Malware Analysis

Malware Analysis – chaos – e94273df0cf8cfcc0388c1766b95db35

October 12, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, ransomwareMD5: e94273df0cf8cfcc0388c1766b95db35SHA1: c9e94a5c814ac1deeed5156deea9554c235669c8ANALYSIS DATE: 2022-10-12T09:01:04ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – danabot – 3ba364b7ab9f5fadb3a784c1b9b206eb

October 12, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 3ba364b7ab9f5fadb3a784c1b9b206ebSHA1:...

Malware Analysis – ransomware – 16802b405f185879f0b27dae7d8a5c71

October 12, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 16802b405f185879f0b27dae7d8a5c71SHA1: 49596f69dae97b8f52ac8d3b5055b0bd72e6062cANALYSIS DATE: 2022-10-12T09:41:07ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 0402655e4f75daffcc9beadc441a0bce

October 12, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 0402655e4f75daffcc9beadc441a0bceSHA1: 8cf30f46b324180e8df5ce69cdb8f2e47e6267fcANALYSIS DATE: 2022-10-12T09:41:05ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – a4dd607fdd3faeaf41f98d46f2ed643d

October 12, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: a4dd607fdd3faeaf41f98d46f2ed643dSHA1: 25001d944680a673f669623ee2b508eb4b10198eANALYSIS DATE: 2022-10-12T09:41:06ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – neshta – 54c2b90fd9364cd39cecff8ab112b825

October 12, 2022

Score: 10 MALWARE FAMILY: neshtaTAGS:family:neshta, family:phobos, evasion, persistence, ransomware, spyware, stealerMD5: 54c2b90fd9364cd39cecff8ab112b825SHA1: 96c0c98dcce84e3bbec643083ce675664173bfd2ANALYSIS DATE: 2022-10-12T09:58:04ZTTPS: T1005, T1081, T1112, T1042, T1082,...

Malware Analysis – netwalker – 80372de850597bd9e7e021a94f13f0a1

October 12, 2022

Score: 10 MALWARE FAMILY: netwalkerTAGS:family:netwalker, ransomware, spyware, stealerMD5: 80372de850597bd9e7e021a94f13f0a1SHA1: 037db820c8dee94ae25a439b758a2b89f527cbb4ANALYSIS DATE: 2022-10-12T09:57:03ZTTPS: T1107, T1490, T1005, T1081 ScoreMeaningExample10Known badA malware family...

Malware Analysis – djvu – 3fd2bbeeef907e2943ff4e2f6fb24e9a

October 12, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 3fd2bbeeef907e2943ff4e2f6fb24e9aSHA1: e403f202f605fdf9f928c135e55d32ee8757a4fbANALYSIS DATE: 2022-10-12T09:56:22ZTTPS: T1082, T1053, T1005, T1081,...

Malware Analysis – – cfd31737ccacf6e9a0e2ac18cf3445ac

October 12, 2022

Score: 4 MALWARE FAMILY: TAGS:MD5: cfd31737ccacf6e9a0e2ac18cf3445acSHA1: 74c615ca54aaff3c5e6734efef04259290c357baANALYSIS DATE: 2022-10-12T09:58:05ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – xorist – e98a127ed90e67cd30344bdb691384a1

October 12, 2022

Score: 10 MALWARE FAMILY: xoristTAGS:family:xorist, persistence, ransomware, upxMD5: e98a127ed90e67cd30344bdb691384a1SHA1: a79fe32686a67aa3011d397460d748b3d149d0beANALYSIS DATE: 2022-10-12T09:58:05ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 8119c78b7cfb7d9ce37286ec9fc263e2

October 12, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 8119c78b7cfb7d9ce37286ec9fc263e2SHA1: 986ba7a5714ad5b0de0d040d1c066389bcb81a67ANALYSIS DATE: 2022-10-12T10:21:03ZTTPS: T1059, T1107, T1490, T1005, T1081 ScoreMeaningExample10Known badA malware family...

Malware Analysis – persistence – 5569ef5cc1b99eee164438d95d601baf

October 12, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 5569ef5cc1b99eee164438d95d601bafSHA1: 27a889e1542b6ebe68130db3618c0de4f40fadb5ANALYSIS DATE: 2022-10-12T10:01:04ZTTPS: T1107, T1490, T1060, T1112, T1005, T1081, T1082, T1012,...

Malware Analysis – persistence – 6c42c7957278c7ac09b111490fc93cc1

October 12, 2022

Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 6c42c7957278c7ac09b111490fc93cc1SHA1: 29f9b35533f1a6dbf47ed5dfb4144c33d33ce91bANALYSIS DATE: 2022-10-12T09:58:05ZTTPS: T1060, T1112, T1005, T1081 ScoreMeaningExample10Known badA malware family...

Malware Analysis – djvu – 9dead8d771b215649c86c1374a591799

October 12, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 9dead8d771b215649c86c1374a591799SHA1: 5298328fabb9c73665793e0b93051567408db8a7ANALYSIS DATE: 2022-10-12T10:22:17ZTTPS: T1005, T1081, T1012, T1060,...

Malware Analysis – smokeloader – 5d93dd4f046d16989f0dc53f6bb3326f

October 12, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 5d93dd4f046d16989f0dc53f6bb3326fSHA1: cc20ab38c977b233a38730174b58bb04a7d1e646ANALYSIS DATE: 2022-10-12T10:35:48ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 6801db35f78978c4b99f6d78a5753eff

October 12, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 6801db35f78978c4b99f6d78a5753effSHA1: afeb1ce64b59ea20876bc2fee8a70023e56d6797ANALYSIS DATE: 2022-10-12T10:23:03ZTTPS: T1053, T1005, T1081, T1222,...

