Malware Analysis

Malware Analysis – banker – a5dd75a7cc6640fe1be9323929dd5d00

March 18, 2023

Score: 8 MALWARE FAMILY: bankerTAGS:banker, evasion, ransomwareMD5: a5dd75a7cc6640fe1be9323929dd5d00SHA1: cc84b198042a7b6dee0448bfe92ca01f44815fe5ANALYSIS DATE: 2023-03-18T18:08:26ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – 778d2e97d2a7cc562fa58a9513eefdeb

March 18, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: 778d2e97d2a7cc562fa58a9513eefdebSHA1: 17fa33d8f906c419e727a8f897006a935b4ed2d8ANALYSIS DATE: 2023-03-18T18:53:05ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – smokeloader – e6652c1511ede9dfebfb0df34f969b45

March 18, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: e6652c1511ede9dfebfb0df34f969b45SHA1: 9afcff5870833214744feba664de65a14d824bc6ANALYSIS DATE: 2023-03-18T18:49:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 83c2df30653a05c396fe3ec54d40c136

March 18, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: 83c2df30653a05c396fe3ec54d40c136SHA1: d011e9ddb6dd044cab5aee2630b5904e72b87c04ANALYSIS DATE: 2023-03-18T18:50:03ZTTPS: T1005, T1081, T1130, T1112,...

Malware Analysis – djvu – 1830f8b1c1f66b27314673f8a42fdd57

March 18, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: 1830f8b1c1f66b27314673f8a42fdd57SHA1: cfab9bce032baf7292c23f1c928898d151d2f03eANALYSIS DATE: 2023-03-18T18:51:05ZTTPS: T1130, T1112, T1053, T1012,...

Malware Analysis – gafgyt – bb5ac3218b68aec33e16261196971d7f

March 17, 2023

Score: 10 MALWARE FAMILY: gafgytTAGS:family:gafgyt, family:plugx, family:redline, botnet, discovery, exploit, infostealer, persistence, trojanMD5: bb5ac3218b68aec33e16261196971d7fSHA1: 7df56150a22016e079c4b3e3a45446bffc2fcd9eANALYSIS DATE: 2023-03-17T16:30:04ZTTPS: T1082, T1050, T1060,...

Malware Analysis – djvu – 68b0f16d837d77eb7edb40ade07b3844

March 17, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: 68b0f16d837d77eb7edb40ade07b3844SHA1: e235b7725b1c1e5c7162f0010a7db46073b80040ANALYSIS DATE: 2023-03-17T16:15:06ZTTPS: T1060, T1112, T1012, T1082,...

Malware Analysis – djvu – ce3b3de5f62d393aeebd49c31bd29d41

March 17, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: ce3b3de5f62d393aeebd49c31bd29d41SHA1: 154ab2adc0f1921e0a2d6956e33d980e921a901fANALYSIS DATE: 2023-03-17T16:11:34ZTTPS: T1222, T1012, T1082, T1053,...

Malware Analysis – smokeloader – 3e59d07d7af4a0b0314ffcbff5fd12d8

March 17, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 3e59d07d7af4a0b0314ffcbff5fd12d8SHA1: fc32ffaf265d7b38adc59092c967babf1fd92baaANALYSIS DATE: 2023-03-17T17:31:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – amadey – 06c1e142d1c9f438103774ec50d9b348

March 17, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:rhadamanthys, family:smokeloader, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, botnet:pub1, botnet:sprg, backdoor, discovery, persistence, ransomware, spyware, stealer, trojanMD5: 06c1e142d1c9f438103774ec50d9b348SHA1:...

Malware Analysis – ransomware – 3b56fee645b36a022471189294485517

March 17, 2023

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 3b56fee645b36a022471189294485517SHA1: 90138e3902b096a89b03271ea664ccc6193b766cANALYSIS DATE: 2023-03-17T17:07:14ZTTPS: T1005, T1081, T1491, T1112, T1082 ScoreMeaningExample10Known badA malware family...

Malware Analysis – discovery – 7a42e24c7b1607887a49e5929d38f8f9

March 17, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 7a42e24c7b1607887a49e5929d38f8f9SHA1: 41f9462a8182758714761a839664f69d9d2c3b7eANALYSIS DATE: 2023-03-17T17:26:40ZTTPS: T1060, T1112, T1012, T1042, T1082, T1130 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 26551b9c3dbace2dd837828f85d078bd

March 17, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: 26551b9c3dbace2dd837828f85d078bdSHA1: 52ca324a5cf64db3586f4b2d5f9607144b044c74ANALYSIS DATE: 2023-03-17T17:50:19ZTTPS: T1012, T1222, T1082, T1053,...

Malware Analysis – ransomware – 2e7a4354b997f086db89e1a28ca60816

March 17, 2023

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 2e7a4354b997f086db89e1a28ca60816SHA1: ee98de0cbeefd9df93c364719b2ae69696f32382ANALYSIS DATE: 2023-03-17T18:12:54ZTTPS: T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – bea14d484e11b88a5a1f76233f52f732

March 17, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: bea14d484e11b88a5a1f76233f52f732SHA1: 0c391495bc75c4926b52b14fdd27bd3f7e410911ANALYSIS DATE: 2023-03-17T17:52:32ZTTPS: T1222, T1060, T1112, T1005,...

Malware Analysis – amadey – a480e4bf51162bfd63ed718149a4a608

March 17, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:rhadamanthys, family:smokeloader, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, botnet:pub1, botnet:sprg, backdoor, discovery, persistence, ransomware, stealer, trojanMD5: a480e4bf51162bfd63ed718149a4a608SHA1: 16b9d95ce72eceef41e51df9c30c1f84e63d9d72ANALYSIS...

