Malware Analysis

Malware Analysis – djvu – 7928c50cae4ebd08e65423ff46c4e9b0

April 17, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:623db25256a5734d1207787d269d05b2, discovery, persistence, ransomware, spyware, stealerMD5: 7928c50cae4ebd08e65423ff46c4e9b0SHA1: e8678f10645d7226175c80166a3b76cb9173faffANALYSIS DATE: 2023-04-17T17:01:36ZTTPS: T1082, T1053, T1005, T1081,...

Malware Analysis – persistence – 7f9ac429e16252648618ddcb9b3886a1

April 17, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 7f9ac429e16252648618ddcb9b3886a1SHA1: 0f4de1a4b065a5f154a4b843cfc58325bb3b4e0fANALYSIS DATE: 2023-04-17T17:10:56ZTTPS: T1004, T1112, T1107, T1490, T1005, T1081 ScoreMeaningExample10Known badA...

Malware Analysis – persistence – a3ef7f3fab1b3bd5fe855c0d1c271fa8

April 17, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: a3ef7f3fab1b3bd5fe855c0d1c271fa8SHA1: 30e840f8c5c8518e095b2f14256d6dbe466d5bfaANALYSIS DATE: 2023-04-17T17:10:28ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – smokeloader – 671a5553c82fb95a3c5711707d0b7d39

April 17, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 671a5553c82fb95a3c5711707d0b7d39SHA1: d041d72966e651e8ad0674a179371aec2bd62349ANALYSIS DATE: 2023-04-17T17:17:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – wannacry – 0a3b63a9039391a6a5ea3918c7e8a837

April 17, 2023

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, ransomware, wormMD5: 0a3b63a9039391a6a5ea3918c7e8a837SHA1: 20fd851be1189e6d2e9000bb0a0e4ebf7882310fANALYSIS DATE: 2023-04-17T17:36:52ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – dharma – 650ac8296c53afd1f6adec4c34871c02

April 17, 2023

Score: 10 MALWARE FAMILY: dharmaTAGS:family:dharma, persistence, ransomware, spyware, stealerMD5: 650ac8296c53afd1f6adec4c34871c02SHA1: 29d81be34df4ecd0cee036d6d71bc1144c477bd5ANALYSIS DATE: 2023-04-17T17:42:34ZTTPS: T1005, T1081, T1082, T1112, T1060, T1107, T1490...

Malware Analysis – evasion – bb703f4d9d67f2f777fee75b4f3b5029

April 17, 2023

Score: 6 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: bb703f4d9d67f2f777fee75b4f3b5029SHA1: ec055096e8d8ac62e9d6d5fd419fd4d89a694579ANALYSIS DATE: 2023-04-17T17:57:05ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – gandcrab – 084b358278f51b1040d20508a323020c

April 17, 2023

Score: 10 MALWARE FAMILY: gandcrabTAGS:family:gandcrab, backdoor, ransomware, spyware, stealerMD5: 084b358278f51b1040d20508a323020cSHA1: 8766b2475467f8314fe3916b4df540705fbcc8d1ANALYSIS DATE: 2023-04-17T17:57:14ZTTPS: T1012, T1120, T1082, T1005, T1081, T1107, T1490...

Malware Analysis – djvu – b4586f74cee9669371f2e64b6678641d

April 16, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:623db25256a5734d1207787d269d05b2, discovery, persistence, ransomware, spyware, stealerMD5: b4586f74cee9669371f2e64b6678641dSHA1: f855ec126871e24159ac9e0bd438cc08d2eb1770ANALYSIS DATE: 2023-04-16T16:20:15ZTTPS: T1222, T1053, T1005, T1081,...

