Malware Analysis

Malware Analysis – wannacry – f23f3e4b07b9d87f2991e8451850f473

October 10, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: f23f3e4b07b9d87f2991e8451850f473SHA1: 3ccd165d37d5a42099351134d284f9c754166765ANALYSIS DATE: 2022-10-10T04:27:51ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – 13919a1e9a622f1d335f36f0ca869636

October 10, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: 13919a1e9a622f1d335f36f0ca869636SHA1: 9f5b987a1c032df52c05d90bd3fc4bb794687d34ANALYSIS DATE: 2022-10-10T04:36:29ZTTPS:...

Malware Analysis – wannacry – f23f3e4b07b9d87f2991e8451850f473

October 10, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: f23f3e4b07b9d87f2991e8451850f473SHA1: 3ccd165d37d5a42099351134d284f9c754166765ANALYSIS DATE: 2022-10-10T04:28:04ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – wannacry – 4202af759ddd588df0a1d6b6ad1ee1bc

October 10, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 4202af759ddd588df0a1d6b6ad1ee1bcSHA1: 721b30790b26682fd3462527317fe817831743f2ANALYSIS DATE: 2022-10-10T04:28:03ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – wannacry – ecf4ccc75a4d40f2b70f3e05b4f0695c

October 10, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: ecf4ccc75a4d40f2b70f3e05b4f0695cSHA1: fcc5ba39aa2ef5b48e62270bb0a8880856b677d4ANALYSIS DATE: 2022-10-10T04:28:04ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – ransomware – 798ff3a6ce38541fb51f0d439b86eda1

October 10, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 798ff3a6ce38541fb51f0d439b86eda1SHA1: 7e6f5fc0c22bde9668a6d9c89ffbd732cb4a439aANALYSIS DATE: 2022-10-09T20:22:15ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 7da84eb952b1d8352fde4c0f1d9d5be2

October 10, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 7da84eb952b1d8352fde4c0f1d9d5be2SHA1: e1b241cefebdea2f08351092808d810d2add387cANALYSIS DATE: 2022-10-09T20:22:12ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – 2067b087c553ec770b61b36c6dfc8aa5

October 10, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 2067b087c553ec770b61b36c6dfc8aa5SHA1: 038879f23ff375a11fbabc654b7e12e891496449ANALYSIS DATE: 2022-10-09T20:22:18ZTTPS: T1107, T1490, T1082, T1031, T1112 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – ransomware – ebea92f74f95d15a2a673e3f7aeb0318

October 10, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: ebea92f74f95d15a2a673e3f7aeb0318SHA1: f2c9bd9d27583e3a71d16925326eea614f172e2dANALYSIS DATE: 2022-10-09T20:22:20ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 43902bf87add073c555196712a70e5a0

October 10, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 43902bf87add073c555196712a70e5a0SHA1: d484c47298581385e57c06b74267d85870817aaeANALYSIS DATE: 2022-10-09T20:22:24ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 798ff3a6ce38541fb51f0d439b86eda1

October 10, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 798ff3a6ce38541fb51f0d439b86eda1SHA1: 7e6f5fc0c22bde9668a6d9c89ffbd732cb4a439aANALYSIS DATE: 2022-10-09T20:23:03ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – ba86411533a04b3a1069fcf9747f9d24

October 10, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: ba86411533a04b3a1069fcf9747f9d24SHA1: a6b27d7b35e3e46e9a95e0ae58e80add666c9a5eANALYSIS DATE: 2022-10-09T20:22:27ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 7da84eb952b1d8352fde4c0f1d9d5be2

October 10, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 7da84eb952b1d8352fde4c0f1d9d5be2SHA1: e1b241cefebdea2f08351092808d810d2add387cANALYSIS DATE: 2022-10-09T20:23:03ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – evasion – 2067b087c553ec770b61b36c6dfc8aa5

October 10, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 2067b087c553ec770b61b36c6dfc8aa5SHA1: 038879f23ff375a11fbabc654b7e12e891496449ANALYSIS DATE: 2022-10-09T20:23:03ZTTPS: T1107, T1490, T1082, T1031 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 43902bf87add073c555196712a70e5a0

October 10, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 43902bf87add073c555196712a70e5a0SHA1: d484c47298581385e57c06b74267d85870817aaeANALYSIS DATE: 2022-10-09T20:23:04ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – ba86411533a04b3a1069fcf9747f9d24

October 10, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: ba86411533a04b3a1069fcf9747f9d24SHA1: a6b27d7b35e3e46e9a95e0ae58e80add666c9a5eANALYSIS DATE: 2022-10-09T20:23:04ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – ebea92f74f95d15a2a673e3f7aeb0318

October 10, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: ebea92f74f95d15a2a673e3f7aeb0318SHA1: f2c9bd9d27583e3a71d16925326eea614f172e2dANALYSIS DATE: 2022-10-09T20:23:03ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 91072a7519fc9af6e2460772cd9db1b2

October 10, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 91072a7519fc9af6e2460772cd9db1b2SHA1: c088d260adbd138fefb5bed1ed2fa4365a83b33eANALYSIS DATE: 2022-10-09T20:59:33ZTTPS: T1064, T1222,...

