Malware Analysis

Malware Analysis – koxic – 5a44e1d5691ec9395281123ea0bd501f

October 11, 2022

Score: 10 MALWARE FAMILY: koxicTAGS:family:koxic, evasion, ransomware, trojanMD5: 5a44e1d5691ec9395281123ea0bd501fSHA1: 64566d5049479227d2eff3d983b127c0339974cdANALYSIS DATE: 2022-10-11T09:19:45ZTTPS: T1018, T1082, T1059, T1112, T1031, T1089 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – 7a14753737a3de00a01d7c0bcfa52230

October 11, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, stealer, trojanMD5: 7a14753737a3de00a01d7c0bcfa52230SHA1: f55cfee97f76001ceb503809570faaa744886d5aANALYSIS DATE: 2022-10-11T09:51:59ZTTPS: T1082,...

Malware Analysis – danabot – fd76a2d6b3edde0300d09a6143cbf883

October 11, 2022

Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:buildnewdomain, backdoor, banker, collection, discovery, infostealer, persistence, ransomware, spyware, stealer,...

Malware Analysis – smokeloader – fd76a2d6b3edde0300d09a6143cbf883

October 11, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: fd76a2d6b3edde0300d09a6143cbf883SHA1: 5b5fb81c75a8ffb50b6b29de69eb324818948aa6ANALYSIS DATE: 2022-10-11T10:31:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 335d895837cd0451a60057a9b84c81bc

October 11, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 335d895837cd0451a60057a9b84c81bcSHA1: a3846bce811b7150c30719f7599e700d0a154816ANALYSIS DATE: 2022-10-11T10:00:33ZTTPS: T1222, T1012, T1082, T1060,...

Malware Analysis – evasion – 4d9b79704383a9c91295e8b746413b7c

October 11, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 4d9b79704383a9c91295e8b746413b7cSHA1: 6f8008aca295b27636440ba6fe6c7c00d4da540dANALYSIS DATE: 2022-10-11T02:16:14ZTTPS: T1082, T1091, T1491, T1112, T1060, T1088, T1089, T1042,...

Malware Analysis – evasion – 638c63b0a53008552b6874b864937c91

October 11, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 638c63b0a53008552b6874b864937c91SHA1: fcc9a964814e2c20ceff4b3bd9ffc9fa6f0b0d77ANALYSIS DATE: 2022-10-11T02:16:22ZTTPS: T1060, T1112, T1158, T1091, T1042, T1082, T1088, T1089,...

Malware Analysis – evasion – 4e16b89abda6e2c6ed4cfc6ab067c787

October 11, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 4e16b89abda6e2c6ed4cfc6ab067c787SHA1: 20fe9e4e35bc1ce62027dbad8ddfb02996d1e009ANALYSIS DATE: 2022-10-11T02:16:16ZTTPS: T1491, T1112, T1490, T1012, T1120, T1082, T1088, T1089,...

Malware Analysis – evasion – 54f83062d5b8fc0c06d7c2405e5148a7

October 11, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 54f83062d5b8fc0c06d7c2405e5148a7SHA1: c8e5138f52a6b9c84d08ec7ac3ade1dd0c28b91bANALYSIS DATE: 2022-10-11T02:16:18ZTTPS: T1082, T1004, T1112, T1042, T1060, T1012, T1120, T1088,...

Malware Analysis – evasion – 63046690aa304bd6d153754cdfca619d

October 11, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 63046690aa304bd6d153754cdfca619dSHA1: b0c9ab1908dd7ebbae385162a18a70f14e80c4faANALYSIS DATE: 2022-10-11T02:16:20ZTTPS: T1082, T1012, T1120, T1112, T1088, T1089, T1490, T1158,...

Malware Analysis – – d7a8ed45514ee6d11436052bc368ec8c

October 11, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: d7a8ed45514ee6d11436052bc368ec8cSHA1: ee927c33d8c83e1c3fad5672dec1ffaebae9b050ANALYSIS DATE: 2022-10-11T03:22:51ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 6cc8f230328fc32cb709b946eb8284fc

October 11, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:buildnewdomain, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: 6cc8f230328fc32cb709b946eb8284fcSHA1:...

Malware Analysis – – 64517c4b5f0089776f0d50fc83bc04d0

October 11, 2022

Score: 6 MALWARE FAMILY: TAGS:MD5: 64517c4b5f0089776f0d50fc83bc04d0SHA1: 58179ce1e79bfc11bc14539a2ddfeeda86433284ANALYSIS DATE: 2022-10-11T02:51:48ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – djvu – bba9587a1586f818e4dcb95e037e45f3

October 11, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: bba9587a1586f818e4dcb95e037e45f3SHA1: d46356d5818a1c690b253593aad01608acbd6887ANALYSIS DATE: 2022-10-11T03:05:09ZTTPS: T1082, T1053, T1005, T1081,...

Malware Analysis – djvu – 5086b3288a681780bc07adfc80f3712e

October 11, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 5086b3288a681780bc07adfc80f3712eSHA1: 87f77321abd0df39fad614b47542802ed2676babANALYSIS DATE: 2022-10-11T03:51:03ZTTPS: T1012, T1005, T1081, T1222,...

