Malware Analysis

Malware Analysis – djvu – 62bc08785fba8084b146de9cb4aa493a

March 30, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5df88deb5dde677ba658b77ad5f60248, discovery, persistence, ransomware, spyware, stealerMD5: 62bc08785fba8084b146de9cb4aa493aSHA1: cbf7d9ea2adc622690b8e1af17351b91e40390ddANALYSIS DATE: 2023-03-30T17:31:32ZTTPS: T1012, T1082, T1053, T1005,...

Malware Analysis – amadey – 035d846ddc6a64f19b463d2ddf2bddaa

March 30, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, botnet:pub1, backdoor, discovery, persistence, ransomware, trojanMD5: 035d846ddc6a64f19b463d2ddf2bddaaSHA1: 56d52240fac546cadf5fc243ee3b938fbdab679eANALYSIS DATE: 2023-03-30T17:35:33ZTTPS: T1012, T1120, T1082,...

Malware Analysis – djvu – 42c20aa157f4523e908b8d6f9755e5cc

March 30, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5df88deb5dde677ba658b77ad5f60248, discovery, persistence, ransomware, spyware, stealerMD5: 42c20aa157f4523e908b8d6f9755e5ccSHA1: b7e2115f166d96b382dd369544db23b3aeea886cANALYSIS DATE: 2023-03-30T17:54:14ZTTPS: T1222, T1082, T1053, T1005,...

Malware Analysis – djvu – 06401e594be2ba59fe355f2c669ced41

March 30, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5df88deb5dde677ba658b77ad5f60248, discovery, persistence, ransomware, spyware, stealerMD5: 06401e594be2ba59fe355f2c669ced41SHA1: afab8237ea21303da96c8940b6add1df40c7602bANALYSIS DATE: 2023-03-30T17:56:22ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – djvu – a2813d8a07a0bfe6ab8d8f5f3e486bd6

March 29, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5df88deb5dde677ba658b77ad5f60248, discovery, persistence, ransomware, spyware, stealerMD5: a2813d8a07a0bfe6ab8d8f5f3e486bd6SHA1: 2f490cd0ac83ae8455dcc087946334b79f95c5a7ANALYSIS DATE: 2023-03-29T15:24:46ZTTPS: T1012, T1082, T1222, T1005,...

Malware Analysis – djvu – 7f7af90a656514364fc769f4ba85ebf1

March 29, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5df88deb5dde677ba658b77ad5f60248, discovery, persistence, ransomware, spyware, stealerMD5: 7f7af90a656514364fc769f4ba85ebf1SHA1: 740c283a238c669008b6bf50c2e97edb209c631bANALYSIS DATE: 2023-03-29T14:59:29ZTTPS: T1082, T1005, T1081, T1053,...

Malware Analysis – djvu – 8b52be4221750ba22b73867d77f514a8

March 29, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, botnet:pub1, backdoor, discovery, persistence, ransomware, trojanMD5: 8b52be4221750ba22b73867d77f514a8SHA1: 45b9ed5aa5947e7d7c761a7ee0f9ca04f3d6a425ANALYSIS DATE: 2023-03-29T15:38:27ZTTPS: T1012, T1120, T1082, T1222,...

Malware Analysis – djvu – bb6f35a6a6a07b124686f9abdd64205b

March 29, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5df88deb5dde677ba658b77ad5f60248, discovery, persistence, ransomware, spyware, stealerMD5: bb6f35a6a6a07b124686f9abdd64205bSHA1: ccc9af1cf9221571e6619ad0aa04e294a1efe033ANALYSIS DATE: 2023-03-29T15:53:38ZTTPS: T1222, T1012, T1082, T1053,...

Malware Analysis – djvu – 94c00dfd7eb99d7de68c95f27a3d5854

March 29, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5df88deb5dde677ba658b77ad5f60248, discovery, persistence, ransomware, spyware, stealerMD5: 94c00dfd7eb99d7de68c95f27a3d5854SHA1: 02dc1e168b8e9df3cefc60e3f5d4d0bd850b69c5ANALYSIS DATE: 2023-03-29T15:44:27ZTTPS: T1222, T1060, T1112, T1053,...

