Malware Analysis

Malware Analysis – chaos – fbd7e50091e64349827d1a62947ce042

October 7, 2022

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, ransomwareMD5: fbd7e50091e64349827d1a62947ce042SHA1: 22db7cddf60c5eadeedafc4ce7f27530a06899f4ANALYSIS DATE: 2022-10-07T03:40:04ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – smokeloader – 9c9891d87460cd4e2074c0e21998ef52

October 7, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 9c9891d87460cd4e2074c0e21998ef52SHA1: e51b3200b7967890d25fb00b00b730f373dce7ffANALYSIS DATE: 2022-10-07T03:32:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – blackbasta – 6d5b9675b68bac95b885b4bb294134a1

October 7, 2022

Score: 10 MALWARE FAMILY: blackbastaTAGS:family:blackbasta, evasion, ransomwareMD5: 6d5b9675b68bac95b885b4bb294134a1SHA1: 74dbf463be3139a28d9851b3b80c2ecac3e56304ANALYSIS DATE: 2022-10-07T03:42:04ZTTPS: T1490, T1082, T1012, T1107, T1491, T1112 ScoreMeaningExample10Known badA malware...

Malware Analysis – blackbasta – c115bbbdb1a61f8c553d74802bfd78fb

October 7, 2022

Score: 10 MALWARE FAMILY: blackbastaTAGS:family:blackbasta, ransomwareMD5: c115bbbdb1a61f8c553d74802bfd78fbSHA1: 1f439569e3c1c14ea9f02235f8f45c49e2764160ANALYSIS DATE: 2022-10-07T03:42:52ZTTPS: T1107, T1490, T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – blackbasta – c115bbbdb1a61f8c553d74802bfd78fb

October 7, 2022

Score: 10 MALWARE FAMILY: blackbastaTAGS:family:blackbasta, persistence, ransomwareMD5: c115bbbdb1a61f8c553d74802bfd78fbSHA1: 1f439569e3c1c14ea9f02235f8f45c49e2764160ANALYSIS DATE: 2022-10-07T03:45:26ZTTPS: T1012, T1082, T1060, T1112, T1107, T1490, T1491 ScoreMeaningExample10Known badA...

Malware Analysis – blackbasta – c115bbbdb1a61f8c553d74802bfd78fb

October 7, 2022

Score: 10 MALWARE FAMILY: blackbastaTAGS:family:blackbasta, ransomwareMD5: c115bbbdb1a61f8c553d74802bfd78fbSHA1: 1f439569e3c1c14ea9f02235f8f45c49e2764160ANALYSIS DATE: 2022-10-07T03:40:04ZTTPS: T1107, T1490, T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 6747e6c476e9a424f200ab855a7e608a

October 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 6747e6c476e9a424f200ab855a7e608aSHA1: e3a8b85e2ef091416bbf72f9384257bb6fc97653ANALYSIS DATE: 2022-10-07T04:38:59ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – djvu – dfcb8ba262be97d0c87031c6c8cd4abb

October 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: dfcb8ba262be97d0c87031c6c8cd4abbSHA1: fca9b0f065baced918451eaabf4779505ea81bd3ANALYSIS DATE: 2022-10-07T04:20:55ZTTPS: T1053, T1012, T1082, T1060,...

Malware Analysis – dcrat – 14309ebba0bb552a9bbbf640301313ed

October 7, 2022

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, family:djvu, family:raccoon, family:smokeloader, family:vidar, botnet:517, botnet:884d084df0d90657bc52b99e12a5611c, backdoor, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealer,...

Malware Analysis – smokeloader – 14309ebba0bb552a9bbbf640301313ed

October 7, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 14309ebba0bb552a9bbbf640301313edSHA1: 104e44044325cc19415232de78e0146e45ef17c4ANALYSIS DATE: 2022-10-07T04:31:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – a64d49b747d1ae2346f8c4e47f75d990

October 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojanMD5: a64d49b747d1ae2346f8c4e47f75d990SHA1: 1a127cbb2996ab256afeda3773571b90f61b1c2aANALYSIS DATE: 2022-10-06T20:01:45ZTTPS:...

Malware Analysis – djvu – 5ec6d8582f6ab8401fe667bc22ed639f

October 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 5ec6d8582f6ab8401fe667bc22ed639fSHA1: f51d073d99e98f0b23595738b927775fd72e9116ANALYSIS DATE: 2022-10-06T20:00:19ZTTPS: T1053, T1005, T1081, T1222,...