Malware Analysis – ermac – 24b1ce69f7066a7bc9bc32e3c969d8d9

October 12, 2022

Score: 10 MALWARE FAMILY: ermacTAGS:family:ermac, banker, evasion, infostealer, ransomware, trojanMD5: 24b1ce69f7066a7bc9bc32e3c969d8d9SHA1: f36ff949217f3340a717a0e5a4d079b254b876beANALYSIS DATE: 2022-10-12T10:25:27ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – 658d4950dbc04072e1ed1f2f1b5204b0

October 12, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, spyware, stealer, trojanMD5: 658d4950dbc04072e1ed1f2f1b5204b0SHA1: aec694f67a173222721118651711b969fbbfe55dANALYSIS DATE: 2022-10-11T17:28:02ZTTPS: T1088, T1089, T1112, T1060, T1004, T1082,...

Malware Analysis – persistence – 6fcdf8e4e096f17b789d0722d42a80c0

October 12, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 6fcdf8e4e096f17b789d0722d42a80c0SHA1: 26d8784b92e98af4709d29a8f58129405cae6133ANALYSIS DATE: 2022-10-11T18:43:42ZTTPS: T1107, T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – persistence – 11dc4c02d1217da78f3242f4bfcd58e0

October 12, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 11dc4c02d1217da78f3242f4bfcd58e0SHA1: c72ef51760802755b1c83d42b7365389a89b1ef1ANALYSIS DATE: 2022-10-11T17:55:42ZTTPS: T1491, T1112, T1082, T1060, T1107, T1490 ScoreMeaningExample10Known badA malware family...

Malware Analysis – persistence – 2cd3b2d532385451b2ce4e19983c88a0

October 12, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 2cd3b2d532385451b2ce4e19983c88a0SHA1: 75d4fd48e64529129cff1654ba57417d0e8399e9ANALYSIS DATE: 2022-10-11T18:13:58ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – 2a84d25e0679adc9644e70103326cb50

October 12, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 2a84d25e0679adc9644e70103326cb50SHA1: 03587e348c5b50c08ad067d4e3e30ccdd81bb613ANALYSIS DATE: 2022-10-11T17:36:44ZTTPS: T1490, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – evasion – 554f360169bfac0f1852e570bd41fde0

October 12, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 554f360169bfac0f1852e570bd41fde0SHA1: 39cf01b10a6cc438a27cbe981d63a3be5f312256ANALYSIS DATE: 2022-10-11T19:30:34ZTTPS: T1060, T1112, T1107, T1490, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – 6c87c3bbdb17a4716e668c2b78db16c0

October 12, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 6c87c3bbdb17a4716e668c2b78db16c0SHA1: e3de17df8e20cfc37bcd18233cdc103278d8d250ANALYSIS DATE: 2022-10-11T18:59:11ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis

Malware Analysis – chaos – e94273df0cf8cfcc0388c1766b95db35

Malware Analysis – danabot – 3ba364b7ab9f5fadb3a784c1b9b206eb

Malware Analysis – ransomware – 16802b405f185879f0b27dae7d8a5c71

Malware Analysis – ransomware – 0402655e4f75daffcc9beadc441a0bce

Malware Analysis – ransomware – a4dd607fdd3faeaf41f98d46f2ed643d

Malware Analysis – neshta – 54c2b90fd9364cd39cecff8ab112b825

Malware Analysis – netwalker – 80372de850597bd9e7e021a94f13f0a1

Malware Analysis – djvu – 3fd2bbeeef907e2943ff4e2f6fb24e9a

Malware Analysis – – cfd31737ccacf6e9a0e2ac18cf3445ac

Malware Analysis – xorist – e98a127ed90e67cd30344bdb691384a1

Malware Analysis – ransomware – 8119c78b7cfb7d9ce37286ec9fc263e2

Malware Analysis – persistence – 5569ef5cc1b99eee164438d95d601baf

Malware Analysis – persistence – 6c42c7957278c7ac09b111490fc93cc1

Malware Analysis – djvu – 9dead8d771b215649c86c1374a591799

Malware Analysis – smokeloader – 5d93dd4f046d16989f0dc53f6bb3326f

Malware Analysis – djvu – 6801db35f78978c4b99f6d78a5753eff

Malware Analysis – ermac – 24b1ce69f7066a7bc9bc32e3c969d8d9

Malware Analysis – evasion – 658d4950dbc04072e1ed1f2f1b5204b0

Malware Analysis – persistence – 6fcdf8e4e096f17b789d0722d42a80c0

Malware Analysis – persistence – 11dc4c02d1217da78f3242f4bfcd58e0

Malware Analysis – persistence – 2cd3b2d532385451b2ce4e19983c88a0

Malware Analysis – evasion – 2a84d25e0679adc9644e70103326cb50

Malware Analysis – evasion – 554f360169bfac0f1852e570bd41fde0

Malware Analysis – evasion – 6c87c3bbdb17a4716e668c2b78db16c0

[STORMOUS] – Ransomware Victim: www[.]marjane[.]ma

Synthient Credential Stuffing Threat Data – 1,957,476,021 breached accounts

CVE Alert: CVE-2025-12790 – Red Hat – Red Hat Satellite 6

[INCRANSOM] – Ransomware Victim: Ketat Grundstücksverwertungs GmbH

[INCRANSOM] – Ransomware Victim: prutsch-ra[.]at

You may have missed