Malware Analysis

Malware Analysis – evasion – 5110fa03dda5015e9358e54892b11cb0

October 13, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 5110fa03dda5015e9358e54892b11cb0SHA1: 59bad4536d77543395cdfa4b046e6fd019f291e3ANALYSIS DATE: 2022-10-13T15:10:04ZTTPS: T1060, T1112, T1107, T1490, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 614e9ab5124ca650e2daf78edf427f3b

October 13, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 614e9ab5124ca650e2daf78edf427f3bSHA1: a68522ee682f2be3a0205e576d740ba497630f9fANALYSIS DATE: 2022-10-13T15:02:27ZTTPS: T1053, T1005, T1081, T1082,...

Malware Analysis – xorist – 060e10b04227a593886c4cd0928a3bf2

October 13, 2022

Score: 10 MALWARE FAMILY: xoristTAGS:family:xorist, persistence, ransomware, spyware, stealer, upxMD5: 060e10b04227a593886c4cd0928a3bf2SHA1: 054f9db834e37459f10b83f56691a5d6e7f28334ANALYSIS DATE: 2022-10-13T15:10:00ZTTPS: T1005, T1081, T1060, T1112 ScoreMeaningExample10Known badA...

Malware Analysis – persistence – 419a3f9ee0714eccacfc95088ceeaa10

October 13, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 419a3f9ee0714eccacfc95088ceeaa10SHA1: e0bc60f09a59582e7fc0f2922204453898210fdaANALYSIS DATE: 2022-10-13T15:11:40ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ctblocker – 678d3c068832953f7adc0abdc538e320

October 13, 2022

Score: 10 MALWARE FAMILY: ctblockerTAGS:family:ctblocker, ransomwareMD5: 678d3c068832953f7adc0abdc538e320SHA1: f3283eada70ba0362e9617706272f83f0524b7a1ANALYSIS DATE: 2022-10-13T15:10:49ZTTPS: T1107, T1490, T1012, T1082, T1491, T1112 ScoreMeaningExample10Known badA malware family...

Malware Analysis – djvu – d8401fb3b6684302bf3d864cbc1f4873

October 13, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: d8401fb3b6684302bf3d864cbc1f4873SHA1: 2bbce123c8cdf589b8c8f180bd09b2081e7f9649ANALYSIS DATE:...

Malware Analysis – djvu – 9c8fd9b68a8d658246ad4cebac6b1570

October 13, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 9c8fd9b68a8d658246ad4cebac6b1570SHA1: 005b4aa5e1dc93dce95a88769b02198725fc870cANALYSIS DATE: 2022-10-13T15:21:02ZTTPS: T1222, T1082, T1053, T1012,...

Malware Analysis – ransomware – f7eba1bbbe90cff96b351466964b8a9a

October 13, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: f7eba1bbbe90cff96b351466964b8a9aSHA1: cbaa464ccb27d6f7d95e4be231e49c615ce2ea01ANALYSIS DATE: 2022-10-13T15:43:42ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 6ee0535f437c16dca3f8847d9c41f131

October 13, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 6ee0535f437c16dca3f8847d9c41f131SHA1: 0d07408b7aec4dcfbf490f3b87a820e5331f7e83ANALYSIS DATE: 2022-10-13T15:41:04ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 90ef84850dade0a4b1897dffbb002ecd

October 13, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 90ef84850dade0a4b1897dffbb002ecdSHA1: c63a9c025df5af0023fd8eb12b0d154b379fab2aANALYSIS DATE: 2022-10-13T15:44:07ZTTPS: T1091, T1005, T1081, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – badrabbit – e180bc4df144544dd905fcf6f9978960

October 13, 2022

Score: 10 MALWARE FAMILY: badrabbitTAGS:family:badrabbit, family:mimikatz, ransomwareMD5: e180bc4df144544dd905fcf6f9978960SHA1: 46a24f3fd8890ce52b2eba23f2166a84c2b3a7ddANALYSIS DATE: 2022-10-13T15:38:46ZTTPS: T1053 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – ransomware – 50cd97a69ac8ae880d5815e70f155266

October 13, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 50cd97a69ac8ae880d5815e70f155266SHA1: a6fc9f011d8cab0e39f2caffd331b4f57b89e5ccANALYSIS DATE: 2022-10-13T15:47:21ZTTPS: T1091, T1005, T1081, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – ac325415a85b652e2c62cf8e788e4c99

October 13, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: ac325415a85b652e2c62cf8e788e4c99SHA1: 7db4356b5c0d89d2a74025c510470b71e08530e1ANALYSIS DATE: 2022-10-13T15:45:04ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 533add1357661fa6ee390da83765bcf5

October 13, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 533add1357661fa6ee390da83765bcf5SHA1: 593c5ed6949e483fa659c9cd397dda898f4bdd3bANALYSIS DATE: 2022-10-13T15:45:31ZTTPS: T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – ff96fcc0692061b70f39da2943c2b602

October 13, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: ff96fcc0692061b70f39da2943c2b602SHA1: 07297b195f1803488cd0e2120c2abb41a85b71feANALYSIS DATE: 2022-10-13T15:45:04ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 5a18074ec6b520291a7c7a19c53ac79c

October 13, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 5a18074ec6b520291a7c7a19c53ac79cSHA1: 8304a1aeb8583b5d285f40ff796f42febc76388bANALYSIS DATE: 2022-10-13T15:50:05ZTTPS: T1053, T1005, T1081, T1060,...

