Malware Analysis

Malware Analysis – danabot – 8d1c8f19e9b43d1b413985f412ae00a6

October 14, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojan,...

Malware Analysis – djvu – aaee141f3e0aa3f7c9c376f262b97b29

October 14, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: aaee141f3e0aa3f7c9c376f262b97b29SHA1: be78f4517d29c1117e3143a6687d8e8fbe84283dANALYSIS DATE: 2022-10-14T15:20:17ZTTPS: T1053, T1060, T1112, T1222, T1082, T1012 ScoreMeaningExample10Known badA...

Malware Analysis – – 653ee122709e45a162a2e9805d446a2e

October 14, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: 653ee122709e45a162a2e9805d446a2eSHA1: 2f16d9e14c79d7e15fcb7204fceda2ce163802ecANALYSIS DATE: 2022-10-14T14:50:58ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 2055a04e632d1e5588b245b7cc8a52ac

October 14, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 2055a04e632d1e5588b245b7cc8a52acSHA1: 9f458f97c995c6a38e179be9d0cd3e6726a48543ANALYSIS DATE: 2022-10-14T15:01:12ZTTPS: T1053, T1012, T1082, T1005,...

Malware Analysis – ransomware – 7b6d799c95a79ddfbc88cf22c6a40807

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 7b6d799c95a79ddfbc88cf22c6a40807SHA1: a27e5ee122199eddccc6b0b2dc49de9a14e8d6c3ANALYSIS DATE: 2022-10-14T15:40:21ZTTPS: T1091, T1005, T1081, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – danabot – a02834d5e9f234a27480e7bc13a5ee95

October 14, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:redline, family:vidar, botnet:517, banker, bootkit, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5:...

Malware Analysis – ransomware – 86a6d2a60a39ead1e09ad35512710f80

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 86a6d2a60a39ead1e09ad35512710f80SHA1: 35b44dcaf8c7f291a5823d609aec557593f2d752ANALYSIS DATE: 2022-10-14T15:40:11ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 61b3785a83a8f28a1beddfbb41ef1059

October 14, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 61b3785a83a8f28a1beddfbb41ef1059SHA1: 66e1801238581a6d183a5c2b34159c5c9e6065bfANALYSIS DATE: 2022-10-14T15:38:19ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – ransomware – b70ec686260b1821f07b44ed88dcd4e0

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: b70ec686260b1821f07b44ed88dcd4e0SHA1: 9e3290d79406c87f905263a45eebfca4f8a6e7dbANALYSIS DATE: 2022-10-14T15:40:41ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 4f2d1e4655d12d45efc26b1034034f9b

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 4f2d1e4655d12d45efc26b1034034f9bSHA1: b2e1b3fef5c75a44902b984e2e7c8d9e143fc4a9ANALYSIS DATE: 2022-10-14T15:40:34ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 9ce251bd921f81553ada59816d764cde

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 9ce251bd921f81553ada59816d764cdeSHA1: 43d4199349762939428ad422dfd6eac420517f22ANALYSIS DATE: 2022-10-14T15:40:51ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 4ebe2c03a302bcf4dee5d444101ee2d1

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 4ebe2c03a302bcf4dee5d444101ee2d1SHA1: e84606b85239c8bc1580f60ed58f5e2706c52dafANALYSIS DATE: 2022-10-14T15:40:57ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – smokeloader – 52ffaf10efe8795445a3df86abd0ded2

October 14, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 52ffaf10efe8795445a3df86abd0ded2SHA1: c1daa480214146034e1bdb20286196246b7a7428ANALYSIS DATE: 2022-10-14T16:38:02ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 00e5b549f8b6c6d6920d35aa68f25b02

October 14, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 00e5b549f8b6c6d6920d35aa68f25b02SHA1: d87b52dcbee58fa8ce933e22b06a39ffcb78677aANALYSIS DATE: 2022-10-14T16:28:14ZTTPS: T1082, T1005, T1081, T1060,...

Malware Analysis – djvu – 36f8a06ec4b02b186c2d8fa0b6be5609

October 14, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 36f8a06ec4b02b186c2d8fa0b6be5609SHA1: 393ff0a550ab21ea3d9ea61a6dc1d59d71de06c3ANALYSIS DATE:...

Malware Analysis – wannacry – f180d23ede98f53a8dffd109ed624e85

October 14, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: f180d23ede98f53a8dffd109ed624e85SHA1: 7755fe529f6c4ff88d3955269c9a1d49235f5a56ANALYSIS DATE: 2022-10-14T16:00:14ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – smokeloader – 2642f5f309e1dd23eed278b904042263

October 14, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 2642f5f309e1dd23eed278b904042263SHA1: d0c4d1da177f8180d7f08f1b1cf3d6625e02cb27ANALYSIS DATE: 2022-10-14T08:03:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – xorist – 41084ab3be6d49c1483b0b192de7f636

October 14, 2022

Score: 10 MALWARE FAMILY: xoristTAGS:family:xorist, persistence, ransomware, spyware, stealer, upxMD5: 41084ab3be6d49c1483b0b192de7f636SHA1: d67312b7e4e6c0c127b12ca1bda92a8c7ad7c6c6ANALYSIS DATE: 2022-10-14T03:32:26ZTTPS: T1005, T1081, T1060, T1112 ScoreMeaningExample10Known badA...