Malware Analysis – ransomware – 49143739704f7d2cb081f787241a5e6b

October 7, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 49143739704f7d2cb081f787241a5e6bSHA1: a7ca5e122c496ec9d605cca95ba93f5fabae4c44ANALYSIS DATE: 2022-10-06T20:11:06ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – smokeloader – a64d49b747d1ae2346f8c4e47f75d990

October 7, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: a64d49b747d1ae2346f8c4e47f75d990SHA1: 1a127cbb2996ab256afeda3773571b90f61b1c2aANALYSIS DATE: 2022-10-06T20:02:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – a64d49b747d1ae2346f8c4e47f75d990

October 7, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: a64d49b747d1ae2346f8c4e47f75d990SHA1: 1a127cbb2996ab256afeda3773571b90f61b1c2aANALYSIS DATE: 2022-10-06T20:02:29ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 2af5fb4795f72a7e4d2d482f3de56203

October 7, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 2af5fb4795f72a7e4d2d482f3de56203SHA1: 3bd374109ebcd348321b351edd53bac2e3b809bfANALYSIS DATE: 2022-10-06T20:11:05ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – smokeloader – f1ec441f31d57ce6c855b027fbeb3da2

October 7, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: f1ec441f31d57ce6c855b027fbeb3da2SHA1: a6a0eaaa5ff49e19caf3657cd87713558c113da0ANALYSIS DATE: 2022-10-06T21:31:37ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 85e1f46bf518f778cb08158b25d0083d

October 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 85e1f46bf518f778cb08158b25d0083dSHA1: d64d8cd462d6126cabf44ce0d990ebc5e5c3a33dANALYSIS DATE: 2022-10-06T21:42:27ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – smokeloader – f1ec441f31d57ce6c855b027fbeb3da2

October 7, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: f1ec441f31d57ce6c855b027fbeb3da2SHA1: a6a0eaaa5ff49e19caf3657cd87713558c113da0ANALYSIS DATE: 2022-10-06T21:31:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – a26018cd2c37af036be7813691de7b0c

October 7, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: a26018cd2c37af036be7813691de7b0cSHA1: 9a45302f1c3bdebf51ee43cfa4cb6ae04fcf39f4ANALYSIS DATE: 2022-10-06T20:11:06ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – d80e037ba92c84639f67d82e625362c1

October 7, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: d80e037ba92c84639f67d82e625362c1SHA1: 95e0c5169e1828f47ae21d11c9a605e4f27e93bcANALYSIS DATE: 2022-10-06T22:13:19ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – dcrat – f1ec441f31d57ce6c855b027fbeb3da2

October 7, 2022

Malware Analysis – dcrat – 2cef6f29fb5ace1adc062e403a3fb65b

October 7, 2022

Malware Analysis – smokeloader – 2cef6f29fb5ace1adc062e403a3fb65b

October 7, 2022

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 2cef6f29fb5ace1adc062e403a3fb65bSHA1: febe262e803779050710a958d569a28371ccdaf6ANALYSIS DATE: 2022-10-06T22:32:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis

Malware Analysis – chaos – fbd7e50091e64349827d1a62947ce042

Malware Analysis – smokeloader – 9c9891d87460cd4e2074c0e21998ef52

Malware Analysis – blackbasta – 6d5b9675b68bac95b885b4bb294134a1

Malware Analysis – blackbasta – c115bbbdb1a61f8c553d74802bfd78fb

Malware Analysis – blackbasta – c115bbbdb1a61f8c553d74802bfd78fb

Malware Analysis – blackbasta – c115bbbdb1a61f8c553d74802bfd78fb

Malware Analysis – djvu – 6747e6c476e9a424f200ab855a7e608a

Malware Analysis – djvu – dfcb8ba262be97d0c87031c6c8cd4abb

Malware Analysis – dcrat – 14309ebba0bb552a9bbbf640301313ed

Malware Analysis – smokeloader – 14309ebba0bb552a9bbbf640301313ed

Malware Analysis – djvu – a64d49b747d1ae2346f8c4e47f75d990

Malware Analysis – djvu – 5ec6d8582f6ab8401fe667bc22ed639f

Malware Analysis – ransomware – 49143739704f7d2cb081f787241a5e6b

Malware Analysis – smokeloader – a64d49b747d1ae2346f8c4e47f75d990

Malware Analysis – smokeloader – a64d49b747d1ae2346f8c4e47f75d990

Malware Analysis – ransomware – 2af5fb4795f72a7e4d2d482f3de56203

Malware Analysis – smokeloader – f1ec441f31d57ce6c855b027fbeb3da2

Malware Analysis – djvu – 85e1f46bf518f778cb08158b25d0083d

Malware Analysis – smokeloader – f1ec441f31d57ce6c855b027fbeb3da2

Malware Analysis – ransomware – a26018cd2c37af036be7813691de7b0c

Malware Analysis – djvu – d80e037ba92c84639f67d82e625362c1

Malware Analysis – dcrat – f1ec441f31d57ce6c855b027fbeb3da2

Malware Analysis – dcrat – 2cef6f29fb5ace1adc062e403a3fb65b

Malware Analysis – smokeloader – 2cef6f29fb5ace1adc062e403a3fb65b

Cobalt Strike Beacon Detected – 121[.]43[.]37[.]134:4434

Cobalt Strike Beacon Detected – 119[.]29[.]231[.]118:443

Cobalt Strike Beacon Detected – 39[.]101[.]74[.]162:443

Cobalt Strike Beacon Detected – 8[.]218[.]112[.]112:8880

Cobalt Strike Beacon Detected – 47[.]109[.]48[.]57:443

You may have missed