Malware Analysis

Malware Analysis – djvu – ad499a24974aff27e4204574bca7b05f

October 11, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: ad499a24974aff27e4204574bca7b05fSHA1: 2b8246aed7668f94d61ef52a52697981db97ad5fANALYSIS DATE: 2022-10-11T08:01:54ZTTPS: T1082, T1012, T1053, T1005,...

Malware Analysis – evasion – d647220db85f6557e262ada99919e9f2

October 11, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomware, trojanMD5: d647220db85f6557e262ada99919e9f2SHA1: 5fceb3f1819a994b22f3f83084ea50e540d9f8e4ANALYSIS DATE: 2022-10-11T08:05:21ZTTPS: T1491, T1112, T1053, T1107, T1490, T1031, T1089, T1082, T1012,...

Malware Analysis – evasion – d647220db85f6557e262ada99919e9f2

October 11, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomware, trojanMD5: d647220db85f6557e262ada99919e9f2SHA1: 5fceb3f1819a994b22f3f83084ea50e540d9f8e4ANALYSIS DATE: 2022-10-11T08:06:04ZTTPS: T1112, T1082, T1053, T1107, T1490, T1031, T1491, T1089, T1012,...

Malware Analysis – smokeloader – 4a8cef940dbcaaab17be40229f8f09e9

October 11, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 4a8cef940dbcaaab17be40229f8f09e9SHA1: fbccf3ef94809dae33000b6a15f7780db9bb3925ANALYSIS DATE: 2022-10-11T08:03:33ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – danabot – 4a8cef940dbcaaab17be40229f8f09e9

October 11, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 4a8cef940dbcaaab17be40229f8f09e9SHA1: fbccf3ef94809dae33000b6a15f7780db9bb3925ANALYSIS...

Malware Analysis – djvu – d8eaa6a4796ba5b2bb8ecaa2f9ce3999

October 11, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: d8eaa6a4796ba5b2bb8ecaa2f9ce3999SHA1: 0cf6a0cc77e2a73eeef82fc434368e9dbea9836dANALYSIS DATE: 2022-10-11T08:09:45ZTTPS: T1005, T1081, T1060, T1112,...

Malware Analysis – wannacry – 14baa82b3b48237395b7f0b43927229f

October 11, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 14baa82b3b48237395b7f0b43927229fSHA1: 99b382b9b239db3a3a0cc34ade673d6071b773d8ANALYSIS DATE: 2022-10-11T08:11:18ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – 4647bb53eb893013f8c752f2b550ae81

October 11, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 4647bb53eb893013f8c752f2b550ae81SHA1: 5779a312940e1b8dcc587fdf22f94ec220c1db4bANALYSIS DATE: 2022-10-11T08:10:59ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 4647bb53eb893013f8c752f2b550ae81

October 11, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 4647bb53eb893013f8c752f2b550ae81SHA1: 5779a312940e1b8dcc587fdf22f94ec220c1db4bANALYSIS DATE: 2022-10-11T08:11:06ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – 719089f79446e8f6d7e2ba960a2ed96c

October 11, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 719089f79446e8f6d7e2ba960a2ed96cSHA1: 5047fdd972be0de532409dee8ea72ae2dda2ede8ANALYSIS DATE: 2022-10-11T08:17:02ZTTPS: T1031, T1112, T1107, T1490, T1082 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – wannacry – 14baa82b3b48237395b7f0b43927229f

October 11, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 14baa82b3b48237395b7f0b43927229fSHA1: 99b382b9b239db3a3a0cc34ade673d6071b773d8ANALYSIS DATE: 2022-10-11T08:12:05ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – persistence – b49b434dbfee3b934e8d1fdca785b18b

October 11, 2022

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: b49b434dbfee3b934e8d1fdca785b18bSHA1: 16d250980885f9f7d92cd23df590bac5be29e7bdANALYSIS DATE: 2022-10-11T08:16:07ZTTPS: T1060, T1082, T1491, T1112, T1042 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – evasion – 719089f79446e8f6d7e2ba960a2ed96c

October 11, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 719089f79446e8f6d7e2ba960a2ed96cSHA1: 5047fdd972be0de532409dee8ea72ae2dda2ede8ANALYSIS DATE: 2022-10-11T08:16:32ZTTPS: T1107, T1490, T1082, T1031, T1112 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – discovery – 63fbbac40a124e5f40fb768acb4df6c1

October 11, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, persistenceMD5: 63fbbac40a124e5f40fb768acb4df6c1SHA1: 90ae3913d6f89f99e5d4baa38133d306e9b1583eANALYSIS DATE: 2022-10-11T08:27:31ZTTPS: T1060, T1112, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – a156800b9afd9e30ffce8aa6e89d6cfb

October 11, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: a156800b9afd9e30ffce8aa6e89d6cfbSHA1: 7b0769c3164faf45d071a0da7e8fafe0eaf4fc82ANALYSIS DATE: 2022-10-11T08:33:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 0cb4753490c6383c0005aa3c025d16c7

October 11, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 0cb4753490c6383c0005aa3c025d16c7SHA1: 7fd69a77ece673870edff6d18cc49efedadaf366ANALYSIS DATE: 2022-10-11T08:21:06ZTTPS: T1012, T1082, T1053, T1005,...

