Malware Analysis

Malware Analysis – djvu – 45534d9fae89d8bd0166236fef70aac1

October 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 45534d9fae89d8bd0166236fef70aac1SHA1: a45ee6c9777446f3f1687cd2f70f3aa3e480b296ANALYSIS DATE: 2022-10-19T09:38:35ZTTPS: T1053, T1060, T1112, T1222, T1082, T1012 ScoreMeaningExample10Known badA...

Malware Analysis – blackbasta – 6a202e9a95f58938d02385e31d43ed87

October 19, 2022

Score: 10 MALWARE FAMILY: blackbastaTAGS:family:blackbasta, ransomwareMD5: 6a202e9a95f58938d02385e31d43ed87SHA1: 53628c7a155ccb7af1135140083939018d3587f1ANALYSIS DATE: 2022-10-19T10:40:19ZTTPS: T1107, T1490, T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – f5c9c7b404aa41bb2bbc1704afeb9f0d

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: f5c9c7b404aa41bb2bbc1704afeb9f0dSHA1: 1ca01cd00899330b918678d5f0ee00ab94d26f89ANALYSIS DATE: 2022-10-19T10:40:23ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – blackbasta – 0c69e91c2f54978ae3103b26686b2610

October 19, 2022

Score: 10 MALWARE FAMILY: blackbastaTAGS:family:blackbasta, ransomwareMD5: 0c69e91c2f54978ae3103b26686b2610SHA1: 3e3b113a5ab64e03ffe86e0fa9a2163816f9ecdfANALYSIS DATE: 2022-10-19T10:40:26ZTTPS: T1107, T1490, T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – danabot – ae489c5fec00f4363d3367b5a995a8db

October 19, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: ae489c5fec00f4363d3367b5a995a8dbSHA1: eb0e5e3e21b4ce9995b4f570eed9e393a8d2f8e4ANALYSIS...

Malware Analysis – persistence – 60f87cba4fc4edc6a22d5dd65827e9b4

October 19, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 60f87cba4fc4edc6a22d5dd65827e9b4SHA1: 1daa253da17f83939ccf0a6ddf6578570daaee54ANALYSIS DATE: 2022-10-19T10:40:40ZTTPS: T1107, T1490, T1091, T1060, T1112, T1005, T1081, T1082...

Malware Analysis – ransomware – af3175967e229bbc607bc32699cef621

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: af3175967e229bbc607bc32699cef621SHA1: 683449dd00992bff104e987a130eca526cd39afbANALYSIS DATE: 2022-10-19T10:40:31ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 91504a2349db14afb99e62b5d6f693d4

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 91504a2349db14afb99e62b5d6f693d4SHA1: 90a1df9e4812850e95545d07509472b0614c8f71ANALYSIS DATE: 2022-10-19T10:40:34ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – persistence – f21bcc4d9dd94342c1602e96534002b6

October 19, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: f21bcc4d9dd94342c1602e96534002b6SHA1: 1a7e9f7896a02df7e9729e481890a4ee82daac1eANALYSIS DATE: 2022-10-19T10:40:46ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091, T1060, T1112...

Malware Analysis – djvu – f41b9e7741b3c6ea33a947e85f8ecd89

October 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, stealer, trojan, vmprotectMD5: f41b9e7741b3c6ea33a947e85f8ecd89SHA1: 1d17879310cf6ae6d3388f29bfc3ddc062c2d980ANALYSIS DATE: 2022-10-18T20:09:37ZTTPS:...

Malware Analysis – ransomware – 3bd4ed1833f9ebf0c572cb573169536c

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 3bd4ed1833f9ebf0c572cb573169536cSHA1: a589f3a6991d4b9bddc598616b4f1372a2d318e2ANALYSIS DATE: 2022-10-18T20:00:18ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – wannacry – b20913b442628f00400d7f633759c83f

October 19, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: b20913b442628f00400d7f633759c83fSHA1: ea066d9b2c9ad212e2f01d4d59866aa11504b34aANALYSIS DATE: 2022-10-18T20:20:18ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – eca63d589dbf660d98a78af7fde075d9

October 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:privateloader, family:redline, family:smokeloader, botnet:new10181, backdoor, discovery, infostealer, loader, main, ransomware, spyware, stealer, trojanMD5: eca63d589dbf660d98a78af7fde075d9SHA1: fd7fd24163c473f2a99964384229f39b5e5a0aa7ANALYSIS...

Malware Analysis – ransomware – 5b54373a351644c25d6c05c93a948f72

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 5b54373a351644c25d6c05c93a948f72SHA1: ea2b5073a7121b7d6257f1290cbc0f2a5d2e9358ANALYSIS DATE: 2022-10-18T21:00:21ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – e075dda67de3175bdecca9c24ed443c3

October 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: e075dda67de3175bdecca9c24ed443c3SHA1: c684831b200b0ee5ad9eaf36f48413d8db634177ANALYSIS DATE: 2022-10-18T21:12:41ZTTPS:...

Malware Analysis – evasion – f939bf75f63371ca206f31ab06145efd

October 19, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojan, upxMD5: f939bf75f63371ca206f31ab06145efdSHA1: 54a876db09f4bb36ace0e77a1633802f33585704ANALYSIS DATE: 2022-10-18T21:20:09ZTTPS: T1158, T1112, T1018, T1060, T1088, T1089, T1490,...

