Malware Analysis

Malware Analysis – djvu – e9364fd6cff3a0fee9d8636f526a506e

October 22, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: e9364fd6cff3a0fee9d8636f526a506eSHA1: e51f1e530d958bf41386b39416413977c4143c6aANALYSIS DATE: 2022-10-21T20:13:21ZTTPS: T1005, T1081, T1012, T1222,...

Malware Analysis – evasion – 80164d0ec36a23a99f475bcd6b7d22e0

October 22, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 80164d0ec36a23a99f475bcd6b7d22e0SHA1: d49a64aa7b25b3789d06174b8bb82c284d1ddd8bANALYSIS DATE: 2022-10-20T08:29:42ZTTPS: T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – danabot – d6d9a414b730c354bcc0898be39bb1ef

October 22, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: d6d9a414b730c354bcc0898be39bb1efSHA1: cb9a900daee7a92e682ffec32555cf9e5da63bb6ANALYSIS...

Malware Analysis – djvu – 9a5f578e12a5b13f8f43d5354d1a6b3a

October 22, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 9a5f578e12a5b13f8f43d5354d1a6b3aSHA1: 13a54466ea20dd8a3ff8694f19ce54fba416f8b4ANALYSIS DATE: 2022-10-21T21:00:32ZTTPS: T1222, T1082, T1053, T1005,...

Malware Analysis – danabot – 8ae5a35a6e434514f421e720aecab786

October 22, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 8ae5a35a6e434514f421e720aecab786SHA1: 518ae303c6e50d29ab84765b49e94d9f34862599ANALYSIS...

Malware Analysis – djvu – c9541b8ec22c7704a36b64912164e311

October 22, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: c9541b8ec22c7704a36b64912164e311SHA1: 835ce36aaba5acf0baf0af84439b1efcf8ac416eANALYSIS DATE: 2022-10-21T21:00:02ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – persistence – b2215e07bc71e215abc9ed15d8d1092f

October 22, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: b2215e07bc71e215abc9ed15d8d1092fSHA1: 43d13e28914e43885b02231d4d774aac13dfd0a2ANALYSIS DATE: 2022-10-21T21:00:19ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091, T1060, T1112...

Malware Analysis – danabot – f43ac18b5edd49c9c4fe6620e17220ac

October 22, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: f43ac18b5edd49c9c4fe6620e17220acSHA1: ad94aa6c2447546e65063c9d453304ca1b5547b7ANALYSIS...

Malware Analysis – evasion – f9a6cefa9b80c8c82426b4f43c8386a7

October 22, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomware, themida, trojan, upxMD5: f9a6cefa9b80c8c82426b4f43c8386a7SHA1: 28fa185b03547f8441a43f1a4e91b961f5ad6bb8ANALYSIS DATE: 2022-10-21T21:55:17ZTTPS: T1012, T1120, T1082, T1497 ScoreMeaningExample10Known badA malware...

Malware Analysis – persistence – 1784b275a3aa4f0e37ca55fa4eee6a50

October 22, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 1784b275a3aa4f0e37ca55fa4eee6a50SHA1: 5b2497dff78037fe8cef29498e9f8579c1f94a73ANALYSIS DATE: 2022-10-21T22:20:24ZTTPS: T1082, T1107, T1490, T1091, T1060, T1112, T1005, T1081...

Malware Analysis – discovery – f01771b29abf7e8498a428c2d53bffac

October 22, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: f01771b29abf7e8498a428c2d53bffacSHA1: 5dcc92ce9101bce9d807b09d682e2e80b0087271ANALYSIS DATE: 2022-10-21T22:34:38ZTTPS: T1012, T1082, T1120, T1060, T1112 ScoreMeaningExample10Known badA malware family...

Malware Analysis – djvu – d9a45cad09b06bb232c0050fb4263e4f

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: d9a45cad09b06bb232c0050fb4263e4fSHA1: c90823242a31c83a49f2c161f7920cae1e115218ANALYSIS DATE: 2022-10-21T14:14:42ZTTPS: T1005, T1081, T1012, T1060,...

Malware Analysis – evasion – 736c1b70cd49fc72e575a0fb4dacaed0

October 21, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 736c1b70cd49fc72e575a0fb4dacaed0SHA1: f1462e828edd6607c229c6f98c61f85684117f63ANALYSIS DATE: 2022-10-21T07:09:18ZTTPS: T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – 437b022ea640e3f2ef6dffa5f0b58606

October 21, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 437b022ea640e3f2ef6dffa5f0b58606SHA1: b68a8a1658c2ae6cff738178ced31db7e2cafe63ANALYSIS DATE: 2022-10-21T06:54:00ZTTPS: T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – db2b87503b2f76ef39660af0903186f6

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: db2b87503b2f76ef39660af0903186f6SHA1: 7a793b7930b4988d42e0b5e5d75d734ce3738e3eANALYSIS DATE: 2022-10-21T14:20:44ZTTPS: T1012, T1060, T1112, T1082,...

Malware Analysis – djvu – 8d18e31cf34a906ab2cea42d14aad351

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 8d18e31cf34a906ab2cea42d14aad351SHA1: 65607a572919893e596dcf37fd25560ec1d1d058ANALYSIS DATE: 2022-10-21T14:38:13ZTTPS: T1060, T1112, T1222, T1082, T1012 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 6958fc7326e0893ae5fc204d74217c9d

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 6958fc7326e0893ae5fc204d74217c9dSHA1: 2f14c70a7b4be2b978389aa6868d74d9fd20ae30ANALYSIS DATE: 2022-10-21T14:40:23ZTTPS: T1060, T1112, T1012, T1082,...

