Malware Analysis

Malware Analysis – – 6b07adb7eeea289e1908cb5baf5a5d93

October 22, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 6b07adb7eeea289e1908cb5baf5a5d93SHA1: 47d27128426623be81417c109a12e3838c093eb6ANALYSIS DATE: 2022-10-22T04:50:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – aab7a497e2166339b9a82a01d2a051c4

October 22, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: aab7a497e2166339b9a82a01d2a051c4SHA1: 10e9aee8464b4094fb6a6a754d8f617b8746119bANALYSIS DATE: 2022-10-22T04:49:18ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – – 8ba287e4d5b62c8b3bd9e5d3e04afcee

October 22, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 8ba287e4d5b62c8b3bd9e5d3e04afceeSHA1: 02781f4b15680c21c59a26959fe858044b0f6135ANALYSIS DATE: 2022-10-22T04:46:36ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – persistence – 7b449fc14ac4ed33d828d70367dd9361

October 22, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealer, upxMD5: 7b449fc14ac4ed33d828d70367dd9361SHA1: 44064f97b839e6c421c1b52c9cf2e8395dd2f890ANALYSIS DATE: 2022-10-20T08:28:28ZTTPS: T1060, T1112, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – 80164d0ec36a23a99f475bcd6b7d22e0

October 22, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 80164d0ec36a23a99f475bcd6b7d22e0SHA1: d49a64aa7b25b3789d06174b8bb82c284d1ddd8bANALYSIS DATE: 2022-10-20T08:29:42ZTTPS: T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – e9364fd6cff3a0fee9d8636f526a506e

October 22, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: e9364fd6cff3a0fee9d8636f526a506eSHA1: e51f1e530d958bf41386b39416413977c4143c6aANALYSIS DATE: 2022-10-21T20:13:21ZTTPS: T1005, T1081, T1012, T1222,...

Malware Analysis – danabot – d6d9a414b730c354bcc0898be39bb1ef

October 22, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: d6d9a414b730c354bcc0898be39bb1efSHA1: cb9a900daee7a92e682ffec32555cf9e5da63bb6ANALYSIS...

Malware Analysis – djvu – 9a5f578e12a5b13f8f43d5354d1a6b3a

October 22, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 9a5f578e12a5b13f8f43d5354d1a6b3aSHA1: 13a54466ea20dd8a3ff8694f19ce54fba416f8b4ANALYSIS DATE: 2022-10-21T21:00:32ZTTPS: T1222, T1082, T1053, T1005,...

Malware Analysis – danabot – 8ae5a35a6e434514f421e720aecab786

October 22, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 8ae5a35a6e434514f421e720aecab786SHA1: 518ae303c6e50d29ab84765b49e94d9f34862599ANALYSIS...

Malware Analysis – djvu – c9541b8ec22c7704a36b64912164e311

October 22, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: c9541b8ec22c7704a36b64912164e311SHA1: 835ce36aaba5acf0baf0af84439b1efcf8ac416eANALYSIS DATE: 2022-10-21T21:00:02ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – persistence – b2215e07bc71e215abc9ed15d8d1092f

October 22, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: b2215e07bc71e215abc9ed15d8d1092fSHA1: 43d13e28914e43885b02231d4d774aac13dfd0a2ANALYSIS DATE: 2022-10-21T21:00:19ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091, T1060, T1112...

Malware Analysis – danabot – f43ac18b5edd49c9c4fe6620e17220ac

October 22, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: f43ac18b5edd49c9c4fe6620e17220acSHA1: ad94aa6c2447546e65063c9d453304ca1b5547b7ANALYSIS...

Malware Analysis – evasion – f9a6cefa9b80c8c82426b4f43c8386a7

October 22, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomware, themida, trojan, upxMD5: f9a6cefa9b80c8c82426b4f43c8386a7SHA1: 28fa185b03547f8441a43f1a4e91b961f5ad6bb8ANALYSIS DATE: 2022-10-21T21:55:17ZTTPS: T1012, T1120, T1082, T1497 ScoreMeaningExample10Known badA malware...

Malware Analysis – persistence – 1784b275a3aa4f0e37ca55fa4eee6a50

October 22, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 1784b275a3aa4f0e37ca55fa4eee6a50SHA1: 5b2497dff78037fe8cef29498e9f8579c1f94a73ANALYSIS DATE: 2022-10-21T22:20:24ZTTPS: T1082, T1107, T1490, T1091, T1060, T1112, T1005, T1081...

Malware Analysis – discovery – f01771b29abf7e8498a428c2d53bffac

October 22, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: f01771b29abf7e8498a428c2d53bffacSHA1: 5dcc92ce9101bce9d807b09d682e2e80b0087271ANALYSIS DATE: 2022-10-21T22:34:38ZTTPS: T1012, T1082, T1120, T1060, T1112 ScoreMeaningExample10Known badA malware family...

Malware Analysis – djvu – d9a45cad09b06bb232c0050fb4263e4f

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: d9a45cad09b06bb232c0050fb4263e4fSHA1: c90823242a31c83a49f2c161f7920cae1e115218ANALYSIS DATE: 2022-10-21T14:14:42ZTTPS: T1005, T1081, T1012, T1060,...