Malware Analysis – ransomware – 88a69bbc9bfdc9edc263a2024ca1d78d

April 16, 2023

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 88a69bbc9bfdc9edc263a2024ca1d78dSHA1: f973e09d77438bc01a93e310eb4513f24acc601eANALYSIS DATE: 2023-04-16T16:12:17ZTTPS: T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – amadey – 2cd65f24e1ef47b1c27daf46f55c9351

April 16, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:lumma, family:rhadamanthys, family:smokeloader, family:vidar, botnet:623db25256a5734d1207787d269d05b2, botnet:pub1, botnet:sprg, backdoor, collection, discovery, evasion, persistence, ransomware, spyware,...

Malware Analysis – discovery – aed07e5e91a732956dba1b37a9a6b48b

April 16, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, persistence, ransomware, trojanMD5: aed07e5e91a732956dba1b37a9a6b48bSHA1: df1e7a31f48fec1bbc8cadcd3570a6ba7144c7e7ANALYSIS DATE: 2023-04-16T15:24:05ZTTPS: T1018, T1112, T1031, T1089, T1107, T1490, T1562,...

Malware Analysis – amadey – 25e4492533c31df8c81938100d1a89b5

April 15, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:lumma, family:smokeloader, family:vidar, botnet:623db25256a5734d1207787d269d05b2, botnet:e749025c61b2caca10aa829a9e1a65a1, botnet:pub1, botnet:sprg, backdoor, discovery, evasion, persistence, ransomware, spyware, stealer,...

Malware Analysis – evasion – 0621da4524d3f97c53d56d062e7938de

April 15, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomware, trojanMD5: 0621da4524d3f97c53d56d062e7938deSHA1: f9fc642eb6ea007536a3d2b827a1995915e21417ANALYSIS DATE: 2023-04-15T16:23:11ZTTPS: T1082, T1158, T1112, T1491, T1012, T1053, T1088, T1089 ScoreMeaningExample10Known...

Malware Analysis – djvu – 1dd758012876b986897fa4ecc12660e3

April 15, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:623db25256a5734d1207787d269d05b2, discovery, persistence, ransomware, spyware, stealerMD5: 1dd758012876b986897fa4ecc12660e3SHA1: d83c9fcb25192e999272302cc48143b1f8754639ANALYSIS DATE: 2023-04-15T16:25:54ZTTPS: T1060, T1112, T1012, T1082,...

Malware Analysis – djvu – 8c17dca7ea605fc37a624331ac72e65e

April 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5df88deb5dde677ba658b77ad5f60248, discovery, persistence, ransomware, spyware, stealerMD5: 8c17dca7ea605fc37a624331ac72e65eSHA1: 71ca72354c3d42866992a9b6620067cf898909eeANALYSIS DATE: 2023-04-01T15:01:35ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – evasion – e0db5819c325375bfde35df5b1463e51

April 1, 2023

Score: 6 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: e0db5819c325375bfde35df5b1463e51SHA1: 265663bb1ce19366ea1695f40d9e028ddde14528ANALYSIS DATE: 2023-04-01T15:36:05ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – redline – 4265a75ed0df6c5675761d1e1d2a5e26

April 1, 2023

Score: 10 MALWARE FAMILY: redlineTAGS:family:redline, discovery, infostealer, persistence, ransomware, spyware, stealer, upxMD5: 4265a75ed0df6c5675761d1e1d2a5e26SHA1: 345bab81cfe571f9505c52ca001dc015c66b09bdANALYSIS DATE: 2023-04-01T15:29:17ZTTPS: T1060, T1005, T1081, T1112,...

Malware Analysis – – b63528fb75da0e9e5ea042dd8608610a

April 1, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: b63528fb75da0e9e5ea042dd8608610aSHA1: 86357bf32d32aaab48d28d331a0798aa377ba258ANALYSIS DATE: 2023-04-01T15:49:47ZTTPS: T1012, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – cf9172551150d9e54626a48bc4d7a196

April 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5df88deb5dde677ba658b77ad5f60248, discovery, persistence, ransomware, spyware, stealerMD5: cf9172551150d9e54626a48bc4d7a196SHA1: 21f10d5aa693242d354a49a4b55f99ccbc9c3c82ANALYSIS DATE: 2023-04-01T16:02:19ZTTPS: T1060, T1112, T1082, T1053,...

