Malware Analysis

Malware Analysis – persistence – 60e1f05e13430883a21411c913f26f60

October 14, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 60e1f05e13430883a21411c913f26f60SHA1: 058d45a4b81078b9b6745800d480f0438d68dfd7ANALYSIS DATE: 2022-10-13T18:12:32ZTTPS: T1112, T1060, T1107, T1490, T1082 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – ransomware – 7dc1daf6d485f3da50197ca111a13aa1

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 7dc1daf6d485f3da50197ca111a13aa1SHA1: c1961c5fb878f5405bfb169efc4cd5c3abf660fbANALYSIS DATE: 2022-10-13T18:25:47ZTTPS: T1082, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – djvu – 57fbd1d9402810d8d8c144cf8b812c57

October 14, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, backdoor, collection, discovery, persistence, ransomware, trojan, vmprotectMD5: 57fbd1d9402810d8d8c144cf8b812c57SHA1: 0cabcaf4d52cf0ebd9099962df463174a7cd44d8ANALYSIS DATE: 2022-10-13T20:37:14ZTTPS: T1012, T1120, T1082,...

Malware Analysis – ransomware – 765573cb3640de462fc0ef09eaa4173b

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 765573cb3640de462fc0ef09eaa4173bSHA1: 5b5c86c33571ef91165c506df8aa019be56337a5ANALYSIS DATE: 2022-10-13T18:25:49ZTTPS: T1107, T1490, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – ransomware – 7e43155884a8ac94fb38a37e06e0bce2

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 7e43155884a8ac94fb38a37e06e0bce2SHA1: d81d93725d21485ad558450a94d8f6f958361c8cANALYSIS DATE: 2022-10-13T18:25:53ZTTPS: T1082, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – ransomware – 6592b4c9114ea85a25250c39475a9cb1

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 6592b4c9114ea85a25250c39475a9cb1SHA1: 21f11d0fd74d719c475d83e97a15658ab88ea3f0ANALYSIS DATE: 2022-10-13T18:25:51ZTTPS: T1107, T1490, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – ransomware – cb69ab71c32bb54c03da29997c87006f

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: cb69ab71c32bb54c03da29997c87006fSHA1: b4ea4cd2b0cbcedda6699fcb5dc4628508308938ANALYSIS DATE: 2022-10-13T21:01:04ZTTPS: T1091, T1005, T1081, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 31db9b909905d09dd810e8646b9832e7

October 14, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 31db9b909905d09dd810e8646b9832e7SHA1: 0172f26ce10cfa9babe1f588afa48f7f8c6a8202ANALYSIS DATE: 2022-10-13T21:32:47ZTTPS: T1082, T1053, T1012, T1060,...

Malware Analysis – smokeloader – b2b0d1eb9dc82a0bb8e2249074877456

October 14, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: b2b0d1eb9dc82a0bb8e2249074877456SHA1: 9bf42aba78d6a4d09e5dc164b5011a1b28a8c0b5ANALYSIS DATE: 2022-10-13T21:33:48ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 62f6a62754f16eee9a5952bd4ffe5b19

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 62f6a62754f16eee9a5952bd4ffe5b19SHA1: 2b7874c83f4e2fe18d15d4434325148d4bbeb111ANALYSIS DATE: 2022-10-13T21:21:04ZTTPS: T1107, T1490, T1091, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – a3b67d51f988d341870ce38e5884279a

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: a3b67d51f988d341870ce38e5884279aSHA1: 1b4f0ce3fca65dc04d5e26d43d008e6e134ef357ANALYSIS DATE: 2022-10-13T21:41:03ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – smokeloader – a519cde6048463499c7f22e735222332

October 14, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: a519cde6048463499c7f22e735222332SHA1: e79185c542d4e47e1e6f33a526feeed1213f5bd0ANALYSIS DATE: 2022-10-13T22:02:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 1afacd7c285205e52611e446026c9167

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 1afacd7c285205e52611e446026c9167SHA1: 1a5c2d025dbfc630c5f8072afb9795b4b754c9bcANALYSIS DATE: 2022-10-13T21:41:04ZTTPS: T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – d5f89c443fa6f8abf3ce737daff7af77

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: d5f89c443fa6f8abf3ce737daff7af77SHA1: 7f047270f53e1c6df43dac2742944a96ecf8d9c6ANALYSIS DATE: 2022-10-13T21:41:04ZTTPS: T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – 0c64140375a393a5ba5471338d72ed86

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 0c64140375a393a5ba5471338d72ed86SHA1: 4df64bbce9c5a56d5461b9f30b5e5d777c4bd7e7ANALYSIS DATE: 2022-10-13T22:39:39ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 1990481f19bcd2e1f4d4421741fb2f0c

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 1990481f19bcd2e1f4d4421741fb2f0cSHA1: 975c185318c462a74a77847ad29819cc96a44ad1ANALYSIS DATE: 2022-10-13T22:48:41ZTTPS: T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – 0acce440ab2341ee473ad5b54ef1cdec

