Malware Analysis

Malware Analysis – djvu – 97fa4449deec602b6164558d3881750c

October 9, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 97fa4449deec602b6164558d3881750cSHA1: 221a3c3c33a03376d128c69489a9f348bde3db84ANALYSIS DATE: 2022-10-08T22:02:43ZTTPS:...

Malware Analysis – djvu – 2c651acbd30133e91cc7cb91229065cf

October 9, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 2c651acbd30133e91cc7cb91229065cfSHA1: 55c563f6cc974ef5471ff30c453ca32bbb5a2dd7ANALYSIS DATE: 2022-10-08T22:55:04ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – – a36e43c61d51a333f7ea5403a7a657f2

October 9, 2022

Score: 1 MALWARE FAMILY: TAGS:MD5: a36e43c61d51a333f7ea5403a7a657f2SHA1: 981fd36739b6bdb27ac098cdc52efe4f903afdcaANALYSIS DATE: 2022-10-08T21:37:33ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 1d300efd6540e957d8fe82ff8a3eabe0

October 9, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 1d300efd6540e957d8fe82ff8a3eabe0SHA1: 764370fd5b58afb7e80c1433174c66218f2f77b0ANALYSIS DATE: 2022-10-08T21:22:39ZTTPS: T1222, T1082, T1005, T1081,...

Malware Analysis – discovery – dd4705e982301fd3b2c633456091443e

October 8, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: dd4705e982301fd3b2c633456091443eSHA1: 97d6d4fc1a26be2c1eab40bf5a044232cac1a479ANALYSIS DATE: 2022-10-08T13:49:20ZTTPS: T1082, T1060, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – a4cdc979beb84ea8abf82613819fe77f

October 8, 2022

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: a4cdc979beb84ea8abf82613819fe77fSHA1: 93e85b0ad5e02bd7290df8135a0e0f77a0171572ANALYSIS DATE: 2022-10-08T13:26:34ZTTPS: T1082, T1005, T1081, T1102 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – smokeloader – 0933ced736e413d0c0e495186280a761

October 8, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 0933ced736e413d0c0e495186280a761SHA1: c1744b4fc8371d8bb9da154bbb460192de8543e7ANALYSIS DATE: 2022-10-08T15:01:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – dcrat – 17d99dd89d24876b77cdac867eeee249

October 8, 2022

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:обнова, backdoor, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealer,...

Malware Analysis – lockbit – c9420fe90699c6bebad3f795f9e4aca3

October 8, 2022

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, discovery, evasion, persistence, ransomwareMD5: c9420fe90699c6bebad3f795f9e4aca3SHA1: c2e629d90d7bbcd595032d6fb1f775957fe9e6e2ANALYSIS DATE: 2022-10-08T14:36:04ZTTPS: T1490, T1046, T1060, T1112, T1107, T1082 ScoreMeaningExample10Known...

Malware Analysis – smokeloader – 17d99dd89d24876b77cdac867eeee249

October 8, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 17d99dd89d24876b77cdac867eeee249SHA1: c926da71b769adc734e20831249da2819b33e8d2ANALYSIS DATE: 2022-10-08T14:01:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 2b6b9e37c9cf8b8fc28cfe95bf271942

October 8, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 2b6b9e37c9cf8b8fc28cfe95bf271942SHA1: 25819534b1a359b2057c3ac99c6c4a997e829d53ANALYSIS DATE: 2022-10-08T15:38:46ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – djvu – ea9f6efc3b1a0476f57992a00ea6c759

October 8, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: ea9f6efc3b1a0476f57992a00ea6c759SHA1: be26452d1dc132b687b89f4845d1ce3ab0a48082ANALYSIS DATE: 2022-10-08T16:14:32ZTTPS: T1060, T1112, T1005, T1081,...

Malware Analysis – smokeloader – 432f1158e2d09eab65b9e855c1736313

October 8, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 432f1158e2d09eab65b9e855c1736313SHA1: 150518dda45e3767015a19161c4b677971fdced7ANALYSIS DATE: 2022-10-08T16:03:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 0933ced736e413d0c0e495186280a761

October 8, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:cheat, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: 0933ced736e413d0c0e495186280a761SHA1:...

Malware Analysis – djvu – bfcc94f42b74c72d187a4270095631ad

October 8, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: bfcc94f42b74c72d187a4270095631adSHA1: 4a3ce2d5c7aaaad4200d0109e4d196af20b230abANALYSIS DATE: 2022-10-08T16:47:50ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – smokeloader – e691ff15393d534e3f45364f1bb8f8d8

October 8, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: e691ff15393d534e3f45364f1bb8f8d8SHA1: 499d5d7d9468c890e21663c00dcb20a040d2e372ANALYSIS DATE: 2022-10-08T16:31:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – e691ff15393d534e3f45364f1bb8f8d8

October 8, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: e691ff15393d534e3f45364f1bb8f8d8SHA1: 499d5d7d9468c890e21663c00dcb20a040d2e372ANALYSIS DATE: 2022-10-08T16:38:38ZTTPS:...

