Malware Analysis

Malware Analysis – persistence – e6dcc0d19c42acf6f8bc0a5fb295dc71

October 22, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: e6dcc0d19c42acf6f8bc0a5fb295dc71SHA1: b932cd7e0c43288444e34c7ad00639ae52b1e865ANALYSIS DATE: 2022-10-22T14:00:25ZTTPS: T1082, T1107, T1490, T1091, T1060, T1112, T1005, T1081...

Malware Analysis – evasion – 13423360b8c1ffb02fac15d4f4c2b261

October 22, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 13423360b8c1ffb02fac15d4f4c2b261SHA1: b7bd5e7f2d7ef49967f921d263251bf2445a1ce8ANALYSIS DATE: 2022-10-21T14:20:10ZTTPS: T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 35dddd354540c317a9b131af025fea15

October 22, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 35dddd354540c317a9b131af025fea15SHA1: f4077779d53f962c53674957feadc83cd718c124ANALYSIS DATE: 2022-10-22T14:10:44ZTTPS: T1060, T1112, T1082, T1053,...

Malware Analysis – persistence – 115c90fa3782f94e7beb2959903293bc

October 22, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 115c90fa3782f94e7beb2959903293bcSHA1: 1667f62eed47dfd608fe8f4b8b74b6a20b00a084ANALYSIS DATE: 2022-10-22T14:00:38ZTTPS: T1107, T1490, T1091, T1060, T1112, T1005, T1081, T1082...

Malware Analysis – evasion – 9aac8706399f0fefe526d057ab9d8fdf

October 22, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomware, trojanMD5: 9aac8706399f0fefe526d057ab9d8fdfSHA1: 3f128622b34f674ba42b755a51c26359f1dc093dANALYSIS DATE: 2022-10-22T14:40:17ZTTPS: T1057, T1082, T1053, T1107, T1490, T1112, T1031, T1012, T1120,...

Malware Analysis – persistence – 17c27a27f56d52944388c05f1dec03ec

October 22, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 17c27a27f56d52944388c05f1dec03ecSHA1: a3b268525772b10ca5d689ee2c2f4365334118d0ANALYSIS DATE: 2022-10-22T14:40:29ZTTPS: T1082, T1107, T1490, T1091, T1060, T1112, T1005, T1081...

Malware Analysis – evasion – 674e7ee905d24a89af47b53b53ffc23c

October 22, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 674e7ee905d24a89af47b53b53ffc23cSHA1: c6b73b882aa1f4d46ec655a5591a28638700856cANALYSIS DATE: 2022-10-22T14:40:35ZTTPS: T1490, T1059, T1107, T1082, T1012, T1120, T1485 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 249d6385dc41bfefaca68f7dfb3abf5c

October 22, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 249d6385dc41bfefaca68f7dfb3abf5cSHA1: 11c38eb4c9e78541d2b8d2ef6b1564db23ffef5aANALYSIS DATE: 2022-10-22T14:32:20ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – a97a2672ce450c7b19b4896a20920c1a

October 22, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: a97a2672ce450c7b19b4896a20920c1aSHA1: 80da6eacf1bcd363411567fa52087fa0b9fa085eANALYSIS DATE: 2022-10-22T14:50:55ZTTPS: T1053, T1005, T1081, T1060,...

Malware Analysis – persistence – 6445361212623df909ed2eae3f6c3da0

October 22, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 6445361212623df909ed2eae3f6c3da0SHA1: 68b2e4ce362406d96f4577b857bf71cb1e4ecf65ANALYSIS DATE: 2022-10-22T15:00:40ZTTPS: T1107, T1490, T1091, T1060, T1112, T1005, T1081, T1082...

Malware Analysis – – 5878ad161d87cd34f135096b374ecd74

October 22, 2022

Score: 7 MALWARE FAMILY: TAGS:MD5: 5878ad161d87cd34f135096b374ecd74SHA1: aff8540b507ff58eaaadafff5e0a0bd241ee6b10ANALYSIS DATE: 2022-10-22T14:42:44ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – 9d8c4e31390d8c425577eb8c485dad30

October 22, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 9d8c4e31390d8c425577eb8c485dad30SHA1: 5894425efcd316df81e771caf84f0bf8b96a0251ANALYSIS DATE: 2022-10-22T14:45:04ZTTPS: T1082, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – – c9489c311cef8e2fd8b25202625f8300

October 22, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: c9489c311cef8e2fd8b25202625f8300SHA1: fc8278fc91cfe0adb178db023a05be60da51a877ANALYSIS DATE: 2022-10-22T15:05:45ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – 9ece65fbf12f89c9ac55726d98293b57

October 22, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 9ece65fbf12f89c9ac55726d98293b57SHA1: 7bc9b3c3b6f494fe6ca825e243f8f8fe4443b1baANALYSIS DATE: 2022-10-22T15:45:37ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 5e8701f9d6624a53e5e6a67457ca45b2

October 22, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 5e8701f9d6624a53e5e6a67457ca45b2SHA1: 8b1e95c8ee61b2a685ad936081e6bdd4c7e0b8e1ANALYSIS DATE: 2022-10-22T15:24:08ZTTPS: T1222, T1005, T1081, T1012,...