Malware Analysis – amadey – 0467ee15f3d5c79b87072154404b778a

March 16, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:laplas, family:redline, family:smokeloader, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, botnet:fronx2, botnet:pub1, botnet:sprg, backdoor, clipper, discovery, infostealer, persistence, ransomware,...

Malware Analysis – djvu – 4b8dcfeef9843f465a21b69037359414

March 16, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: 4b8dcfeef9843f465a21b69037359414SHA1: cedd04d7d3f268b1486ee6096f2fdcc22e20d735ANALYSIS DATE: 2023-03-16T16:45:21ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – amadey – a6ffaf58c5eecf62f76e64c7ce96579f

March 16, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, botnet:pub1, backdoor, discovery, ransomware, trojanMD5: a6ffaf58c5eecf62f76e64c7ce96579fSHA1: 2f0f6319c08605806a6df43b63b40fec14b7758bANALYSIS DATE: 2023-03-16T16:42:16ZTTPS: T1222, T1053, T1012, T1120,...

Malware Analysis – – dbbc0d7f0ac1d363548616251b0c8f6c

March 16, 2023

Score: 3 MALWARE FAMILY: TAGS:MD5: dbbc0d7f0ac1d363548616251b0c8f6cSHA1: a6d28f3d947cf26f88b20ac032ea7e3b754fe508ANALYSIS DATE: 2023-03-16T17:23:34ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – 35063fae0b2c07ddb96fddb698593b45

March 16, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: 35063fae0b2c07ddb96fddb698593b45SHA1: 02051cec2bdcb1634fb9ef431eead11261a633c6ANALYSIS DATE: 2023-03-16T16:20:58ZTTPS: T1060, T1112, T1012, T1082,...

Malware Analysis – djvu – b2a6dcdbb027343c7aefda146dd888a5

March 16, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:d6ef050131e7d5a1d595c51613328971, discovery, persistence, ransomware, spyware, stealerMD5: b2a6dcdbb027343c7aefda146dd888a5SHA1: 13bfb61fefba74c6313b3806793a461542efe0dfANALYSIS DATE: 2023-03-16T18:39:07ZTTPS: T1060, T1112, T1012, T1082,...

Malware Analysis – discovery – ccaffcd12dcb30adb5250f30026ecd1e

March 16, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, exploitMD5: ccaffcd12dcb30adb5250f30026ecd1eSHA1: 4048dc71db497f641a4f35eb00ac3c163c394978ANALYSIS DATE: 2023-03-16T17:44:04ZTTPS: T1112, T1222, T1012, T1031, T1562, T1489, T1053 ScoreMeaningExample10Known badA...

Malware Analysis – evasion – 3a245c6a62a254788fc36022f50f07f2

March 16, 2023

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 3a245c6a62a254788fc36022f50f07f2SHA1: e281e9f8bffb4b94b06253b007a3e84814faa276ANALYSIS DATE: 2023-03-16T17:30:30ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis

Malware Analysis – banker – a5dd75a7cc6640fe1be9323929dd5d00

Malware Analysis – djvu – 778d2e97d2a7cc562fa58a9513eefdeb

Malware Analysis – smokeloader – e6652c1511ede9dfebfb0df34f969b45

Malware Analysis – djvu – 83c2df30653a05c396fe3ec54d40c136

Malware Analysis – djvu – 1830f8b1c1f66b27314673f8a42fdd57

Malware Analysis – gafgyt – bb5ac3218b68aec33e16261196971d7f

Malware Analysis – djvu – 68b0f16d837d77eb7edb40ade07b3844

Malware Analysis – djvu – ce3b3de5f62d393aeebd49c31bd29d41

Malware Analysis – smokeloader – 3e59d07d7af4a0b0314ffcbff5fd12d8

Malware Analysis – amadey – 06c1e142d1c9f438103774ec50d9b348

Malware Analysis – ransomware – 3b56fee645b36a022471189294485517

Malware Analysis – discovery – 7a42e24c7b1607887a49e5929d38f8f9

Malware Analysis – djvu – 26551b9c3dbace2dd837828f85d078bd

Malware Analysis – ransomware – 2e7a4354b997f086db89e1a28ca60816

Malware Analysis – djvu – bea14d484e11b88a5a1f76233f52f732

Malware Analysis – amadey – a480e4bf51162bfd63ed718149a4a608

Malware Analysis – amadey – 0467ee15f3d5c79b87072154404b778a

Malware Analysis – djvu – 4b8dcfeef9843f465a21b69037359414

Malware Analysis – amadey – a6ffaf58c5eecf62f76e64c7ce96579f

Malware Analysis – – dbbc0d7f0ac1d363548616251b0c8f6c

Malware Analysis – djvu – 35063fae0b2c07ddb96fddb698593b45

Malware Analysis – djvu – b2a6dcdbb027343c7aefda146dd888a5

Malware Analysis – discovery – ccaffcd12dcb30adb5250f30026ecd1e

Malware Analysis – evasion – 3a245c6a62a254788fc36022f50f07f2

Cobalt Strike Beacon Detected – 121[.]43[.]37[.]134:4434

Cobalt Strike Beacon Detected – 119[.]29[.]231[.]118:443

Cobalt Strike Beacon Detected – 39[.]101[.]74[.]162:443

Cobalt Strike Beacon Detected – 8[.]218[.]112[.]112:8880

Cobalt Strike Beacon Detected – 47[.]109[.]48[.]57:443

You may have missed