Malware Analysis – djvu – 6b60aab71f4ac8420abaaed17cbf6f39

October 11, 2022

Malware Analysis – smokeloader – 6b60aab71f4ac8420abaaed17cbf6f39

October 11, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 6b60aab71f4ac8420abaaed17cbf6f39SHA1: 63975ba96ab74f28b1b747d68793fcbeda589998ANALYSIS DATE: 2022-10-11T03:31:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 1dfecc1afdc92e89e77dc663cbf4c06f

October 11, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 1dfecc1afdc92e89e77dc663cbf4c06fSHA1: 699206a1ec7f1e6814e841422ff485f4a9f808e4ANALYSIS DATE: 2022-10-11T03:44:40ZTTPS: T1060, T1112, T1082, T1012,...

Malware Analysis – ransomware – 106448c37cacde8bb398d7bf47c35b1b

October 11, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 106448c37cacde8bb398d7bf47c35b1bSHA1: eb7e622eebd55e0e529ef79eb0190c9217363e84ANALYSIS DATE: 2022-10-11T03:54:28ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 34f569e9577f57ba40d95082fb440fc6

October 11, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 34f569e9577f57ba40d95082fb440fc6SHA1: bfd227d21017e551e53bf475a829d49d633c761aANALYSIS DATE: 2022-10-11T03:54:21ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – b36324b823c0f1ad73516adf87f3510a

October 11, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: b36324b823c0f1ad73516adf87f3510aSHA1: ac21d1858e44e840fbb41d2a3e610288b3641a99ANALYSIS DATE: 2022-10-11T03:54:23ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 4a6b46d302f3217a87bd273791d2569f

October 11, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 4a6b46d302f3217a87bd273791d2569fSHA1: a962581f09f58878cca287f7bb77319fd0ab5296ANALYSIS DATE: 2022-10-11T03:54:25ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 34f569e9577f57ba40d95082fb440fc6

October 11, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 34f569e9577f57ba40d95082fb440fc6SHA1: bfd227d21017e551e53bf475a829d49d633c761aANALYSIS DATE: 2022-10-11T03:55:04ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – b36324b823c0f1ad73516adf87f3510a

October 11, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: b36324b823c0f1ad73516adf87f3510aSHA1: ac21d1858e44e840fbb41d2a3e610288b3641a99ANALYSIS DATE: 2022-10-11T03:55:04ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis

Malware Analysis – koxic – 5a44e1d5691ec9395281123ea0bd501f

Malware Analysis – djvu – 7a14753737a3de00a01d7c0bcfa52230

Malware Analysis – danabot – fd76a2d6b3edde0300d09a6143cbf883

Malware Analysis – smokeloader – fd76a2d6b3edde0300d09a6143cbf883

Malware Analysis – djvu – 335d895837cd0451a60057a9b84c81bc

Malware Analysis – evasion – 4d9b79704383a9c91295e8b746413b7c

Malware Analysis – evasion – 638c63b0a53008552b6874b864937c91

Malware Analysis – evasion – 4e16b89abda6e2c6ed4cfc6ab067c787

Malware Analysis – evasion – 54f83062d5b8fc0c06d7c2405e5148a7

Malware Analysis – evasion – 63046690aa304bd6d153754cdfca619d

Malware Analysis – – d7a8ed45514ee6d11436052bc368ec8c

Malware Analysis – djvu – 6cc8f230328fc32cb709b946eb8284fc

Malware Analysis – – 64517c4b5f0089776f0d50fc83bc04d0

Malware Analysis – djvu – bba9587a1586f818e4dcb95e037e45f3

Malware Analysis – djvu – 5086b3288a681780bc07adfc80f3712e

Malware Analysis – djvu – 6b60aab71f4ac8420abaaed17cbf6f39

Malware Analysis – smokeloader – 6b60aab71f4ac8420abaaed17cbf6f39

Malware Analysis – djvu – 1dfecc1afdc92e89e77dc663cbf4c06f

Malware Analysis – ransomware – 106448c37cacde8bb398d7bf47c35b1b

Malware Analysis – ransomware – 34f569e9577f57ba40d95082fb440fc6

Malware Analysis – ransomware – b36324b823c0f1ad73516adf87f3510a

Malware Analysis – ransomware – 4a6b46d302f3217a87bd273791d2569f

Malware Analysis – ransomware – 34f569e9577f57ba40d95082fb440fc6

Malware Analysis – ransomware – b36324b823c0f1ad73516adf87f3510a

Cobalt Strike Beacon Detected – 121[.]43[.]37[.]134:4434

Cobalt Strike Beacon Detected – 119[.]29[.]231[.]118:443

Cobalt Strike Beacon Detected – 39[.]101[.]74[.]162:443

Cobalt Strike Beacon Detected – 8[.]218[.]112[.]112:8880

Cobalt Strike Beacon Detected – 47[.]109[.]48[.]57:443

You may have missed