Malware Analysis

Malware Analysis – ransomware – ef1e4814812f320c68f3bc6bdef1df85

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: ef1e4814812f320c68f3bc6bdef1df85SHA1: 45d4fbbc2755e56df498eb410b1f11a0182dba98ANALYSIS DATE: 2022-10-19T15:41:53ZTTPS: T1082, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – persistence – d34f198a19da0c199cff7062c6444760

October 19, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: d34f198a19da0c199cff7062c6444760SHA1: 3cda463bc8b6a3c8dc26931a9d0a9fbe4c537336ANALYSIS DATE: 2022-10-19T15:42:07ZTTPS: T1107, T1490, T1091, T1060, T1112, T1005, T1081, T1082...

Malware Analysis – ransomware – 5cd64b28e9c4851e325e3fa5d8e3e06f

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 5cd64b28e9c4851e325e3fa5d8e3e06fSHA1: 791c6a8990995c4e662d526898e5586c73505c27ANALYSIS DATE: 2022-10-19T15:41:43ZTTPS: T1091, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – d74f2c024690de10201315bc1b6b785a

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: d74f2c024690de10201315bc1b6b785aSHA1: 985c36479ca96b4bd4f6762cb617d66720d8041cANALYSIS DATE: 2022-10-19T15:42:01ZTTPS: T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – e57cb0c8120e8ebe598a21f183833369

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: e57cb0c8120e8ebe598a21f183833369SHA1: e64fcdf10fc182f757220939e0f33fc4665273b5ANALYSIS DATE: 2022-10-19T16:00:25ZTTPS: T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – 8c95c2a93a9bd4b086eb4e6c4c4f9bc4

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 8c95c2a93a9bd4b086eb4e6c4c4f9bc4SHA1: 7fac5f4d92e1bf6f744686276374a81e165e5292ANALYSIS DATE: 2022-10-19T15:42:16ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 66be236b3619f458c32eea7f82cbb0b5

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 66be236b3619f458c32eea7f82cbb0b5SHA1: 6a522f5964cdad8e803061ee15c60dd2cf4dda1bANALYSIS DATE: 2022-10-19T16:00:45ZTTPS: T1091, T1005, T1081, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 98a4175c9d6d3c8d1b6fc413426f51fa

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 98a4175c9d6d3c8d1b6fc413426f51faSHA1: 0bb92e325162918551f985d30a9d444f1e5f0729ANALYSIS DATE: 2022-10-19T16:00:34ZTTPS: T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – b3d5fbac5b451b1ebcdda12e33c2b7af

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: b3d5fbac5b451b1ebcdda12e33c2b7afSHA1: 0cc298c93a22cb1222b30493ed2ca1f10c68cc52ANALYSIS DATE: 2022-10-19T16:00:54ZTTPS: T1107, T1490, T1091, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – ecfba13bbb886a16cbc4d24923324e8b

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: ecfba13bbb886a16cbc4d24923324e8bSHA1: 52df3c56f8b2cd8cd023e4eba0d2ba9fbc9935f2ANALYSIS DATE: 2022-10-19T16:01:05ZTTPS: T1107, T1490, T1091, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – 2a0cc2d6868d916e0192bc767d032dd8

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 2a0cc2d6868d916e0192bc767d032dd8SHA1: 7301f394c1a7eaa0607f74b59a265a0302ee7466ANALYSIS DATE: 2022-10-19T16:01:17ZTTPS: T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – a1d1949a74656a76ef3cbc604996b2e3

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: a1d1949a74656a76ef3cbc604996b2e3SHA1: 553d184c477f06fdb621eca2794828f4018ad40eANALYSIS DATE: 2022-10-19T16:01:36ZTTPS: T1082, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – snatch – bda4570095d3d36645df2753e4207a99

October 19, 2022

Score: 10 MALWARE FAMILY: snatchTAGS:family:snatch, ransomware, spyware, stealer, upxMD5: bda4570095d3d36645df2753e4207a99SHA1: 222b33e246b3459ffe9ba18fab26ab4fe8ae23bfANALYSIS DATE: 2022-10-19T16:53:22ZTTPS: T1107, T1490, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – f3293f956ee403a67e011a47e9380b15

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: f3293f956ee403a67e011a47e9380b15SHA1: d61e0c8e7366557d951434bc358510cd7c6f4158ANALYSIS DATE: 2022-10-19T16:01:51ZTTPS: T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – 8b06b6ced52d00c45ac65ba09a0eb66e

October 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 8b06b6ced52d00c45ac65ba09a0eb66eSHA1: 542ab5f9bef7709245eaae1a0910d45374bfa977ANALYSIS DATE: 2022-10-19T16:56:50ZTTPS: T1053, T1060, T1112, T1082,...