Malware Analysis – smokeloader – 98c02acb0401448098dc6c09911c7053

April 1, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 98c02acb0401448098dc6c09911c7053SHA1: 5611794292c3214d0ffb0491c23377e866ccbd46ANALYSIS DATE: 2023-04-01T16:10:41ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – fd31bb7ea1ad81b4570011952008d009

April 1, 2023

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: fd31bb7ea1ad81b4570011952008d009SHA1: 2ab1014b079df5c4507d69d41b92fbc574156811ANALYSIS DATE: 2023-04-01T15:53:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – c84ad96950dc9a5ccab4ad204c46e359

April 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5df88deb5dde677ba658b77ad5f60248, discovery, persistence, ransomware, spyware, stealerMD5: c84ad96950dc9a5ccab4ad204c46e359SHA1: d4672aad001462d79ec1719faa87593a26383926ANALYSIS DATE: 2023-04-01T16:08:42ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – djvu – f1a4fadf22886ea65120de4d9a227d78

April 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5df88deb5dde677ba658b77ad5f60248, discovery, persistence, ransomware, spyware, stealerMD5: f1a4fadf22886ea65120de4d9a227d78SHA1: f6fa9b1c2010638a4a939774d2b0090d03e08d8eANALYSIS DATE: 2023-04-01T16:40:50ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis

Malware Analysis – djvu – 7928c50cae4ebd08e65423ff46c4e9b0

Malware Analysis – persistence – 7f9ac429e16252648618ddcb9b3886a1

Malware Analysis – persistence – a3ef7f3fab1b3bd5fe855c0d1c271fa8

Malware Analysis – smokeloader – 671a5553c82fb95a3c5711707d0b7d39

Malware Analysis – wannacry – 0a3b63a9039391a6a5ea3918c7e8a837

Malware Analysis – dharma – 650ac8296c53afd1f6adec4c34871c02

Malware Analysis – evasion – bb703f4d9d67f2f777fee75b4f3b5029

Malware Analysis – gandcrab – 084b358278f51b1040d20508a323020c

Malware Analysis – djvu – b4586f74cee9669371f2e64b6678641d

Malware Analysis – ransomware – 88a69bbc9bfdc9edc263a2024ca1d78d

Malware Analysis – amadey – 2cd65f24e1ef47b1c27daf46f55c9351

Malware Analysis – discovery – aed07e5e91a732956dba1b37a9a6b48b

Malware Analysis – amadey – 25e4492533c31df8c81938100d1a89b5

Malware Analysis – evasion – 0621da4524d3f97c53d56d062e7938de

Malware Analysis – djvu – 1dd758012876b986897fa4ecc12660e3

Malware Analysis – djvu – 8c17dca7ea605fc37a624331ac72e65e

Malware Analysis – evasion – e0db5819c325375bfde35df5b1463e51

Malware Analysis – redline – 4265a75ed0df6c5675761d1e1d2a5e26

Malware Analysis – – b63528fb75da0e9e5ea042dd8608610a

Malware Analysis – djvu – cf9172551150d9e54626a48bc4d7a196

Malware Analysis – smokeloader – 98c02acb0401448098dc6c09911c7053

Malware Analysis – evasion – fd31bb7ea1ad81b4570011952008d009

Malware Analysis – djvu – c84ad96950dc9a5ccab4ad204c46e359

Malware Analysis – djvu – f1a4fadf22886ea65120de4d9a227d78

[INCRANSOM] – Ransomware Victim: cityofgardendale[.]com

CVE Alert: CVE-2025-27452

CVE Alert: CVE-2025-27453

CVE Alert: CVE-2025-27454

CVE Alert: CVE-2025-27455

You may have missed