Malware Analysis

Malware Analysis – ransomware – 765573cb3640de462fc0ef09eaa4173b

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 765573cb3640de462fc0ef09eaa4173bSHA1: 5b5c86c33571ef91165c506df8aa019be56337a5ANALYSIS DATE: 2022-10-13T18:25:49ZTTPS: T1107, T1490, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – ransomware – 7e43155884a8ac94fb38a37e06e0bce2

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 7e43155884a8ac94fb38a37e06e0bce2SHA1: d81d93725d21485ad558450a94d8f6f958361c8cANALYSIS DATE: 2022-10-13T18:25:53ZTTPS: T1082, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – ransomware – 6592b4c9114ea85a25250c39475a9cb1

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 6592b4c9114ea85a25250c39475a9cb1SHA1: 21f11d0fd74d719c475d83e97a15658ab88ea3f0ANALYSIS DATE: 2022-10-13T18:25:51ZTTPS: T1107, T1490, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – ransomware – cb69ab71c32bb54c03da29997c87006f

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: cb69ab71c32bb54c03da29997c87006fSHA1: b4ea4cd2b0cbcedda6699fcb5dc4628508308938ANALYSIS DATE: 2022-10-13T21:01:04ZTTPS: T1091, T1005, T1081, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 31db9b909905d09dd810e8646b9832e7

October 14, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 31db9b909905d09dd810e8646b9832e7SHA1: 0172f26ce10cfa9babe1f588afa48f7f8c6a8202ANALYSIS DATE: 2022-10-13T21:32:47ZTTPS: T1082, T1053, T1012, T1060,...

Malware Analysis – smokeloader – b2b0d1eb9dc82a0bb8e2249074877456

October 14, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: b2b0d1eb9dc82a0bb8e2249074877456SHA1: 9bf42aba78d6a4d09e5dc164b5011a1b28a8c0b5ANALYSIS DATE: 2022-10-13T21:33:48ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 62f6a62754f16eee9a5952bd4ffe5b19

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 62f6a62754f16eee9a5952bd4ffe5b19SHA1: 2b7874c83f4e2fe18d15d4434325148d4bbeb111ANALYSIS DATE: 2022-10-13T21:21:04ZTTPS: T1107, T1490, T1091, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – a3b67d51f988d341870ce38e5884279a

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: a3b67d51f988d341870ce38e5884279aSHA1: 1b4f0ce3fca65dc04d5e26d43d008e6e134ef357ANALYSIS DATE: 2022-10-13T21:41:03ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – smokeloader – a519cde6048463499c7f22e735222332

October 14, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: a519cde6048463499c7f22e735222332SHA1: e79185c542d4e47e1e6f33a526feeed1213f5bd0ANALYSIS DATE: 2022-10-13T22:02:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 1afacd7c285205e52611e446026c9167

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 1afacd7c285205e52611e446026c9167SHA1: 1a5c2d025dbfc630c5f8072afb9795b4b754c9bcANALYSIS DATE: 2022-10-13T21:41:04ZTTPS: T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – d5f89c443fa6f8abf3ce737daff7af77

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: d5f89c443fa6f8abf3ce737daff7af77SHA1: 7f047270f53e1c6df43dac2742944a96ecf8d9c6ANALYSIS DATE: 2022-10-13T21:41:04ZTTPS: T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – 0c64140375a393a5ba5471338d72ed86

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 0c64140375a393a5ba5471338d72ed86SHA1: 4df64bbce9c5a56d5461b9f30b5e5d777c4bd7e7ANALYSIS DATE: 2022-10-13T22:39:39ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 1990481f19bcd2e1f4d4421741fb2f0c

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 1990481f19bcd2e1f4d4421741fb2f0cSHA1: 975c185318c462a74a77847ad29819cc96a44ad1ANALYSIS DATE: 2022-10-13T22:48:41ZTTPS: T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – 0dfba86be0820f37615c7df9a9c100d4

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 0dfba86be0820f37615c7df9a9c100d4SHA1: 6e732625f4573b5973acaf1023baaa72166c9e41ANALYSIS DATE: 2022-10-13T22:45:40ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 0acce440ab2341ee473ad5b54ef1cdec

October 14, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 0acce440ab2341ee473ad5b54ef1cdecSHA1: 4b392e55bff5225fbc5fa26d58a763289eceb696ANALYSIS DATE: 2022-10-13T22:36:37ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – discovery – 6e3e35fff42f015d89124fb551a20c10

October 13, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 6e3e35fff42f015d89124fb551a20c10SHA1: ebac50b7936985cd1aff1d88115dce51e0af2ca3ANALYSIS DATE: 2022-10-13T13:32:51ZTTPS: T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – discovery – 791b1ffd2928745ab4210e0ab5ba6930

October 13, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 791b1ffd2928745ab4210e0ab5ba6930SHA1: c4b506fd4fd8d4a310887fef7a01857d9a896e8bANALYSIS DATE: 2022-10-13T13:32:25ZTTPS: T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – danabot – 5f106f26eed8a0eaf4df1afca00e7985

October 13, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:dcrat, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, evasion, infostealer, persistence, ransomware, rat, spyware,...

