Malware Analysis

Malware Analysis – persistence – da0fa06669475a0d8a9cffbf66ae2649

October 20, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: da0fa06669475a0d8a9cffbf66ae2649SHA1: 7b82a641353526ec2e67f7911cba6249857e4ae3ANALYSIS DATE: 2022-10-20T03:20:18ZTTPS: T1082, T1107, T1490, T1091, T1060, T1112, T1005, T1081...

Malware Analysis – djvu – e85b76e6329d84a2deaf949a41f9f38b

October 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: e85b76e6329d84a2deaf949a41f9f38bSHA1: 33683932dd9ab46ccf33177363b1143242a284bbANALYSIS DATE: 2022-10-20T03:11:04ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – persistence – d677d25e57038aa39a5ebf509bc8be0f

October 20, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: d677d25e57038aa39a5ebf509bc8be0fSHA1: ba1ded1bf4e1195e2e27a2da83c34bbafd4a05b7ANALYSIS DATE: 2022-10-20T03:20:24ZTTPS: T1082, T1107, T1490, T1091, T1060, T1112, T1005, T1081...

Malware Analysis – persistence – 6774ec8453d6d58cd8e79534080fcf3d

October 20, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 6774ec8453d6d58cd8e79534080fcf3dSHA1: 9841464a2b1be2b4d6b72bfc71c7e2c95b756992ANALYSIS DATE: 2022-10-20T03:20:31ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091, T1060, T1112...

Malware Analysis – danabot – 96739370beb331b75f4dadc34a97b377

October 20, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 96739370beb331b75f4dadc34a97b377SHA1: 07794bc92e5a744d14f4d5fab2bdad6a9048d67eANALYSIS...

Malware Analysis – evasion – 5826afdc3da0e5994a7558aba2499f93

October 20, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 5826afdc3da0e5994a7558aba2499f93SHA1: 4310a2e0727668bf6615f1e1c3453e051ff486d7ANALYSIS DATE: 2022-10-20T03:30:19ZTTPS: T1012, T1120, T1082, T1112, T1088, T1089, T1018, T1158,...

Malware Analysis – persistence – 804d161caad6c13e7d7d56be5543c384

October 20, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 804d161caad6c13e7d7d56be5543c384SHA1: 85c8ede00e5c105e302103ef9c567f7a64b17e87ANALYSIS DATE: 2022-10-20T03:20:41ZTTPS: T1082, T1107, T1490, T1091, T1060, T1112, T1005, T1081...

Malware Analysis – smokeloader – 46017e962ae3b76d86177c74d6c54257

October 20, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 46017e962ae3b76d86177c74d6c54257SHA1: b413251a1bd5f8d51220eac070b1df4599a24ed6ANALYSIS DATE: 2022-10-20T04:07:24ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – 3bb6ba5f313a55bb4bfcae96f0b2174e

October 20, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojan, upxMD5: 3bb6ba5f313a55bb4bfcae96f0b2174eSHA1: 72a3e0fc09e385f0b77fcb067d246331e1636a55ANALYSIS DATE: 2022-10-20T03:39:57ZTTPS: T1088, T1089, T1112, T1491, T1082, T1060, T1004...

Malware Analysis – djvu – 550aa6e971ec74a745e74889f95b231d

October 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 550aa6e971ec74a745e74889f95b231dSHA1: 21afe5f1fcb6bd967e2ff2e3dc30bc82c62e0170ANALYSIS DATE: 2022-10-20T04:27:44ZTTPS: T1082, T1005, T1081, T1012,...

Malware Analysis – chaos – 9188ac80b6c87150a513431bb27567bc

October 20, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, persistence, ransomware, spyware, stealerMD5: 9188ac80b6c87150a513431bb27567bcSHA1: 7abc0b85cefcec070ee47fb3a3c982df7b1c5e19ANALYSIS DATE: 2022-10-20T03:40:08ZTTPS: T1490, T1059, T1107, T1082, T1060, T1112,...

Malware Analysis – djvu – 84064f1d6a3a2f419c75c7ad2241171b

October 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 84064f1d6a3a2f419c75c7ad2241171bSHA1: beca83d94d18db23458b32e673ebc02b1468b1f8ANALYSIS DATE: 2022-10-20T04:50:33ZTTPS: T1222, T1005, T1081, T1012,...

Malware Analysis – chaos – c0d3bd5a91adc22c7af38bffbed28349

October 20, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, ransomware, spyware, stealerMD5: c0d3bd5a91adc22c7af38bffbed28349SHA1: 9013950420444e6f948338f1c13817d4ea6f571cANALYSIS DATE: 2022-10-20T04:40:06ZTTPS: T1005, T1081, T1082 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – persistence – 7e37f07e97e27575c5a6a7e61a3edf63

October 20, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 7e37f07e97e27575c5a6a7e61a3edf63SHA1: 5893ed714c341556df4df45c5e84b6a96ff9784bANALYSIS DATE: 2022-10-20T04:40:22ZTTPS: T1091, T1060, T1112, T1005, T1081, T1082, T1107, T1490...

Malware Analysis – djvu – 04fb5f0440c3365524d03a4e1cce1d18

October 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 04fb5f0440c3365524d03a4e1cce1d18SHA1: 6cf5ee7aa79251bfc2adab5ef0b6e9fd5e1b67d5ANALYSIS DATE: 2022-10-20T04:44:16ZTTPS: T1005, T1081, T1060, T1112,...

Malware Analysis – evasion – 91ca4d468028506fa4e6df08b0051a4d

October 19, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 91ca4d468028506fa4e6df08b0051a4dSHA1: 08b701b622f931cc76869a2fca533945cb7d121fANALYSIS DATE: 2022-10-19T13:36:40ZTTPS: T1112, T1158, T1490, T1082, T1012, T1120, T1004, T1088,...