Malware Analysis – ransomware – d8caa762db2f89f58d15e10804588826

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: d8caa762db2f89f58d15e10804588826SHA1: 3a312dd227456bd5c735c3cb902057271390f2ddANALYSIS DATE: 2022-10-19T16:01:58ZTTPS: T1082, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – djvu – 31d633c84d4010d17b4f03ba0b837ec9

October 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 31d633c84d4010d17b4f03ba0b837ec9SHA1: 15bc48b574ce6c95c52a936662a20c9a7bce6387ANALYSIS DATE: 2022-10-19T08:39:22ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – djvu – effc004b6fce37e7b350cb7f61f21730

October 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: effc004b6fce37e7b350cb7f61f21730SHA1: 116824c5bfc45c8aef655c4a10144d4a117317a6ANALYSIS DATE: 2022-10-19T08:32:51ZTTPS: T1005, T1081, T1060, T1112,...

Malware Analysis – djvu – 2455d36aa533e29b2dc97377389bbe6a

October 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: 2455d36aa533e29b2dc97377389bbe6aSHA1: fe9642fa95653b336c3a40ada7a52a0ebbfa9a5fANALYSIS...

Malware Analysis – smokeloader – f25e119c885d1b007c265b3a51a2d4f8

October 19, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: f25e119c885d1b007c265b3a51a2d4f8SHA1: 7d95bf5790a05097c55306fb398b378810621d30ANALYSIS DATE: 2022-10-19T08:32:14ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – lockbit – d75882dafa8f1d34b635596426668b8d

October 19, 2022

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, ransomwareMD5: d75882dafa8f1d34b635596426668b8dSHA1: e359767434109ff1138ec03bc3b0b239ad5d1634ANALYSIS DATE: 2022-10-19T09:22:08ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – persistence – 9528ea8dec82f5cd13f44d9ff358b2bf

October 19, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 9528ea8dec82f5cd13f44d9ff358b2bfSHA1: df8e3f87a2a8690c5cb25dff1ac7ce0b902fcbb7ANALYSIS DATE: 2022-10-19T08:40:17ZTTPS: T1107, T1490, T1053, T1082, T1012, T1120, T1005, T1081,...

Malware Analysis – danabot – 2d9969371e0847cb39a4b515f7f55759

October 19, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 2d9969371e0847cb39a4b515f7f55759SHA1: 96154d705ca47764b062468c9937ac28eda7df70ANALYSIS...

Malware Analysis – eternity – 80094cdfc9743ea1e4decfe916105b76

October 19, 2022

Score: 10 MALWARE FAMILY: eternityTAGS:family:eternity, evasion, ransomwareMD5: 80094cdfc9743ea1e4decfe916105b76SHA1: b26f5fd083dc51eb5149e821f4361382ea43c319ANALYSIS DATE: 2022-10-19T09:12:09ZTTPS: T1053, T1107, T1490, T1082, T1018 ScoreMeaningExample10Known badA malware family...

Malware Analysis

Malware Analysis – ransomware – ef1e4814812f320c68f3bc6bdef1df85

Malware Analysis – persistence – d34f198a19da0c199cff7062c6444760

Malware Analysis – ransomware – 5cd64b28e9c4851e325e3fa5d8e3e06f

Malware Analysis – ransomware – d74f2c024690de10201315bc1b6b785a

Malware Analysis – ransomware – e57cb0c8120e8ebe598a21f183833369

Malware Analysis – ransomware – 8c95c2a93a9bd4b086eb4e6c4c4f9bc4

Malware Analysis – ransomware – 66be236b3619f458c32eea7f82cbb0b5

Malware Analysis – ransomware – 98a4175c9d6d3c8d1b6fc413426f51fa

Malware Analysis – ransomware – b3d5fbac5b451b1ebcdda12e33c2b7af

Malware Analysis – ransomware – ecfba13bbb886a16cbc4d24923324e8b

Malware Analysis – ransomware – 2a0cc2d6868d916e0192bc767d032dd8

Malware Analysis – ransomware – a1d1949a74656a76ef3cbc604996b2e3

Malware Analysis – snatch – bda4570095d3d36645df2753e4207a99

Malware Analysis – ransomware – f3293f956ee403a67e011a47e9380b15

Malware Analysis – djvu – 8b06b6ced52d00c45ac65ba09a0eb66e

Malware Analysis – ransomware – d8caa762db2f89f58d15e10804588826

Malware Analysis – djvu – 31d633c84d4010d17b4f03ba0b837ec9

Malware Analysis – djvu – effc004b6fce37e7b350cb7f61f21730

Malware Analysis – djvu – 2455d36aa533e29b2dc97377389bbe6a

Malware Analysis – smokeloader – f25e119c885d1b007c265b3a51a2d4f8

Malware Analysis – lockbit – d75882dafa8f1d34b635596426668b8d

Malware Analysis – persistence – 9528ea8dec82f5cd13f44d9ff358b2bf

Malware Analysis – danabot – 2d9969371e0847cb39a4b515f7f55759

Malware Analysis – eternity – 80094cdfc9743ea1e4decfe916105b76

Cobalt Strike Beacon Detected – 121[.]43[.]37[.]134:4434

Cobalt Strike Beacon Detected – 119[.]29[.]231[.]118:443

Cobalt Strike Beacon Detected – 39[.]101[.]74[.]162:443

Cobalt Strike Beacon Detected – 8[.]218[.]112[.]112:8880

Cobalt Strike Beacon Detected – 47[.]109[.]48[.]57:443

You may have missed