Malware Analysis – ransomware – 870172f3804834a399be0c291cecc756

October 21, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 870172f3804834a399be0c291cecc756SHA1: 1272fddefcda82716aa71c89d7d925a8c0e4f31fANALYSIS DATE: 2022-10-21T14:40:17ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – discovery – 0c5a449950cd909f196542173a5dd3fc

October 21, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 0c5a449950cd909f196542173a5dd3fcSHA1: c80d67f53718354107dc90b8bd5f251d4db03732ANALYSIS DATE: 2022-10-21T15:26:52ZTTPS: T1012, T1082, T1060, T1120 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – lockbit – ef4a5d286011e8cd66514fa07ac99a29

October 21, 2022

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, evasion, persistence, ransomwareMD5: ef4a5d286011e8cd66514fa07ac99a29SHA1: 8458579dd79056cdddbab67f3c82832acd00ab6dANALYSIS DATE: 2022-10-21T15:00:46ZTTPS: T1490, T1059, T1107, T1060, T1112, T1082, T1012, T1120,...

Malware Analysis – discovery – 8c3ce9c090bd9fa2be2375904e042fe4

October 21, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 8c3ce9c090bd9fa2be2375904e042fe4SHA1: 1d14f719e46cd5d76c05ede355e7f11eee2c07c3ANALYSIS DATE: 2022-10-21T15:17:36ZTTPS: T1082, T1060, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – chaos – 2d4cbbfab9d173a12d9174130f7bcafb

October 21, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, persistence, ransomwareMD5: 2d4cbbfab9d173a12d9174130f7bcafbSHA1: 6b652c8b623f16d1006f7f116f6fc3dad8ea7ea7ANALYSIS DATE: 2022-10-21T15:00:07ZTTPS: T1490, T1059, T1107, T1082, T1060, T1112 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – b57fa6fca0cff4f7612b9ff9f95c8805

October 21, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: b57fa6fca0cff4f7612b9ff9f95c8805SHA1: df083f0b4a89dd9964db28685889a7a2c32858beANALYSIS DATE: 2022-10-21T15:36:39ZTTPS: T1005, T1081, T1222, T1012,...

Malware Analysis – persistence – 6f66102d811e4103ccfed34ec1baab4a

October 21, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 6f66102d811e4103ccfed34ec1baab4aSHA1: f2a6a1e87f8d235eebfd457cab125423082fb49dANALYSIS DATE: 2022-10-21T15:40:23ZTTPS: T1091, T1060, T1112, T1005, T1081, T1082, T1107, T1490...

Malware Analysis

Malware Analysis – djvu – e9364fd6cff3a0fee9d8636f526a506e

Malware Analysis – evasion – 80164d0ec36a23a99f475bcd6b7d22e0

Malware Analysis – danabot – d6d9a414b730c354bcc0898be39bb1ef

Malware Analysis – djvu – 9a5f578e12a5b13f8f43d5354d1a6b3a

Malware Analysis – danabot – 8ae5a35a6e434514f421e720aecab786

Malware Analysis – djvu – c9541b8ec22c7704a36b64912164e311

Malware Analysis – persistence – b2215e07bc71e215abc9ed15d8d1092f

Malware Analysis – danabot – f43ac18b5edd49c9c4fe6620e17220ac

Malware Analysis – evasion – f9a6cefa9b80c8c82426b4f43c8386a7

Malware Analysis – persistence – 1784b275a3aa4f0e37ca55fa4eee6a50

Malware Analysis – discovery – f01771b29abf7e8498a428c2d53bffac

Malware Analysis – djvu – d9a45cad09b06bb232c0050fb4263e4f

Malware Analysis – evasion – 736c1b70cd49fc72e575a0fb4dacaed0

Malware Analysis – evasion – 437b022ea640e3f2ef6dffa5f0b58606

Malware Analysis – djvu – db2b87503b2f76ef39660af0903186f6

Malware Analysis – djvu – 8d18e31cf34a906ab2cea42d14aad351

Malware Analysis – djvu – 6958fc7326e0893ae5fc204d74217c9d

Malware Analysis – ransomware – 870172f3804834a399be0c291cecc756

Malware Analysis – discovery – 0c5a449950cd909f196542173a5dd3fc

Malware Analysis – lockbit – ef4a5d286011e8cd66514fa07ac99a29

Malware Analysis – discovery – 8c3ce9c090bd9fa2be2375904e042fe4

Malware Analysis – chaos – 2d4cbbfab9d173a12d9174130f7bcafb

Malware Analysis – djvu – b57fa6fca0cff4f7612b9ff9f95c8805

Malware Analysis – persistence – 6f66102d811e4103ccfed34ec1baab4a

Cobalt Strike Beacon Detected – 185[.]208[.]159[.]224:443

Cobalt Strike Beacon Detected – 43[.]156[.]57[.]179:443

Cobalt Strike Beacon Detected – 43[.]255[.]159[.]28:443

Cobalt Strike Beacon Detected – 123[.]249[.]20[.]20:8443

Cobalt Strike Beacon Detected – 1[.]92[.]100[.]230:80

You may have missed