Malware Analysis – evasion – 736c1b70cd49fc72e575a0fb4dacaed0

October 21, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 736c1b70cd49fc72e575a0fb4dacaed0SHA1: f1462e828edd6607c229c6f98c61f85684117f63ANALYSIS DATE: 2022-10-21T07:09:18ZTTPS: T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – 437b022ea640e3f2ef6dffa5f0b58606

October 21, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 437b022ea640e3f2ef6dffa5f0b58606SHA1: b68a8a1658c2ae6cff738178ced31db7e2cafe63ANALYSIS DATE: 2022-10-21T06:54:00ZTTPS: T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – db2b87503b2f76ef39660af0903186f6

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: db2b87503b2f76ef39660af0903186f6SHA1: 7a793b7930b4988d42e0b5e5d75d734ce3738e3eANALYSIS DATE: 2022-10-21T14:20:44ZTTPS: T1012, T1060, T1112, T1082,...

Malware Analysis – djvu – 8d18e31cf34a906ab2cea42d14aad351

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 8d18e31cf34a906ab2cea42d14aad351SHA1: 65607a572919893e596dcf37fd25560ec1d1d058ANALYSIS DATE: 2022-10-21T14:38:13ZTTPS: T1060, T1112, T1222, T1082, T1012 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 6958fc7326e0893ae5fc204d74217c9d

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 6958fc7326e0893ae5fc204d74217c9dSHA1: 2f14c70a7b4be2b978389aa6868d74d9fd20ae30ANALYSIS DATE: 2022-10-21T14:40:23ZTTPS: T1060, T1112, T1012, T1082,...

Malware Analysis – ransomware – 870172f3804834a399be0c291cecc756

October 21, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 870172f3804834a399be0c291cecc756SHA1: 1272fddefcda82716aa71c89d7d925a8c0e4f31fANALYSIS DATE: 2022-10-21T14:40:17ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – chaos – 2d4cbbfab9d173a12d9174130f7bcafb

October 21, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, persistence, ransomwareMD5: 2d4cbbfab9d173a12d9174130f7bcafbSHA1: 6b652c8b623f16d1006f7f116f6fc3dad8ea7ea7ANALYSIS DATE: 2022-10-21T15:00:07ZTTPS: T1490, T1059, T1107, T1082, T1060, T1112 ScoreMeaningExample10Known badA...

Malware Analysis – discovery – 0c5a449950cd909f196542173a5dd3fc

October 21, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 0c5a449950cd909f196542173a5dd3fcSHA1: c80d67f53718354107dc90b8bd5f251d4db03732ANALYSIS DATE: 2022-10-21T15:26:52ZTTPS: T1012, T1082, T1060, T1120 ScoreMeaningExample10Known badA malware family was...

Malware Analysis

Malware Analysis – – 6b07adb7eeea289e1908cb5baf5a5d93

Malware Analysis – – aab7a497e2166339b9a82a01d2a051c4

Malware Analysis – – 8ba287e4d5b62c8b3bd9e5d3e04afcee

Malware Analysis – persistence – 7b449fc14ac4ed33d828d70367dd9361

Malware Analysis – evasion – 80164d0ec36a23a99f475bcd6b7d22e0

Malware Analysis – djvu – e9364fd6cff3a0fee9d8636f526a506e

Malware Analysis – danabot – d6d9a414b730c354bcc0898be39bb1ef

Malware Analysis – djvu – 9a5f578e12a5b13f8f43d5354d1a6b3a

Malware Analysis – danabot – 8ae5a35a6e434514f421e720aecab786

Malware Analysis – djvu – c9541b8ec22c7704a36b64912164e311

Malware Analysis – persistence – b2215e07bc71e215abc9ed15d8d1092f

Malware Analysis – danabot – f43ac18b5edd49c9c4fe6620e17220ac

Malware Analysis – evasion – f9a6cefa9b80c8c82426b4f43c8386a7

Malware Analysis – persistence – 1784b275a3aa4f0e37ca55fa4eee6a50

Malware Analysis – discovery – f01771b29abf7e8498a428c2d53bffac

Malware Analysis – djvu – d9a45cad09b06bb232c0050fb4263e4f

Malware Analysis – evasion – 736c1b70cd49fc72e575a0fb4dacaed0

Malware Analysis – evasion – 437b022ea640e3f2ef6dffa5f0b58606

Malware Analysis – djvu – db2b87503b2f76ef39660af0903186f6

Malware Analysis – djvu – 8d18e31cf34a906ab2cea42d14aad351

Malware Analysis – djvu – 6958fc7326e0893ae5fc204d74217c9d

Malware Analysis – ransomware – 870172f3804834a399be0c291cecc756

Malware Analysis – chaos – 2d4cbbfab9d173a12d9174130f7bcafb

Malware Analysis – discovery – 0c5a449950cd909f196542173a5dd3fc

Cobalt Strike Beacon Detected – 121[.]43[.]37[.]134:4434

Cobalt Strike Beacon Detected – 119[.]29[.]231[.]118:443

Cobalt Strike Beacon Detected – 39[.]101[.]74[.]162:443

Cobalt Strike Beacon Detected – 8[.]218[.]112[.]112:8880

Cobalt Strike Beacon Detected – 47[.]109[.]48[.]57:443

You may have missed