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 0acce440ab2341ee473ad5b54ef1cdecSHA1: 4b392e55bff5225fbc5fa26d58a763289eceb696ANALYSIS DATE: 2022-10-13T22:36:37ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 0dfba86be0820f37615c7df9a9c100d4

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 0dfba86be0820f37615c7df9a9c100d4SHA1: 6e732625f4573b5973acaf1023baaa72166c9e41ANALYSIS DATE: 2022-10-13T22:45:40ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – discovery – 6e3e35fff42f015d89124fb551a20c10

October 13, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 6e3e35fff42f015d89124fb551a20c10SHA1: ebac50b7936985cd1aff1d88115dce51e0af2ca3ANALYSIS DATE: 2022-10-13T13:32:51ZTTPS: T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – discovery – 791b1ffd2928745ab4210e0ab5ba6930

October 13, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 791b1ffd2928745ab4210e0ab5ba6930SHA1: c4b506fd4fd8d4a310887fef7a01857d9a896e8bANALYSIS DATE: 2022-10-13T13:32:25ZTTPS: T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – danabot – 5f106f26eed8a0eaf4df1afca00e7985

October 13, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:dcrat, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, evasion, infostealer, persistence, ransomware, rat, spyware,...

Malware Analysis – discovery – 67afa9afdf9f97902c310bcc7236e9b0

October 13, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 67afa9afdf9f97902c310bcc7236e9b0SHA1: 184db2eab50767513ead595e740c42258edbad91ANALYSIS DATE: 2022-10-13T13:32:27ZTTPS: T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – 8c79a9ea48c5b41c076d1af3481c0c8f

October 13, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 8c79a9ea48c5b41c076d1af3481c0c8fSHA1: 1181c0bab44a00211f2e06b25e77fe72c64bacefANALYSIS DATE: 2022-10-13T14:36:09ZTTPS: T1012, T1060, T1112, T1222,...

Malware Analysis – evasion – 41dedc6471b514ac137413e363716385

October 13, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 41dedc6471b514ac137413e363716385SHA1: 4c9ae0e4920c95476de71b85bd175b7d1e7185d4ANALYSIS DATE: 2022-10-13T14:20:55ZTTPS: T1082, T1012, T1120, T1491, T1112, T1060, T1004, T1490,...

Malware Analysis

Malware Analysis – persistence – 60e1f05e13430883a21411c913f26f60

Malware Analysis – ransomware – 7dc1daf6d485f3da50197ca111a13aa1

Malware Analysis – djvu – 57fbd1d9402810d8d8c144cf8b812c57

Malware Analysis – ransomware – 765573cb3640de462fc0ef09eaa4173b

Malware Analysis – ransomware – 7e43155884a8ac94fb38a37e06e0bce2

Malware Analysis – ransomware – 6592b4c9114ea85a25250c39475a9cb1

Malware Analysis – ransomware – cb69ab71c32bb54c03da29997c87006f

Malware Analysis – djvu – 31db9b909905d09dd810e8646b9832e7

Malware Analysis – smokeloader – b2b0d1eb9dc82a0bb8e2249074877456

Malware Analysis – ransomware – 62f6a62754f16eee9a5952bd4ffe5b19

Malware Analysis – ransomware – a3b67d51f988d341870ce38e5884279a

Malware Analysis – smokeloader – a519cde6048463499c7f22e735222332

Malware Analysis – ransomware – 1afacd7c285205e52611e446026c9167

Malware Analysis – ransomware – d5f89c443fa6f8abf3ce737daff7af77

Malware Analysis – ransomware – 0c64140375a393a5ba5471338d72ed86

Malware Analysis – ransomware – 1990481f19bcd2e1f4d4421741fb2f0c

Malware Analysis – ransomware – 0acce440ab2341ee473ad5b54ef1cdec

Malware Analysis – ransomware – 0dfba86be0820f37615c7df9a9c100d4

Malware Analysis – discovery – 6e3e35fff42f015d89124fb551a20c10

Malware Analysis – discovery – 791b1ffd2928745ab4210e0ab5ba6930

Malware Analysis – danabot – 5f106f26eed8a0eaf4df1afca00e7985

Malware Analysis – discovery – 67afa9afdf9f97902c310bcc7236e9b0

Malware Analysis – djvu – 8c79a9ea48c5b41c076d1af3481c0c8f

Malware Analysis – evasion – 41dedc6471b514ac137413e363716385

Cobalt Strike Beacon Detected – 121[.]43[.]37[.]134:4434

Cobalt Strike Beacon Detected – 119[.]29[.]231[.]118:443

Cobalt Strike Beacon Detected – 39[.]101[.]74[.]162:443

Cobalt Strike Beacon Detected – 8[.]218[.]112[.]112:8880

Cobalt Strike Beacon Detected – 47[.]109[.]48[.]57:443

You may have missed