Malware Analysis – amadey – bb827f6d5b1d086843fa951b69b8e702

March 29, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:5df88deb5dde677ba658b77ad5f60248, botnet:frtrack, botnet:pub1, botnet:rober, backdoor, discovery, evasion, infostealer, persistence, ransomware, spyware,...

Malware Analysis – djvu – 41c2e6a9aedab7b3015ada13c70a5673

March 29, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5df88deb5dde677ba658b77ad5f60248, discovery, persistence, ransomware, spyware, stealerMD5: 41c2e6a9aedab7b3015ada13c70a5673SHA1: 62a1c491c10e64d730ad4f589855d8478f017251ANALYSIS DATE: 2023-03-29T16:25:15ZTTPS: T1005, T1081, T1053, T1082,...

Malware Analysis – djvu – afd8945316aedd2fb57dd654431c26ba

March 29, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5df88deb5dde677ba658b77ad5f60248, discovery, persistence, ransomware, spyware, stealerMD5: afd8945316aedd2fb57dd654431c26baSHA1: f49694b571523786df36ab5d711dc5ea91ef878fANALYSIS DATE: 2023-03-29T17:52:09ZTTPS: T1005, T1081, T1060, T1112,...

Malware Analysis – djvu – 15a5bb819748cdec8893209495776408

March 29, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5df88deb5dde677ba658b77ad5f60248, discovery, persistence, ransomware, spyware, stealerMD5: 15a5bb819748cdec8893209495776408SHA1: da3561824dbab0b96c63a5cfd2f364364216ea0aANALYSIS DATE: 2023-03-29T16:31:20ZTTPS: T1060, T1112, T1082, T1053,...

Malware Analysis – amadey – 941ebdb94364e7958adc8638cb5dd933

March 29, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:5df88deb5dde677ba658b77ad5f60248, botnet:pub1, botnet:rober, backdoor, discovery, evasion, infostealer, persistence, ransomware, spyware, stealer,...

Malware Analysis – smokeloader – 9d29f5640c968ae41824e3999937b4ed

March 27, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 9d29f5640c968ae41824e3999937b4edSHA1: 31560a3776918e01b6cd2e9d87fbf2ad1028ec7fANALYSIS DATE: 2023-03-27T15:24:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 23f7d98ddb2bafaefd121c30aeb2a7b1

March 27, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:00d92484c9b27bc8482a2cc94cacc508, discovery, persistence, ransomware, spyware, stealerMD5: 23f7d98ddb2bafaefd121c30aeb2a7b1SHA1: 56e0967ba750cc8b8a7eaaad287210ff494e32a9ANALYSIS DATE: 2023-03-27T16:43:01ZTTPS: T1012, T1082, T1053, T1005,...

Malware Analysis – ransomware – df134a54ae5dca7963e49d97dd104660

March 27, 2023

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: df134a54ae5dca7963e49d97dd104660SHA1: 9bddcce91756469051f2385ef36ba8171d99686dANALYSIS DATE: 2023-03-27T17:29:03ZTTPS: T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – fc6df56b8d1755886817103249d35cef

March 27, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:00d92484c9b27bc8482a2cc94cacc508, discovery, persistence, ransomware, spyware, stealerMD5: fc6df56b8d1755886817103249d35cefSHA1: 0959b12645c9713c2a06485f5190c3e748d3f879ANALYSIS DATE: 2023-03-27T16:55:43ZTTPS: T1005, T1081, T1012, T1060,...

Malware Analysis – amadey – 49cd88e363a5f738cbbd54d592512330

March 27, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:rhadamanthys, family:smokeloader, family:xmrig, botnet:koreamon, botnet:pub1, botnet:sprg, backdoor, discovery, evasion, infostealer, miner, persistence, ransomware,...

Malware Analysis – djvu – c2c9766bc21d684fdb277faa414fd9ce

March 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:00d92484c9b27bc8482a2cc94cacc508, discovery, persistence, ransomware, spyware, stealerMD5: c2c9766bc21d684fdb277faa414fd9ceSHA1: 0570ff0ab1e3de949f78a28c3baad118cfaf3e14ANALYSIS DATE: 2023-03-26T15:15:31ZTTPS: T1222, T1082, T1005, T1081,...