Malware Analysis – discovery – 67afa9afdf9f97902c310bcc7236e9b0

October 13, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploitMD5: 67afa9afdf9f97902c310bcc7236e9b0SHA1: 184db2eab50767513ead595e740c42258edbad91ANALYSIS DATE: 2022-10-13T13:32:27ZTTPS: T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – 8c79a9ea48c5b41c076d1af3481c0c8f

October 13, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 8c79a9ea48c5b41c076d1af3481c0c8fSHA1: 1181c0bab44a00211f2e06b25e77fe72c64bacefANALYSIS DATE: 2022-10-13T14:36:09ZTTPS: T1012, T1060, T1112, T1222,...

Malware Analysis – evasion – 41dedc6471b514ac137413e363716385

October 13, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 41dedc6471b514ac137413e363716385SHA1: 4c9ae0e4920c95476de71b85bd175b7d1e7185d4ANALYSIS DATE: 2022-10-13T14:20:55ZTTPS: T1082, T1012, T1120, T1491, T1112, T1060, T1004, T1490,...

Malware Analysis – wannacry – bfec29f4e741d6972e7f6d9e1cbbe68b

October 13, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: bfec29f4e741d6972e7f6d9e1cbbe68bSHA1: f8bcfc50369d6daeabbeb4ab5747eb8eb5fbb893ANALYSIS DATE: 2022-10-13T14:40:15ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – wannacry – 2e655c3eaf6b7ab9dfb62633f84588e9

October 13, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 2e655c3eaf6b7ab9dfb62633f84588e9SHA1: e5ee7be216bcca72cab130da7192e2368ef140c5ANALYSIS DATE: 2022-10-13T14:20:26ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – danabot – 0fc85229bfeb9ad05e098e8d0ec33f77

October 13, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojan,...

Malware Analysis

Malware Analysis – ransomware – 765573cb3640de462fc0ef09eaa4173b

Malware Analysis – ransomware – 7e43155884a8ac94fb38a37e06e0bce2

Malware Analysis – ransomware – 6592b4c9114ea85a25250c39475a9cb1

Malware Analysis – ransomware – cb69ab71c32bb54c03da29997c87006f

Malware Analysis – djvu – 31db9b909905d09dd810e8646b9832e7

Malware Analysis – smokeloader – b2b0d1eb9dc82a0bb8e2249074877456

Malware Analysis – ransomware – 62f6a62754f16eee9a5952bd4ffe5b19

Malware Analysis – ransomware – a3b67d51f988d341870ce38e5884279a

Malware Analysis – smokeloader – a519cde6048463499c7f22e735222332

Malware Analysis – ransomware – 1afacd7c285205e52611e446026c9167

Malware Analysis – ransomware – d5f89c443fa6f8abf3ce737daff7af77

Malware Analysis – ransomware – 0c64140375a393a5ba5471338d72ed86

Malware Analysis – ransomware – 1990481f19bcd2e1f4d4421741fb2f0c

Malware Analysis – ransomware – 0dfba86be0820f37615c7df9a9c100d4

Malware Analysis – ransomware – 0acce440ab2341ee473ad5b54ef1cdec

Malware Analysis – discovery – 6e3e35fff42f015d89124fb551a20c10

Malware Analysis – discovery – 791b1ffd2928745ab4210e0ab5ba6930

Malware Analysis – danabot – 5f106f26eed8a0eaf4df1afca00e7985

Malware Analysis – discovery – 67afa9afdf9f97902c310bcc7236e9b0

Malware Analysis – djvu – 8c79a9ea48c5b41c076d1af3481c0c8f

Malware Analysis – evasion – 41dedc6471b514ac137413e363716385

Malware Analysis – wannacry – bfec29f4e741d6972e7f6d9e1cbbe68b

Malware Analysis – wannacry – 2e655c3eaf6b7ab9dfb62633f84588e9

Malware Analysis – danabot – 0fc85229bfeb9ad05e098e8d0ec33f77

[NOVA] – Ransomware Victim: Portel Logistic Technologies

[QILIN] – Ransomware Victim: www[.]nuphoton[.]com

[QILIN] – Ransomware Victim: semco-tech[.]com

[KAWA4096] – Ransomware Victim: ****-*[.]co[.]jp

[QILIN] – Ransomware Victim: simmons-Boardman Publishing, Inc

You may have missed