d260a48cb9ea30d45b58cbeedSHA1: eec6305462c6f946e44ad1cbcc72a7481c76a616ANALYSIS DATE: 2022-10-23T04:20:37ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – – 42ff22493f094600f2daa6a2984861a3

October 23, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 42ff22493f094600f2daa6a2984861a3SHA1: f992b95f7330bcd6416df64b24267cf979b7a151ANALYSIS DATE: 2022-10-23T04:20:57ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – 1ff351a9c2dc8e54b71b3e7b00b1c54a

October 23, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 1ff351a9c2dc8e54b71b3e7b00b1c54aSHA1: 2e57d05585eaff7d3eb4f2eb229c433e86695fdeANALYSIS DATE: 2022-10-23T04:20:46ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – locky – 070dddf9d7c0afae4a8c5419e910d4e9

October 23, 2022

Score: 10 MALWARE FAMILY: lockyTAGS:family:locky, ransomwareMD5: 070dddf9d7c0afae4a8c5419e910d4e9SHA1: c5382329524a6f84ac08990634d311f2e1e90279ANALYSIS DATE: 2022-10-23T04:37:34ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – – 8db6d3fbe634d9fcf41f15400d1f343c

October 23, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 8db6d3fbe634d9fcf41f15400d1f343cSHA1: bd3b9ca039850d187da1642121362ab743cf4f57ANALYSIS DATE: 2022-10-23T04:42:24ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 211ffba6d8fe29258dd740dbe6c19e08

October 23, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 211ffba6d8fe29258dd740dbe6c19e08SHA1: 525c901952fde8683850484524d252418e700e31ANALYSIS DATE: 2022-10-23T04:39:19ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – ransomware – 0841781ce334fa545cf5ced3df6b019d

October 23, 2022

Score: 5 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 0841781ce334fa545cf5ced3df6b019dSHA1: 60089d8fe3993084aef5b6100bc4019675543294ANALYSIS DATE: 2022-10-23T04:41:41ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – discovery – 54639aa125db4aebe41299332989f3a0

October 23, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, upxMD5: 54639aa125db4aebe41299332989f3a0SHA1: 068acdc404596d7941cf3ab35b90c1fff813913eANALYSIS DATE: 2022-10-21T17:29:44ZTTPS: T1082, T1012, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – 13db9c3f1244dc2bdd0dca16dae87466

October 23, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 13db9c3f1244dc2bdd0dca16dae87466SHA1: 814564b8906a83139f1d8b987e75fd2bf7209f28ANALYSIS DATE: 2022-10-21T18:40:44ZTTPS: T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – adware – 5bb9e6b6ee66206e848b5ae8e13a6050

October 23, 2022

Score: 9 MALWARE FAMILY: adwareTAGS:adware, discovery, exploit, persistence, stealer, upxMD5: 5bb9e6b6ee66206e848b5ae8e13a6050SHA1: 0a43f6178692e21e40b248e5b3900b16ba844015ANALYSIS DATE: 2022-10-21T17:57:31ZTTPS: T1060, T1112, T1222, T1012, T1120, T1082,...

Malware Analysis – discovery – 10ee7cce9524e4d2720a32f8fea16010

October 23, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, persistenceMD5: 10ee7cce9524e4d2720a32f8fea16010SHA1: d7e89b4db2324da4dec5d020946c2eb92484f4baANALYSIS DATE: 2022-10-21T17:47:15ZTTPS: T1222, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – 27bbd42246a1822d33d2483c915cd660

October 23, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: 27bbd42246a1822d33d2483c915cd660SHA1: f4e1809dfd77ee7e5867de325f7ae3c334f4a394ANALYSIS DATE: 2022-10-21T18:26:21ZTTPS: T1082, T1060, T1112, T1004, T1158, T1088,...

Malware Analysis – ransomware – 42c6a6b16d75378eab14240084ae16f0

October 23, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 42c6a6b16d75378eab14240084ae16f0SHA1: 83031b984c12a0cb50d7882a450fe3fa85adc16fANALYSIS DATE: 2022-10-21T18:43:48ZTTPS: T1082, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – discovery – 166a8cec83c5e620cfe57290754a14b6

October 23, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 166a8cec83c5e620cfe57290754a14b6SHA1: 302ad1ed3a3518db09a36e0093b9cd188d819874ANALYSIS DATE: 2022-10-21T19:07:27ZTTPS: T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – discovery – 27c0ae51af391cf5d411e6aa790a7660

October 23, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, persistenceMD5: 27c0ae51af391cf5d411e6aa790a7660SHA1: 07c2bdca3cebcb1725a76260a151f986ae3b5bb8ANALYSIS DATE: 2022-10-21T18:54:28ZTTPS: T1060, T1112, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis

Malware Analysis – – d313ccc04176d6084de172cb8aa91a3a

Malware Analysis – wannacry – 30996328635440bbfdceb2462993c966

Malware Analysis – djvu – e75153e97c63aec5d1fd87917ab26ae3

Malware Analysis – persistence – 15ee7e617a3d8f6ac4d6282ecf97633d

Malware Analysis – ransomware – f37c9a773215e49e5ebe4cd392a8342f

Malware Analysis – persistence – 1fae0187a453b236b50ec4cb0b79bea0

Malware Analysis – djvu – deffa172bc01d471e42789864668d103

Malware Analysis – ransomware – fd0957803f2f5d823c11685c8a3a9e73

Malware Analysis – ransomware – 8f4b9aca8df15a22d5ad0ba4ea1488cc

Malware Analysis – ransomware – d278a12d260a48cb9ea30d45b58cbeed

Malware Analysis – – 42ff22493f094600f2daa6a2984861a3

Malware Analysis – ransomware – 1ff351a9c2dc8e54b71b3e7b00b1c54a

Malware Analysis – locky – 070dddf9d7c0afae4a8c5419e910d4e9

Malware Analysis – – 8db6d3fbe634d9fcf41f15400d1f343c

Malware Analysis – djvu – 211ffba6d8fe29258dd740dbe6c19e08

Malware Analysis – ransomware – 0841781ce334fa545cf5ced3df6b019d

Malware Analysis – discovery – 54639aa125db4aebe41299332989f3a0

Malware Analysis – discovery – 13db9c3f1244dc2bdd0dca16dae87466

Malware Analysis – adware – 5bb9e6b6ee66206e848b5ae8e13a6050

Malware Analysis – discovery – 10ee7cce9524e4d2720a32f8fea16010

Malware Analysis – evasion – 27bbd42246a1822d33d2483c915cd660

Malware Analysis – ransomware – 42c6a6b16d75378eab14240084ae16f0

Malware Analysis – discovery – 166a8cec83c5e620cfe57290754a14b6

Malware Analysis – discovery – 27c0ae51af391cf5d411e6aa790a7660

[INCRANSOM] – Ransomware Victim: www[.]lincecomercial[.]com

[INCRANSOM] – Ransomware Victim: www[.]entecheng[.]com

Creams Cafe – 159,652 breached accounts

Cobalt Strike Beacon Detected – 140[.]143[.]132[.]170:80

Cobalt Strike Beacon Detected – 1[.]94[.]134[.]161:80

You may have missed