Malware Analysis – locky – f63462259d9fbe411e276f137bcb74d4

October 22, 2022

Score: 10 MALWARE FAMILY: lockyTAGS:family:locky, ransomwareMD5: f63462259d9fbe411e276f137bcb74d4SHA1: 5dc4433eedfa45bfd78ce002f92bd9cd47f30d71ANALYSIS DATE: 2022-10-22T15:43:45ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – – 94d087166651c0020a9e6cc2fdacdc0c

October 22, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 94d087166651c0020a9e6cc2fdacdc0cSHA1: 99be22569ba9b1e49d3fd36f65faa6795672fcc0ANALYSIS DATE: 2022-10-22T16:09:53ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 518f3241ce41625209cdf7ad8567cf56

October 22, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 518f3241ce41625209cdf7ad8567cf56SHA1: bc772f5402c5c1337850a0dc421163fe606e9c88ANALYSIS DATE: 2022-10-22T16:01:55ZTTPS: T1060, T1112, T1222, T1082 ScoreMeaningExample10Known badA malware family...

Malware Analysis – – e3a8a1f4f9bf5c7cc0e7da7e575cb842

October 22, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: e3a8a1f4f9bf5c7cc0e7da7e575cb842SHA1: 2edfd6857178311b4858405613039f116cd59072ANALYSIS DATE: 2022-10-22T15:55:44ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – evasion – ac7a356c77073104d0971b6945815bae

October 22, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: ac7a356c77073104d0971b6945815baeSHA1: 64c9290a69f2b7e9b74eeb53642659def971d9d3ANALYSIS DATE: 2022-10-22T16:05:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – b492f211c6e0e7dd13d9019219223510

October 22, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:google2, botnet:nam7, botnet:slovarikinstalls, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer,...

Malware Analysis – djvu – 80128ee42236ecc94d0a477e9a26f6b0

October 22, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 80128ee42236ecc94d0a477e9a26f6b0SHA1: 31cc39fd0dc6b973c2129fd882330dcf1ef010f6ANALYSIS DATE: 2022-10-22T16:27:11ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – djvu – 90a0d198ea42fd35ddc35f8622febb15

October 22, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 90a0d198ea42fd35ddc35f8622febb15SHA1: 935c10f36cb85dee7607ab5e3fb8306609544c91ANALYSIS DATE: 2022-10-22T16:21:57ZTTPS: T1222, T1053, T1012, T1060,...

Malware Analysis – dcrat – 022bc47a7232fed736eb97c1399d0d71

October 22, 2022

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:google2, botnet:nam7, botnet:slovarikinstalls, backdoor, collection, discovery, infostealer, persistence, ransomware, rat,...

Malware Analysis

Malware Analysis – persistence – e6dcc0d19c42acf6f8bc0a5fb295dc71

Malware Analysis – evasion – 13423360b8c1ffb02fac15d4f4c2b261

Malware Analysis – djvu – 35dddd354540c317a9b131af025fea15

Malware Analysis – persistence – 115c90fa3782f94e7beb2959903293bc

Malware Analysis – evasion – 9aac8706399f0fefe526d057ab9d8fdf

Malware Analysis – persistence – 17c27a27f56d52944388c05f1dec03ec

Malware Analysis – evasion – 674e7ee905d24a89af47b53b53ffc23c

Malware Analysis – ransomware – 249d6385dc41bfefaca68f7dfb3abf5c

Malware Analysis – djvu – a97a2672ce450c7b19b4896a20920c1a

Malware Analysis – persistence – 6445361212623df909ed2eae3f6c3da0

Malware Analysis – – 5878ad161d87cd34f135096b374ecd74

Malware Analysis – ransomware – 9d8c4e31390d8c425577eb8c485dad30

Malware Analysis – – c9489c311cef8e2fd8b25202625f8300

Malware Analysis – – 9ece65fbf12f89c9ac55726d98293b57

Malware Analysis – djvu – 5e8701f9d6624a53e5e6a67457ca45b2

Malware Analysis – locky – f63462259d9fbe411e276f137bcb74d4

Malware Analysis – – 94d087166651c0020a9e6cc2fdacdc0c

Malware Analysis – djvu – 518f3241ce41625209cdf7ad8567cf56

Malware Analysis – – e3a8a1f4f9bf5c7cc0e7da7e575cb842

Malware Analysis – evasion – ac7a356c77073104d0971b6945815bae

Malware Analysis – djvu – b492f211c6e0e7dd13d9019219223510

Malware Analysis – djvu – 80128ee42236ecc94d0a477e9a26f6b0

Malware Analysis – djvu – 90a0d198ea42fd35ddc35f8622febb15

Malware Analysis – dcrat – 022bc47a7232fed736eb97c1399d0d71

HackerOne Bug Bounty Disclosure: sql-injection-when-using-filteredrelation-eyalsec

Cobalt Strike Beacon Detected – 121[.]43[.]37[.]134:4434

Cobalt Strike Beacon Detected – 119[.]29[.]231[.]118:443

Cobalt Strike Beacon Detected – 39[.]101[.]74[.]162:443

Cobalt Strike Beacon Detected – 8[.]218[.]112[.]112:8880

You may have missed