Malware Analysis – djvu – 726611b4d93637d50b70e10628d63b92

October 10, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 726611b4d93637d50b70e10628d63b92SHA1: 40d73e0c0154ee4992b530c64979cb2b5b740cbaANALYSIS DATE: 2022-10-09T21:28:41ZTTPS: T1064, T1114,...

Malware Analysis – djvu – 81fec1a7d173021ed64be67ec2a74819

October 10, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, botnet:newpatch13, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: 81fec1a7d173021ed64be67ec2a74819SHA1: 33fb04cfccdaa3cf41a38ba223a88290367d8b91ANALYSIS DATE:...

Malware Analysis – evasion – ab1eecb4dc61552200148fad5de653ed

October 10, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: ab1eecb4dc61552200148fad5de653edSHA1: 167e25b660ac079146968cc546bff8e51cb2a580ANALYSIS DATE: 2022-10-09T22:51:28ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – 0184dbbad3f6b34d794bd88d865990d0

October 9, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 0184dbbad3f6b34d794bd88d865990d0SHA1: 377916b926221b3930ada62a6660b7fd8a07564eANALYSIS DATE: 2022-10-09T14:07:00ZTTPS: T1012, T1120,...

Malware Analysis – djvu – f1f8241eb686b262929f338d29bfc974

October 9, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: f1f8241eb686b262929f338d29bfc974SHA1: 872af4956689af2fe41e4e397c82e3ebb47df59bANALYSIS DATE: 2022-10-09T14:36:02ZTTPS:...

Malware Analysis – djvu – bfd1d31196f7df3a2dd5967a6e4e7e6e

October 9, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: bfd1d31196f7df3a2dd5967a6e4e7e6eSHA1: cb23db2bb8b778a1f1cc44b49ec6f0f687e61b80ANALYSIS DATE: 2022-10-09T14:02:23ZTTPS: T1053, T1060, T1112, T1222, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis

Malware Analysis – wannacry – f23f3e4b07b9d87f2991e8451850f473

Malware Analysis – djvu – 13919a1e9a622f1d335f36f0ca869636

Malware Analysis – wannacry – f23f3e4b07b9d87f2991e8451850f473

Malware Analysis – wannacry – 4202af759ddd588df0a1d6b6ad1ee1bc

Malware Analysis – wannacry – ecf4ccc75a4d40f2b70f3e05b4f0695c

Malware Analysis – ransomware – 798ff3a6ce38541fb51f0d439b86eda1

Malware Analysis – ransomware – 7da84eb952b1d8352fde4c0f1d9d5be2

Malware Analysis – evasion – 2067b087c553ec770b61b36c6dfc8aa5

Malware Analysis – ransomware – ebea92f74f95d15a2a673e3f7aeb0318

Malware Analysis – ransomware – 43902bf87add073c555196712a70e5a0

Malware Analysis – ransomware – 798ff3a6ce38541fb51f0d439b86eda1

Malware Analysis – ransomware – ba86411533a04b3a1069fcf9747f9d24

Malware Analysis – ransomware – 7da84eb952b1d8352fde4c0f1d9d5be2

Malware Analysis – evasion – 2067b087c553ec770b61b36c6dfc8aa5

Malware Analysis – ransomware – 43902bf87add073c555196712a70e5a0

Malware Analysis – ransomware – ba86411533a04b3a1069fcf9747f9d24

Malware Analysis – ransomware – ebea92f74f95d15a2a673e3f7aeb0318

Malware Analysis – djvu – 91072a7519fc9af6e2460772cd9db1b2

Malware Analysis – djvu – 726611b4d93637d50b70e10628d63b92

Malware Analysis – djvu – 81fec1a7d173021ed64be67ec2a74819

Malware Analysis – evasion – ab1eecb4dc61552200148fad5de653ed

Malware Analysis – djvu – 0184dbbad3f6b34d794bd88d865990d0

Malware Analysis – djvu – f1f8241eb686b262929f338d29bfc974

Malware Analysis – djvu – bfd1d31196f7df3a2dd5967a6e4e7e6e

Cobalt Strike Beacon Detected – 121[.]43[.]37[.]134:4434

Cobalt Strike Beacon Detected – 119[.]29[.]231[.]118:443

Cobalt Strike Beacon Detected – 39[.]101[.]74[.]162:443

Cobalt Strike Beacon Detected – 8[.]218[.]112[.]112:8880

Cobalt Strike Beacon Detected – 47[.]109[.]48[.]57:443

You may have missed