Malware Analysis

Malware Analysis – smokeloader – e750ebffa7143be9bb3aece8edea96ce

October 7, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: e750ebffa7143be9bb3aece8edea96ceSHA1: ef033c3b1dcf518dd460883e668be80c1ffb3a80ANALYSIS DATE: 2022-10-07T16:51:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 9d9da4319e0fff70db698857b74a797e

October 7, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 9d9da4319e0fff70db698857b74a797eSHA1: 908841de7d76f4931dd62da3ab1b208f1b5b9cefANALYSIS DATE: 2022-10-07T08:03:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 9d9da4319e0fff70db698857b74a797e

October 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 9d9da4319e0fff70db698857b74a797eSHA1: 908841de7d76f4931dd62da3ab1b208f1b5b9cefANALYSIS DATE: 2022-10-07T08:09:25ZTTPS:...

Malware Analysis – djvu – ffa9434c90b194b32d5ec9ad565ac875

October 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: ffa9434c90b194b32d5ec9ad565ac875SHA1: b53d13666b21224c4960688d15b80a30e2b27e6dANALYSIS DATE: 2022-10-07T08:12:50ZTTPS: T1060, T1112, T1222, T1005,...

Malware Analysis – djvu – 0c46d0619219da90a35d94bcf4d7e094

October 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 0c46d0619219da90a35d94bcf4d7e094SHA1: 43cf7800e5bcdeb439cff1c230a5681682fbc03bANALYSIS DATE: 2022-10-07T08:43:10ZTTPS:...

Malware Analysis – smokeloader – 0c46d0619219da90a35d94bcf4d7e094

October 7, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 0c46d0619219da90a35d94bcf4d7e094SHA1: 43cf7800e5bcdeb439cff1c230a5681682fbc03bANALYSIS DATE: 2022-10-07T08:31:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – f456b83895119b2e6aca1422df7aa11b

October 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: f456b83895119b2e6aca1422df7aa11bSHA1: 3d9c11bf2edae9e7aedd0c4ff160ce0322b7a5faANALYSIS DATE: 2022-10-07T08:31:58ZTTPS: T1082, T1005, T1081, T1012,...

Malware Analysis – djvu – 79afe5212a85f53a83ec1cf4d3ef1cb1

October 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 79afe5212a85f53a83ec1cf4d3ef1cb1SHA1: ede4d779271049a10d83fbd9fbc1394d1b32db47ANALYSIS DATE: 2022-10-07T09:16:28ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – djvu – 573d5adbc8aa739642ae36bedfcbcc0b

October 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 573d5adbc8aa739642ae36bedfcbcc0bSHA1: bedd44262ec356e1e130ae27f6e075e91fef1eb5ANALYSIS DATE: 2022-10-07T09:13:22ZTTPS: T1222, T1053, T1005, T1081,...

Malware Analysis – smokeloader – 782995a03137a524e3568041ceba4fc4

October 7, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 782995a03137a524e3568041ceba4fc4SHA1: 8eef8e69d40d085aa00ba2e1e039cbfb71006a86ANALYSIS DATE: 2022-10-07T09:32:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 782995a03137a524e3568041ceba4fc4

October 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 782995a03137a524e3568041ceba4fc4SHA1: 8eef8e69d40d085aa00ba2e1e039cbfb71006a86ANALYSIS DATE: 2022-10-07T09:30:51ZTTPS:...

Malware Analysis – djvu – 402a9ad95603a61734fb4930fdd5b6ef

October 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 402a9ad95603a61734fb4930fdd5b6efSHA1: a4849d63327bc943e5999a37dad4f87000c7f022ANALYSIS DATE: 2022-10-07T09:56:18ZTTPS: T1012, T1082, T1053, T1005,...

Malware Analysis – djvu – e2c04ff0f6965a5cc683a982a199a025

October 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: e2c04ff0f6965a5cc683a982a199a025SHA1: 12a3c1b0d25a35a9042590f657ba70fbd3e95130ANALYSIS DATE: 2022-10-07T09:42:45ZTTPS: T1012, T1082, T1060, T1112,...

Malware Analysis – smokeloader – 72b054d5ea096ec65e7f765a8bddcedc

October 7, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 72b054d5ea096ec65e7f765a8bddcedcSHA1: 0b2a87ffca78fbf6e7341390c864fc3dc3136192ANALYSIS DATE: 2022-10-07T10:01:06ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – amadey – 72b054d5ea096ec65e7f765a8bddcedc

October 7, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 72b054d5ea096ec65e7f765a8bddcedcSHA1: 0b2a87ffca78fbf6e7341390c864fc3dc3136192ANALYSIS DATE:...

Malware Analysis – smokeloader – 890e8e2011fc7a98a91d27746288d45b

October 7, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 890e8e2011fc7a98a91d27746288d45bSHA1: 98ec5e6e52963f34b96d7d889cab724125419a93ANALYSIS DATE: 2022-10-07T02:02:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 890e8e2011fc7a98a91d27746288d45b

October 7, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 890e8e2011fc7a98a91d27746288d45bSHA1: 98ec5e6e52963f34b96d7d889cab724125419a93ANALYSIS DATE: 2022-10-07T02:04:25ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 890e8e2011fc7a98a91d27746288d45b

October 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, collection, discovery, persistence, ransomware, spyware, stealerMD5: 890e8e2011fc7a98a91d27746288d45bSHA1: 98ec5e6e52963f34b96d7d889cab724125419a93ANALYSIS DATE: 2022-10-07T02:06:39ZTTPS: T1102, T1012, T1120,...