Malware Analysis – satana – 108756f41d114eb93e136ba2feb838d0

October 13, 2022

Score: 10 MALWARE FAMILY: satanaTAGS:family:satana, bootkit, persistence, ransomware, spyware, stealerMD5: 108756f41d114eb93e136ba2feb838d0SHA1: 8c6b51923ee7da2f4642c7717db95fbb77d96164ANALYSIS DATE: 2022-10-13T16:28:55ZTTPS: T1107, T1490, T1005, T1081, T1060, T1112,...

Malware Analysis – smokeloader – c99a9c645965f321c24da0bd2221bd01

October 13, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: c99a9c645965f321c24da0bd2221bd01SHA1: 2a2c28daf28ab57077173b78f1ed3e020cd7a22cANALYSIS DATE: 2022-10-13T16:23:42ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 0adaf68c5c90764ca23cd76d7c5c8151

October 13, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 0adaf68c5c90764ca23cd76d7c5c8151SHA1: b895632062cc0165b8207986ac2fa604cca833eeANALYSIS DATE: 2022-10-13T16:28:24ZTTPS: T1012, T1082, T1130, T1112,...

Malware Analysis – banker – 599ca5ade29ca5a197d672c4c8030403

October 13, 2022

Score: 8 MALWARE FAMILY: bankerTAGS:banker, ransomwareMD5: 599ca5ade29ca5a197d672c4c8030403SHA1: b65579c62481b07f955638d884d3a59b9582e705ANALYSIS DATE: 2022-10-13T16:30:28ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – a540d1d94ec61667d108e633171378ef

October 13, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, stealerMD5: a540d1d94ec61667d108e633171378efSHA1: 40c6f5946a9157b3354d73bca3594de68bfffe9dANALYSIS DATE: 2022-10-13T16:54:36ZTTPS: T1060, T1112, T1222, T1082, T1053,...

Malware Analysis – danabot – 141393e93c307983763e7a187b3f3dd0

October 13, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:o1, backdoor, banker, collection, discovery, infostealer, persistence, ransomware, spyware, stealer,...

Malware Analysis – jigsaw – 2773e3dc59472296cb0024ba7715a64e

October 13, 2022

Score: 10 MALWARE FAMILY: jigsawTAGS:family:jigsaw, persistence, ransomwareMD5: 2773e3dc59472296cb0024ba7715a64eSHA1: 27d99fbca067f478bb91cdbcb92f13a828b00859ANALYSIS DATE: 2022-10-13T16:57:24ZTTPS: T1060, T1112, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – danabot – b8fa4a8502049a4eeb5f0d877d245340

October 13, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: b8fa4a8502049a4eeb5f0d877d245340SHA1:...

Malware Analysis

Malware Analysis – evasion – 5110fa03dda5015e9358e54892b11cb0

Malware Analysis – djvu – 614e9ab5124ca650e2daf78edf427f3b

Malware Analysis – xorist – 060e10b04227a593886c4cd0928a3bf2

Malware Analysis – persistence – 419a3f9ee0714eccacfc95088ceeaa10

Malware Analysis – ctblocker – 678d3c068832953f7adc0abdc538e320

Malware Analysis – djvu – d8401fb3b6684302bf3d864cbc1f4873

Malware Analysis – djvu – 9c8fd9b68a8d658246ad4cebac6b1570

Malware Analysis – ransomware – f7eba1bbbe90cff96b351466964b8a9a

Malware Analysis – ransomware – 6ee0535f437c16dca3f8847d9c41f131

Malware Analysis – ransomware – 90ef84850dade0a4b1897dffbb002ecd

Malware Analysis – badrabbit – e180bc4df144544dd905fcf6f9978960

Malware Analysis – ransomware – 50cd97a69ac8ae880d5815e70f155266

Malware Analysis – ransomware – ac325415a85b652e2c62cf8e788e4c99

Malware Analysis – ransomware – 533add1357661fa6ee390da83765bcf5

Malware Analysis – ransomware – ff96fcc0692061b70f39da2943c2b602

Malware Analysis – djvu – 5a18074ec6b520291a7c7a19c53ac79c

Malware Analysis – satana – 108756f41d114eb93e136ba2feb838d0

Malware Analysis – smokeloader – c99a9c645965f321c24da0bd2221bd01

Malware Analysis – djvu – 0adaf68c5c90764ca23cd76d7c5c8151

Malware Analysis – banker – 599ca5ade29ca5a197d672c4c8030403

Malware Analysis – djvu – a540d1d94ec61667d108e633171378ef

Malware Analysis – danabot – 141393e93c307983763e7a187b3f3dd0

Malware Analysis – jigsaw – 2773e3dc59472296cb0024ba7715a64e

Malware Analysis – danabot – b8fa4a8502049a4eeb5f0d877d245340

[INCRANSOM] – Ransomware Victim: coruzcitywndata+

[NOVA] – Ransomware Victim: Portel Logistic Technologies

[QILIN] – Ransomware Victim: www[.]nuphoton[.]com

[QILIN] – Ransomware Victim: semco-tech[.]com

[KAWA4096] – Ransomware Victim: ****-*[.]co[.]jp

You may have missed