Malware Analysis – djvu – 081c0ab5ead320637f7599d56fab06bf

October 8, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 081c0ab5ead320637f7599d56fab06bfSHA1: 0bd6287ad79ccd5d2ebd1847fe96fcb5b8b792edANALYSIS DATE: 2022-10-08T16:46:23ZTTPS: T1082, T1005, T1081, T1012,...

Malware Analysis – smokeloader – 7c3f888f5b83a1fb3aa5bb7c5d7032b2

October 8, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 7c3f888f5b83a1fb3aa5bb7c5d7032b2SHA1: 1ca5f60b0812d395c303b86e0f8957e3f75f24b3ANALYSIS DATE: 2022-10-08T08:01:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – bed3853c06f4fa8b1dca5cfd5ef08ba3

October 8, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: bed3853c06f4fa8b1dca5cfd5ef08ba3SHA1: 08e6df089dfdf1c5c8f61550e33b93bc0373c3f1ANALYSIS DATE: 2022-10-08T08:31:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – dcrat – 7c3f888f5b83a1fb3aa5bb7c5d7032b2

October 8, 2022

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, family:djvu, family:raccoon, family:redline, family:smokeloader, family:vidar, botnet:17aad1e8aa2ca5164d7690cff1926390, botnet:517, botnet:555, botnet:9333547b6d5c69ea798fd93c66d78435, backdoor, collection, discovery, infostealer, persistence, ransomware,...

Malware Analysis – djvu – f144821a106254d2511e9e1bb0f88c34

October 8, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: f144821a106254d2511e9e1bb0f88c34SHA1: b7654fc67377242f6f64bc53b1f541d531e233f9ANALYSIS DATE: 2022-10-08T08:27:39ZTTPS: T1222, T1082, T1053, T1012,...

Malware Analysis – djvu – 46d3d25d3dfb847965cc4b8af29403a2

October 8, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 46d3d25d3dfb847965cc4b8af29403a2SHA1: 2e63a3968c19e3c7e0aca2b0837c72b371ac3460ANALYSIS DATE: 2022-10-08T08:21:04ZTTPS: T1222, T1082, T1012, T1053,...

Malware Analysis – djvu – bed3853c06f4fa8b1dca5cfd5ef08ba3

October 8, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:raccoon, family:vidar, botnet:17aad1e8aa2ca5164d7690cff1926390, botnet:517, botnet:9333547b6d5c69ea798fd93c66d78435, collection, discovery, persistence, ransomware, spyware, stealerMD5: bed3853c06f4fa8b1dca5cfd5ef08ba3SHA1: 08e6df089dfdf1c5c8f61550e33b93bc0373c3f1ANALYSIS DATE: 2022-10-08T08:33:00ZTTPS:...

Malware Analysis

Malware Analysis – djvu – 97fa4449deec602b6164558d3881750c

Malware Analysis – djvu – 2c651acbd30133e91cc7cb91229065cf

Malware Analysis – – a36e43c61d51a333f7ea5403a7a657f2

Malware Analysis – djvu – 1d300efd6540e957d8fe82ff8a3eabe0

Malware Analysis – discovery – dd4705e982301fd3b2c633456091443e

Malware Analysis – ransomware – a4cdc979beb84ea8abf82613819fe77f

Malware Analysis – smokeloader – 0933ced736e413d0c0e495186280a761

Malware Analysis – dcrat – 17d99dd89d24876b77cdac867eeee249

Malware Analysis – lockbit – c9420fe90699c6bebad3f795f9e4aca3

Malware Analysis – smokeloader – 17d99dd89d24876b77cdac867eeee249

Malware Analysis – djvu – 2b6b9e37c9cf8b8fc28cfe95bf271942

Malware Analysis – djvu – ea9f6efc3b1a0476f57992a00ea6c759

Malware Analysis – smokeloader – 432f1158e2d09eab65b9e855c1736313

Malware Analysis – djvu – 0933ced736e413d0c0e495186280a761

Malware Analysis – djvu – bfcc94f42b74c72d187a4270095631ad

Malware Analysis – smokeloader – e691ff15393d534e3f45364f1bb8f8d8

Malware Analysis – djvu – e691ff15393d534e3f45364f1bb8f8d8

Malware Analysis – djvu – 081c0ab5ead320637f7599d56fab06bf

Malware Analysis – smokeloader – 7c3f888f5b83a1fb3aa5bb7c5d7032b2

Malware Analysis – smokeloader – bed3853c06f4fa8b1dca5cfd5ef08ba3

Malware Analysis – dcrat – 7c3f888f5b83a1fb3aa5bb7c5d7032b2

Malware Analysis – djvu – f144821a106254d2511e9e1bb0f88c34

Malware Analysis – djvu – 46d3d25d3dfb847965cc4b8af29403a2

Malware Analysis – djvu – bed3853c06f4fa8b1dca5cfd5ef08ba3

Cobalt Strike Beacon Detected – 121[.]43[.]37[.]134:4434

Cobalt Strike Beacon Detected – 119[.]29[.]231[.]118:443

Cobalt Strike Beacon Detected – 39[.]101[.]74[.]162:443

Cobalt Strike Beacon Detected – 8[.]218[.]112[.]112:8880

Cobalt Strike Beacon Detected – 47[.]109[.]48[.]57:443

You may have missed