Malware Analysis

Malware Analysis – wannacry – cb5e2cdf03ff2c2603bd01d661a993fe

October 11, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: cb5e2cdf03ff2c2603bd01d661a993feSHA1: 0b82f726736b02320c94a9f662f5333b73223b3cANALYSIS DATE: 2022-10-11T03:58:05ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – xorist – 6ff6d5f4c066ad2fc4bd95a3d1ada270

October 11, 2022

Score: 10 MALWARE FAMILY: xoristTAGS:family:xorist, ransomware, spyware, stealer, upxMD5: 6ff6d5f4c066ad2fc4bd95a3d1ada270SHA1: f2ef52519bdd03cf6543873299235fb3fdf9bfa1ANALYSIS DATE: 2022-10-11T04:04:02ZTTPS: T1005, T1081 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – dharma – c8436825a0549e82d500d7b5751c271f

October 11, 2022

Score: 10 MALWARE FAMILY: dharmaTAGS:family:dharma, persistence, ransomwareMD5: c8436825a0549e82d500d7b5751c271fSHA1: 5eee3cc7bba61c9ecf2bfc4c88a5f7370d378ea0ANALYSIS DATE: 2022-10-11T04:27:03ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – djvu – e5030e9f23f13afb77009eaf92e5b1af

October 11, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:buildnewdomain, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: e5030e9f23f13afb77009eaf92e5b1afSHA1:...

Malware Analysis – dharma – c8436825a0549e82d500d7b5751c271f

October 11, 2022

Score: 10 MALWARE FAMILY: dharmaTAGS:family:dharma, persistence, ransomware, spyware, stealerMD5: c8436825a0549e82d500d7b5751c271fSHA1: 5eee3cc7bba61c9ecf2bfc4c88a5f7370d378ea0ANALYSIS DATE: 2022-10-11T04:26:57ZTTPS: T1005, T1081, T1060, T1112, T1107, T1490 ScoreMeaningExample10Known...

Malware Analysis – djvu – 4555e6b5a67eb2314c4e9aad8af423c4

October 11, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 4555e6b5a67eb2314c4e9aad8af423c4SHA1: 8931b859d2ba4c82ca2a71cf68ef2d58093e125bANALYSIS DATE: 2022-10-11T04:08:37ZTTPS: T1005, T1081, T1012, T1060,...

Malware Analysis – djvu – d92523e6637cea6a19120c764fcf82a6

October 11, 2022

Malware Analysis – djvu – 1f0aacb506ee16071fd5d0fdee1db2a3

October 11, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 1f0aacb506ee16071fd5d0fdee1db2a3SHA1: a94db3eb4115a70f52049644874cdb78e6030868ANALYSIS DATE: 2022-10-11T04:32:45ZTTPS: T1082, T1053, T1005, T1081,...

Malware Analysis – djvu – b9b5214f8aedd0cc1d4fb66d5cb56bc1

October 11, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: b9b5214f8aedd0cc1d4fb66d5cb56bc1SHA1: ec50878f6bf713ddf85d0e55d79234e5548ec97fANALYSIS DATE: 2022-10-11T04:30:14ZTTPS: T1012, T1005, T1081, T1060,...

Malware Analysis – smokeloader – d92523e6637cea6a19120c764fcf82a6

October 11, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: d92523e6637cea6a19120c764fcf82a6SHA1: 611e3b0191af111c8c79b172373c9f79a8db4794ANALYSIS DATE: 2022-10-11T04:31:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 3a44d82dc4d08ac806741e8fc989847d

October 11, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 3a44d82dc4d08ac806741e8fc989847dSHA1: cf606b46c11476a7ecc8617fb9013f3134db7f0bANALYSIS DATE: 2022-10-10T19:58:27ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 1e5c8f3bfb618c7a29948fa3c021774c

October 11, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 1e5c8f3bfb618c7a29948fa3c021774cSHA1: d1282b0f46a9b613f1d2d4a599e8d3bfb72e7ccdANALYSIS DATE: 2022-10-10T19:58:04ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 3a44d82dc4d08ac806741e8fc989847d

October 11, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 3a44d82dc4d08ac806741e8fc989847dSHA1: cf606b46c11476a7ecc8617fb9013f3134db7f0bANALYSIS DATE: 2022-10-10T19:59:03ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 15cb8886f26e02cf291796361f4e2c68

October 11, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 15cb8886f26e02cf291796361f4e2c68SHA1: 70f13d50677606c51aa2a0c9eed2d03af4decfe1ANALYSIS DATE: 2022-10-10T19:59:23ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 65df118598bd208eaefc6f290393a9a3

October 11, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 65df118598bd208eaefc6f290393a9a3SHA1: d700a0a6b595ad94ce14c028f80a56168dbf59e8ANALYSIS DATE: 2022-10-10T20:00:05ZTTPS: T1091, T1005, T1081, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – smokeloader – afb4d8b4ebadba7cad1455fcec65fa90

October 11, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: afb4d8b4ebadba7cad1455fcec65fa90SHA1: d8137a043c6576344134dfd1895a89e0111c9178ANALYSIS DATE: 2022-10-10T20:02:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 65df118598bd208eaefc6f290393a9a3

October 11, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 65df118598bd208eaefc6f290393a9a3SHA1: d700a0a6b595ad94ce14c028f80a56168dbf59e8ANALYSIS DATE: 2022-10-10T19:59:38ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 477f4d9acf2c970ddaab25d54fa585f7

October 11, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 477f4d9acf2c970ddaab25d54fa585f7SHA1: 840c64d9a713cba9506a75d16034e86bf724f788ANALYSIS DATE: 2022-10-10T21:40:57ZTTPS: T1222, T1082, T1053, T1005,...