Malware Analysis – discovery – 69f8758ed98e98659611e7cfbbeddcc0

October 11, 2022

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, persistenceMD5: 69f8758ed98e98659611e7cfbbeddcc0SHA1: 2206ad1f11531b07bbbd08eef062844ce8944738ANALYSIS DATE: 2022-10-11T08:21:19ZTTPS: T1060, T1112, T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – danabot – a156800b9afd9e30ffce8aa6e89d6cfb

October 11, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, banker, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: a156800b9afd9e30ffce8aa6e89d6cfbSHA1: 7b0769c3164faf45d071a0da7e8fafe0eaf4fc82ANALYSIS...

Malware Analysis – smokeloader – 32a51d488c8a68eedb7221fc7e7ee196

October 11, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 32a51d488c8a68eedb7221fc7e7ee196SHA1: 98a0bef751da37a0bcbc6961ce3a5eaab705f311ANALYSIS DATE: 2022-10-11T09:02:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 32a51d488c8a68eedb7221fc7e7ee196

October 11, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 32a51d488c8a68eedb7221fc7e7ee196SHA1: 98a0bef751da37a0bcbc6961ce3a5eaab705f311ANALYSIS DATE: 2022-10-11T09:05:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 7545dc45d86663ee45aff24419cc15ac

October 11, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 7545dc45d86663ee45aff24419cc15acSHA1: adadfbebd62e1f3890d74200ecd671b713a7e56cANALYSIS DATE: 2022-10-11T08:34:21ZTTPS: T1060, T1112, T1222, T1082,...

Malware Analysis – djvu – 5564c4680da43fb5501cd028b43531f5

October 11, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 5564c4680da43fb5501cd028b43531f5SHA1: 0e11e3f578c5271423bb9ace237fb2bebe496444ANALYSIS DATE: 2022-10-11T09:48:54ZTTPS: T1082, T1012, T1060, T1112,...

Malware Analysis – smokeloader – 7a14753737a3de00a01d7c0bcfa52230

October 11, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 7a14753737a3de00a01d7c0bcfa52230SHA1: f55cfee97f76001ceb503809570faaa744886d5aANALYSIS DATE: 2022-10-11T09:32:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – danabot – 32a51d488c8a68eedb7221fc7e7ee196

October 11, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:buildnewdomain, backdoor, banker, collection, discovery, infostealer, persistence, ransomware, spyware, stealer,...

Malware Analysis

Malware Analysis – djvu – ad499a24974aff27e4204574bca7b05f

Malware Analysis – evasion – d647220db85f6557e262ada99919e9f2

Malware Analysis – evasion – d647220db85f6557e262ada99919e9f2

Malware Analysis – smokeloader – 4a8cef940dbcaaab17be40229f8f09e9

Malware Analysis – danabot – 4a8cef940dbcaaab17be40229f8f09e9

Malware Analysis – djvu – d8eaa6a4796ba5b2bb8ecaa2f9ce3999

Malware Analysis – wannacry – 14baa82b3b48237395b7f0b43927229f

Malware Analysis – ransomware – 4647bb53eb893013f8c752f2b550ae81

Malware Analysis – ransomware – 4647bb53eb893013f8c752f2b550ae81

Malware Analysis – evasion – 719089f79446e8f6d7e2ba960a2ed96c

Malware Analysis – wannacry – 14baa82b3b48237395b7f0b43927229f

Malware Analysis – persistence – b49b434dbfee3b934e8d1fdca785b18b

Malware Analysis – evasion – 719089f79446e8f6d7e2ba960a2ed96c

Malware Analysis – discovery – 63fbbac40a124e5f40fb768acb4df6c1

Malware Analysis – smokeloader – a156800b9afd9e30ffce8aa6e89d6cfb

Malware Analysis – djvu – 0cb4753490c6383c0005aa3c025d16c7

Malware Analysis – discovery – 69f8758ed98e98659611e7cfbbeddcc0

Malware Analysis – danabot – a156800b9afd9e30ffce8aa6e89d6cfb

Malware Analysis – smokeloader – 32a51d488c8a68eedb7221fc7e7ee196

Malware Analysis – smokeloader – 32a51d488c8a68eedb7221fc7e7ee196

Malware Analysis – djvu – 7545dc45d86663ee45aff24419cc15ac

Malware Analysis – djvu – 5564c4680da43fb5501cd028b43531f5

Malware Analysis – smokeloader – 7a14753737a3de00a01d7c0bcfa52230

Malware Analysis – danabot – 32a51d488c8a68eedb7221fc7e7ee196

Cobalt Strike Beacon Detected – 121[.]43[.]37[.]134:4434

Cobalt Strike Beacon Detected – 119[.]29[.]231[.]118:443

Cobalt Strike Beacon Detected – 39[.]101[.]74[.]162:443

Cobalt Strike Beacon Detected – 8[.]218[.]112[.]112:8880

Cobalt Strike Beacon Detected – 47[.]109[.]48[.]57:443

You may have missed