Malware Analysis – djvu – 1b91e4b18fde5cbd09317015b3f35855

October 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 1b91e4b18fde5cbd09317015b3f35855SHA1: ff5a4c1c7baf122f02fbd82eda14a3210c07b847ANALYSIS DATE: 2022-10-18T21:21:33ZTTPS: T1060, T1112, T1082, T1222,...

Malware Analysis – evasion – dc1e01892f2849e20958022bd7de41ef

October 19, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: dc1e01892f2849e20958022bd7de41efSHA1: 33946f79b093fc797711f398102dd8f3cbe428bdANALYSIS DATE: 2022-10-18T21:20:19ZTTPS: T1060, T1112, T1012, T1120, T1082, T1158, T1490, T1088,...

Malware Analysis – ransomware – dff75a4d740e487f955e2dc34e9863c4

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: dff75a4d740e487f955e2dc34e9863c4SHA1: 09a4325fdc97bbec984459f70fd5ab426e8643e0ANALYSIS DATE: 2022-10-18T21:20:17ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 2c62dbd70d53fbe330a967b0240da191

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 2c62dbd70d53fbe330a967b0240da191SHA1: ed2396b4e902f27c4f216b3e73ab6f8573b1c037ANALYSIS DATE: 2022-10-18T21:40:21ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – c2785bd19266c528af475aa0643f01ce

October 19, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: c2785bd19266c528af475aa0643f01ceSHA1: ecb4d80af70b2d12c1a5b711bc061fee04ef7d04ANALYSIS DATE: 2022-10-18T21:30:40ZTTPS: T1012, T1120, T1082, T1112, T1004, T1158, T1088, T1089,...

Malware Analysis – ransomware – bf26f02752e2eec7e9630ef53ed3543d

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: bf26f02752e2eec7e9630ef53ed3543dSHA1: 26dd87c544173fb9408d020234d6a6e7df3426a9ANALYSIS DATE: 2022-10-18T21:40:25ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – bootkit – c4f6b7208dd86c37e3e914e1355ee128

October 19, 2022

Score: 8 MALWARE FAMILY: bootkitTAGS:bootkit, discovery, exploit, persistence, spyware, stealerMD5: c4f6b7208dd86c37e3e914e1355ee128SHA1: 2d6243373836f27a2f90ede02bd1b18c5a72c970ANALYSIS DATE: 2022-10-18T22:20:19ZTTPS: T1222, T1112, T1158, T1012, T1082, T1005,...

Malware Analysis – ransomware – 1e3e08ed56fc7913137cfc1b95b68cb6

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 1e3e08ed56fc7913137cfc1b95b68cb6SHA1: 91d56e169d95011769bc4a54dc2f11c4b2115695ANALYSIS DATE: 2022-10-18T22:40:20ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis

Malware Analysis – djvu – 45534d9fae89d8bd0166236fef70aac1

Malware Analysis – blackbasta – 6a202e9a95f58938d02385e31d43ed87

Malware Analysis – ransomware – f5c9c7b404aa41bb2bbc1704afeb9f0d

Malware Analysis – blackbasta – 0c69e91c2f54978ae3103b26686b2610

Malware Analysis – danabot – ae489c5fec00f4363d3367b5a995a8db

Malware Analysis – persistence – 60f87cba4fc4edc6a22d5dd65827e9b4

Malware Analysis – ransomware – af3175967e229bbc607bc32699cef621

Malware Analysis – ransomware – 91504a2349db14afb99e62b5d6f693d4

Malware Analysis – persistence – f21bcc4d9dd94342c1602e96534002b6

Malware Analysis – djvu – f41b9e7741b3c6ea33a947e85f8ecd89

Malware Analysis – ransomware – 3bd4ed1833f9ebf0c572cb573169536c

Malware Analysis – wannacry – b20913b442628f00400d7f633759c83f

Malware Analysis – djvu – eca63d589dbf660d98a78af7fde075d9

Malware Analysis – ransomware – 5b54373a351644c25d6c05c93a948f72

Malware Analysis – djvu – e075dda67de3175bdecca9c24ed443c3

Malware Analysis – evasion – f939bf75f63371ca206f31ab06145efd

Malware Analysis – djvu – 1b91e4b18fde5cbd09317015b3f35855

Malware Analysis – evasion – dc1e01892f2849e20958022bd7de41ef

Malware Analysis – ransomware – dff75a4d740e487f955e2dc34e9863c4

Malware Analysis – ransomware – 2c62dbd70d53fbe330a967b0240da191

Malware Analysis – evasion – c2785bd19266c528af475aa0643f01ce

Malware Analysis – ransomware – bf26f02752e2eec7e9630ef53ed3543d

Malware Analysis – bootkit – c4f6b7208dd86c37e3e914e1355ee128

Malware Analysis – ransomware – 1e3e08ed56fc7913137cfc1b95b68cb6

[QILIN] – Ransomware Victim: Alert Medical Alarms

[QILIN] – Ransomware Victim: LP Charpente

[AKIRA] – Ransomware Victim: Watermark Marine Systems

[KAWA4096] – Ransomware Victim: tokiomarine-nichido[.]co[.]jp

[KAWA4096] – Ransomware Victim: www[.]ogr-jp[.]com

You may have missed