Malware Analysis – smokeloader – 395bfcca7c226c0382118742fe8b0bc4

October 11, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 395bfcca7c226c0382118742fe8b0bc4SHA1: f76cdad51ae0c528d74302e07899816a981e5f68ANALYSIS DATE: 2022-10-10T21:02:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 395bfcca7c226c0382118742fe8b0bc4

October 11, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: 395bfcca7c226c0382118742fe8b0bc4SHA1: f76cdad51ae0c528d74302e07899816a981e5f68ANALYSIS...

Malware Analysis – djvu – afb4d8b4ebadba7cad1455fcec65fa90

October 11, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: afb4d8b4ebadba7cad1455fcec65fa90SHA1: d8137a043c6576344134dfd1895a89e0111c9178ANALYSIS DATE: 2022-10-10T20:06:53ZTTPS:...

Malware Analysis – djvu – e5b420b08c831674185ed35b1c5fa16b

October 11, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: e5b420b08c831674185ed35b1c5fa16bSHA1: c3eb72c03f27f8d27ddb11d0057f95612531ea70ANALYSIS DATE: 2022-10-10T22:02:49ZTTPS:...

Malware Analysis – djvu – 3c937e41155c84430617e0a8e6effb57

October 11, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 3c937e41155c84430617e0a8e6effb57SHA1: bbcbeadb9144092eddf82c20120288cbb2f4698cANALYSIS DATE: 2022-10-10T22:04:18ZTTPS: T1005, T1081, T1012, T1222,...

Malware Analysis – smokeloader – e5b420b08c831674185ed35b1c5fa16b

October 11, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: e5b420b08c831674185ed35b1c5fa16bSHA1: c3eb72c03f27f8d27ddb11d0057f95612531ea70ANALYSIS DATE: 2022-10-10T22:03:02ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis

Malware Analysis – wannacry – cb5e2cdf03ff2c2603bd01d661a993fe

Malware Analysis – xorist – 6ff6d5f4c066ad2fc4bd95a3d1ada270

Malware Analysis – dharma – c8436825a0549e82d500d7b5751c271f

Malware Analysis – djvu – e5030e9f23f13afb77009eaf92e5b1af

Malware Analysis – dharma – c8436825a0549e82d500d7b5751c271f

Malware Analysis – djvu – 4555e6b5a67eb2314c4e9aad8af423c4

Malware Analysis – djvu – d92523e6637cea6a19120c764fcf82a6

Malware Analysis – djvu – 1f0aacb506ee16071fd5d0fdee1db2a3

Malware Analysis – djvu – b9b5214f8aedd0cc1d4fb66d5cb56bc1

Malware Analysis – smokeloader – d92523e6637cea6a19120c764fcf82a6

Malware Analysis – ransomware – 3a44d82dc4d08ac806741e8fc989847d

Malware Analysis – ransomware – 1e5c8f3bfb618c7a29948fa3c021774c

Malware Analysis – ransomware – 3a44d82dc4d08ac806741e8fc989847d

Malware Analysis – ransomware – 15cb8886f26e02cf291796361f4e2c68

Malware Analysis – ransomware – 65df118598bd208eaefc6f290393a9a3

Malware Analysis – smokeloader – afb4d8b4ebadba7cad1455fcec65fa90

Malware Analysis – ransomware – 65df118598bd208eaefc6f290393a9a3

Malware Analysis – djvu – 477f4d9acf2c970ddaab25d54fa585f7

Malware Analysis – smokeloader – 395bfcca7c226c0382118742fe8b0bc4

Malware Analysis – djvu – 395bfcca7c226c0382118742fe8b0bc4

Malware Analysis – djvu – afb4d8b4ebadba7cad1455fcec65fa90

Malware Analysis – djvu – e5b420b08c831674185ed35b1c5fa16b

Malware Analysis – djvu – 3c937e41155c84430617e0a8e6effb57

Malware Analysis – smokeloader – e5b420b08c831674185ed35b1c5fa16b

Cobalt Strike Beacon Detected – 121[.]43[.]37[.]134:4434

Cobalt Strike Beacon Detected – 119[.]29[.]231[.]118:443

Cobalt Strike Beacon Detected – 39[.]101[.]74[.]162:443

Cobalt Strike Beacon Detected – 8[.]218[.]112[.]112:8880

Cobalt Strike Beacon Detected – 47[.]109[.]48[.]57:443

You may have missed