Malware Analysis – discovery – 50e562833fe474485dc04902a6496e90

October 14, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, persistenceMD5: 50e562833fe474485dc04902a6496e90SHA1: dc35c1b38267a47ae5ea7e650709d80b3837cab5ANALYSIS DATE: 2022-10-14T04:30:04ZTTPS: T1112, T1060, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – magniber – b23cae8d39d76a08197382e0d9d5c297

October 14, 2022

Score: 10 MALWARE FAMILY: magniberTAGS:family:magniber, ransomwareMD5: b23cae8d39d76a08197382e0d9d5c297SHA1: 2bcc921be8477c6cce77ff4782e068ca798318deANALYSIS DATE: 2022-10-14T08:35:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – eebef1c49575877f734b1a71ae2d2a0f

October 14, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: eebef1c49575877f734b1a71ae2d2a0fSHA1: 8f9e40ac71b660296cabad8dd9860a65d51d7d45ANALYSIS DATE: 2022-10-14T08:26:27ZTTPS: T1222, T1082, T1053, T1005,...

Malware Analysis – – da802fc3ba7c09de9bc43c738a3c780b

October 14, 2022

Score: 7 MALWARE FAMILY: TAGS:MD5: da802fc3ba7c09de9bc43c738a3c780bSHA1: 4fea576b5306f92ef22520e5ee77aba057137504ANALYSIS DATE: 2022-10-14T08:36:26ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – chaos – 9adfbfb490528068ca3074432b96ecc6

October 14, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, persistence, ransomware, spyware, stealerMD5: 9adfbfb490528068ca3074432b96ecc6SHA1: 545f15d3e9b413f06ca9b64c75e34de0a3626e5eANALYSIS DATE: 2022-10-14T08:40:09ZTTPS: T1490, T1059, T1107, T1082, T1005, T1081,...

Malware Analysis – djvu – 8463da6fc342c79ddd71ea714b52e06e

October 14, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 8463da6fc342c79ddd71ea714b52e06eSHA1: d7b4447db1a5bf6f6b4c121647d50cfe4347ba75ANALYSIS DATE:...

Malware Analysis

Malware Analysis – danabot – 8d1c8f19e9b43d1b413985f412ae00a6

Malware Analysis – djvu – aaee141f3e0aa3f7c9c376f262b97b29

Malware Analysis – – 653ee122709e45a162a2e9805d446a2e

Malware Analysis – djvu – 2055a04e632d1e5588b245b7cc8a52ac

Malware Analysis – ransomware – 7b6d799c95a79ddfbc88cf22c6a40807

Malware Analysis – danabot – a02834d5e9f234a27480e7bc13a5ee95

Malware Analysis – ransomware – 86a6d2a60a39ead1e09ad35512710f80

Malware Analysis – djvu – 61b3785a83a8f28a1beddfbb41ef1059

Malware Analysis – ransomware – b70ec686260b1821f07b44ed88dcd4e0

Malware Analysis – ransomware – 4f2d1e4655d12d45efc26b1034034f9b

Malware Analysis – ransomware – 9ce251bd921f81553ada59816d764cde

Malware Analysis – ransomware – 4ebe2c03a302bcf4dee5d444101ee2d1

Malware Analysis – smokeloader – 52ffaf10efe8795445a3df86abd0ded2

Malware Analysis – djvu – 00e5b549f8b6c6d6920d35aa68f25b02

Malware Analysis – djvu – 36f8a06ec4b02b186c2d8fa0b6be5609

Malware Analysis – wannacry – f180d23ede98f53a8dffd109ed624e85

Malware Analysis – smokeloader – 2642f5f309e1dd23eed278b904042263

Malware Analysis – xorist – 41084ab3be6d49c1483b0b192de7f636

Malware Analysis – discovery – 50e562833fe474485dc04902a6496e90

Malware Analysis – magniber – b23cae8d39d76a08197382e0d9d5c297

Malware Analysis – djvu – eebef1c49575877f734b1a71ae2d2a0f

Malware Analysis – – da802fc3ba7c09de9bc43c738a3c780b

Malware Analysis – chaos – 9adfbfb490528068ca3074432b96ecc6

Malware Analysis – djvu – 8463da6fc342c79ddd71ea714b52e06e

Cobalt Strike Beacon Detected – 167[.]99[.]76[.]115:80

Cobalt Strike Beacon Detected – 185[.]208[.]159[.]224:80

Cobalt Strike Beacon Detected – 115[.]175[.]39[.]35:443

Cobalt Strike Beacon Detected – 121[.]36[.]228[.]26:8080

Cobalt Strike Beacon Detected – 166[.]108[.]200[.]194:443

You may have missed