Malware Analysis – djvu – 4337baca641bc801e6223757534aee9d

March 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:00d92484c9b27bc8482a2cc94cacc508, discovery, persistence, ransomware, spyware, stealerMD5: 4337baca641bc801e6223757534aee9dSHA1: 6b73961e68d5988454ad04de870c7ea6570aeaf1ANALYSIS DATE: 2023-03-26T15:05:04ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – smokeloader – 4293ec458e657eeb42ca2ec2eb09b76d

March 26, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 4293ec458e657eeb42ca2ec2eb09b76dSHA1: 2589d4a26f3462d7bb19756c291b6ad9235abd21ANALYSIS DATE: 2023-03-26T15:23:02ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – amadey – a1c240e28cf9828fe5adc68119a57fa6

March 26, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, botnet:pub1, botnet:sprg, backdoor, discovery, ransomware, trojanMD5: a1c240e28cf9828fe5adc68119a57fa6SHA1: 0afbabe69316a1b24c1fc374e58247b14a821cc3ANALYSIS DATE: 2023-03-26T16:09:36ZTTPS: T1012, T1120, T1082,...

Malware Analysis – discovery – fea29a2bbc979a1a83a9887b62240d6e

March 26, 2023

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: fea29a2bbc979a1a83a9887b62240d6eSHA1: b6c1ab3b84f50a1aa567c311b77fade00379b006ANALYSIS DATE: 2023-03-26T16:12:51ZTTPS: T1082, T1112, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis

Malware Analysis – djvu – 62bc08785fba8084b146de9cb4aa493a

Malware Analysis – amadey – 035d846ddc6a64f19b463d2ddf2bddaa

Malware Analysis – djvu – 42c20aa157f4523e908b8d6f9755e5cc

Malware Analysis – djvu – 06401e594be2ba59fe355f2c669ced41

Malware Analysis – djvu – a2813d8a07a0bfe6ab8d8f5f3e486bd6

Malware Analysis – djvu – 7f7af90a656514364fc769f4ba85ebf1

Malware Analysis – djvu – 8b52be4221750ba22b73867d77f514a8

Malware Analysis – djvu – bb6f35a6a6a07b124686f9abdd64205b

Malware Analysis – djvu – 94c00dfd7eb99d7de68c95f27a3d5854

Malware Analysis – amadey – bb827f6d5b1d086843fa951b69b8e702

Malware Analysis – djvu – 41c2e6a9aedab7b3015ada13c70a5673

Malware Analysis – djvu – afd8945316aedd2fb57dd654431c26ba

Malware Analysis – djvu – 15a5bb819748cdec8893209495776408

Malware Analysis – amadey – 941ebdb94364e7958adc8638cb5dd933

Malware Analysis – smokeloader – 9d29f5640c968ae41824e3999937b4ed

Malware Analysis – djvu – 23f7d98ddb2bafaefd121c30aeb2a7b1

Malware Analysis – ransomware – df134a54ae5dca7963e49d97dd104660

Malware Analysis – djvu – fc6df56b8d1755886817103249d35cef

Malware Analysis – amadey – 49cd88e363a5f738cbbd54d592512330

Malware Analysis – djvu – c2c9766bc21d684fdb277faa414fd9ce

Malware Analysis – djvu – 4337baca641bc801e6223757534aee9d

Malware Analysis – smokeloader – 4293ec458e657eeb42ca2ec2eb09b76d

Malware Analysis – amadey – a1c240e28cf9828fe5adc68119a57fa6

Malware Analysis – discovery – fea29a2bbc979a1a83a9887b62240d6e

Cobalt Strike Beacon Detected – 121[.]43[.]37[.]134:4434

Cobalt Strike Beacon Detected – 119[.]29[.]231[.]118:443

Cobalt Strike Beacon Detected – 39[.]101[.]74[.]162:443

Cobalt Strike Beacon Detected – 8[.]218[.]112[.]112:8880

Cobalt Strike Beacon Detected – 47[.]109[.]48[.]57:443

You may have missed