Malware Analysis – djvu – 1d0ec78f9be7ee4a512f894d3f0be3cc

October 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 1d0ec78f9be7ee4a512f894d3f0be3ccSHA1: 7cdf3682f9937e87299173f01f7d262eb11e0ac6ANALYSIS DATE: 2022-10-07T02:32:08ZTTPS: T1060, T1112, T1222, T1082,...

Malware Analysis – djvu – 925d49af178b98a12118f93c8a82422d

October 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 925d49af178b98a12118f93c8a82422dSHA1: cbeff9068bfe1f440053f42484af914962e58c40ANALYSIS DATE: 2022-10-07T02:19:23ZTTPS: T1060, T1112, T1222, T1012,...

Malware Analysis – djvu – 95f7ca058006800e6d0db8190b5bbc23

October 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 95f7ca058006800e6d0db8190b5bbc23SHA1: 00e8525af59c61354ca37c5847200f9a5b294ceaANALYSIS DATE: 2022-10-07T03:20:28ZTTPS: T1222, T1082, T1053, T1012,...

Malware Analysis – djvu – 30a3128f9027608e605a7bc649368072

October 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 30a3128f9027608e605a7bc649368072SHA1: 0a75b16d5c953bd13441dad69bd68a91410c3f3cANALYSIS DATE: 2022-10-07T03:27:25ZTTPS: T1012, T1060, T1112, T1222,...

Malware Analysis – dcrat – 9c9891d87460cd4e2074c0e21998ef52

October 7, 2022

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, family:djvu, family:raccoon, family:smokeloader, family:vidar, botnet:517, botnet:884d084df0d90657bc52b99e12a5611c, backdoor, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealer,...

Malware Analysis – blackbasta – 6d5b9675b68bac95b885b4bb294134a1

October 7, 2022

Score: 10 MALWARE FAMILY: blackbastaTAGS:family:blackbasta, evasion, ransomwareMD5: 6d5b9675b68bac95b885b4bb294134a1SHA1: 74dbf463be3139a28d9851b3b80c2ecac3e56304ANALYSIS DATE: 2022-10-07T03:40:04ZTTPS: T1490, T1491, T1112, T1082, T1107 ScoreMeaningExample10Known badA malware family...

Malware Analysis

Malware Analysis – smokeloader – e750ebffa7143be9bb3aece8edea96ce

Malware Analysis – smokeloader – 9d9da4319e0fff70db698857b74a797e

Malware Analysis – djvu – 9d9da4319e0fff70db698857b74a797e

Malware Analysis – djvu – ffa9434c90b194b32d5ec9ad565ac875

Malware Analysis – djvu – 0c46d0619219da90a35d94bcf4d7e094

Malware Analysis – smokeloader – 0c46d0619219da90a35d94bcf4d7e094

Malware Analysis – djvu – f456b83895119b2e6aca1422df7aa11b

Malware Analysis – djvu – 79afe5212a85f53a83ec1cf4d3ef1cb1

Malware Analysis – djvu – 573d5adbc8aa739642ae36bedfcbcc0b

Malware Analysis – smokeloader – 782995a03137a524e3568041ceba4fc4

Malware Analysis – djvu – 782995a03137a524e3568041ceba4fc4

Malware Analysis – djvu – 402a9ad95603a61734fb4930fdd5b6ef

Malware Analysis – djvu – e2c04ff0f6965a5cc683a982a199a025

Malware Analysis – smokeloader – 72b054d5ea096ec65e7f765a8bddcedc

Malware Analysis – amadey – 72b054d5ea096ec65e7f765a8bddcedc

Malware Analysis – smokeloader – 890e8e2011fc7a98a91d27746288d45b

Malware Analysis – smokeloader – 890e8e2011fc7a98a91d27746288d45b

Malware Analysis – djvu – 890e8e2011fc7a98a91d27746288d45b

Malware Analysis – djvu – 1d0ec78f9be7ee4a512f894d3f0be3cc

Malware Analysis – djvu – 925d49af178b98a12118f93c8a82422d

Malware Analysis – djvu – 95f7ca058006800e6d0db8190b5bbc23

Malware Analysis – djvu – 30a3128f9027608e605a7bc649368072

Malware Analysis – dcrat – 9c9891d87460cd4e2074c0e21998ef52

Malware Analysis – blackbasta – 6d5b9675b68bac95b885b4bb294134a1

Cobalt Strike Beacon Detected – 121[.]43[.]37[.]134:4434

Cobalt Strike Beacon Detected – 119[.]29[.]231[.]118:443

Cobalt Strike Beacon Detected – 39[.]101[.]74[.]162:443

Cobalt Strike Beacon Detected – 8[.]218[.]112[.]112:8880

Cobalt Strike Beacon Detected – 47[.]109[.]48[.]57:443

You may have missed