Malware Analysis – evasion – 90c2df2630d849e48d89a14d846a11ec

October 19, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 90c2df2630d849e48d89a14d846a11ecSHA1: 9e841b75532d14642b201fe40108240fa94f9c0fANALYSIS DATE: 2022-10-19T13:36:38ZTTPS: T1004, T1112, T1491, T1060, T1490, T1158, T1082, T1012,...

Malware Analysis – evasion – a1bb74424a908d9146d2e6ea73085794

October 19, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: a1bb74424a908d9146d2e6ea73085794SHA1: 82cb2648c5b82f627d28dfa252bc522fb83b078bANALYSIS DATE: 2022-10-19T13:36:42ZTTPS: T1491, T1112, T1158, T1042, T1091, T1060, T1004, T1012,...

Malware Analysis – evasion – a0d212174dca661030a23754932bd8e7

October 19, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: a0d212174dca661030a23754932bd8e7SHA1: fa7491b6745193677a3aa594f496cd4c8082da61ANALYSIS DATE: 2022-10-19T13:36:44ZTTPS: T1490, T1082, T1112, T1042, T1088, T1089, T1060, T1158,...

Malware Analysis – evasion – 9110f80c758332cc98341c620a652e9e

October 19, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 9110f80c758332cc98341c620a652e9eSHA1: 02a2bcec6c89f8edd242ba71988b3c7547a423d4ANALYSIS DATE: 2022-10-19T13:36:46ZTTPS: T1112, T1042, T1490, T1082, T1060, T1004, T1491, T1088,...

Malware Analysis – evasion – a0b2ad17ab9d585d1d9d4c0af2eff801

October 19, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: a0b2ad17ab9d585d1d9d4c0af2eff801SHA1: 24b3b20b9e9ed6ecf28fe5d387c148d53c7a748bANALYSIS DATE: 2022-10-19T13:36:48ZTTPS: T1491, T1112, T1004, T1088, T1089, T1490, T1012, T1120,...

Malware Analysis – modiloader – 918421d1790f06b3903a54ba54d75f50

October 19, 2022

Score: 10 MALWARE FAMILY: modiloaderTAGS:family:modiloader, evasion, persistence, ransomware, trojanMD5: 918421d1790f06b3903a54ba54d75f50SHA1: 46d624611ff9f487111de4f024a671c050e98a49ANALYSIS DATE: 2022-10-19T14:07:18ZTTPS: T1112, T1012, T1120, T1082, T1491, T1497, T1518,...

Malware Analysis – – a0f109d99939a47b93c03feea25c86a7

October 19, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: a0f109d99939a47b93c03feea25c86a7SHA1: d0d703c5fbe44559e778da03b049db7058e91a80ANALYSIS DATE: 2022-10-19T14:17:41ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 6feb057de82af585167980e08a15baeb

October 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 6feb057de82af585167980e08a15baebSHA1: f87328bbba428e7cb30be9f708abfccdbb9a99f0ANALYSIS DATE: 2022-10-19T14:01:23ZTTPS: T1060, T1112, T1222, T1082, T1053 ScoreMeaningExample10Known badA malware...

Malware Analysis

Malware Analysis – persistence – da0fa06669475a0d8a9cffbf66ae2649

Malware Analysis – djvu – e85b76e6329d84a2deaf949a41f9f38b

Malware Analysis – persistence – d677d25e57038aa39a5ebf509bc8be0f

Malware Analysis – persistence – 6774ec8453d6d58cd8e79534080fcf3d

Malware Analysis – danabot – 96739370beb331b75f4dadc34a97b377

Malware Analysis – evasion – 5826afdc3da0e5994a7558aba2499f93

Malware Analysis – persistence – 804d161caad6c13e7d7d56be5543c384

Malware Analysis – smokeloader – 46017e962ae3b76d86177c74d6c54257

Malware Analysis – evasion – 3bb6ba5f313a55bb4bfcae96f0b2174e

Malware Analysis – djvu – 550aa6e971ec74a745e74889f95b231d

Malware Analysis – chaos – 9188ac80b6c87150a513431bb27567bc

Malware Analysis – djvu – 84064f1d6a3a2f419c75c7ad2241171b

Malware Analysis – chaos – c0d3bd5a91adc22c7af38bffbed28349

Malware Analysis – persistence – 7e37f07e97e27575c5a6a7e61a3edf63

Malware Analysis – djvu – 04fb5f0440c3365524d03a4e1cce1d18

Malware Analysis – evasion – 91ca4d468028506fa4e6df08b0051a4d

Malware Analysis – evasion – 90c2df2630d849e48d89a14d846a11ec

Malware Analysis – evasion – a1bb74424a908d9146d2e6ea73085794

Malware Analysis – evasion – a0d212174dca661030a23754932bd8e7

Malware Analysis – evasion – 9110f80c758332cc98341c620a652e9e

Malware Analysis – evasion – a0b2ad17ab9d585d1d9d4c0af2eff801

Malware Analysis – modiloader – 918421d1790f06b3903a54ba54d75f50

Malware Analysis – – a0f109d99939a47b93c03feea25c86a7

Malware Analysis – djvu – 6feb057de82af585167980e08a15baeb

[MEDUSA] – Ransomware Victim: LaRosa’s Pizzeria

[MEDUSA] – Ransomware Victim: PT Kalimantan Prima Persada

CVE Alert: CVE-2025-36186 – IBM – Db2

CVE Alert: CVE-2025-9458 – Autodesk – Shared Components

HackerOne Bug Bounty Disclosure: low-privileged-user-can-enable-or-disable-lovable-ai-for-new-projects-in-workspace-anxioussick

You may have missed