Malware Analysis

Malware Analysis – smokeloader – 3515b1f929c1143764fc8243e94cd9a1

March 11, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 3515b1f929c1143764fc8243e94cd9a1SHA1: a7724b75b5dc54d69fd568614a601dab31321cd8ANALYSIS DATE: 2023-03-11T15:37:32ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 565255248ac5173c85d3e37dd93c9da6

March 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 565255248ac5173c85d3e37dd93c9da6SHA1: dd8e1b95db664a4c2223f8c926967167d7801221ANALYSIS DATE: 2023-03-11T15:05:26ZTTPS: T1222, T1005, T1081, T1012,...

Malware Analysis – djvu – 5ef6d0054454a4b73abc91f68cd7b2e3

March 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 5ef6d0054454a4b73abc91f68cd7b2e3SHA1: 20ca9e635d05426c9b61130161fe882f92236cf9ANALYSIS DATE: 2023-03-11T15:51:09ZTTPS: T1222, T1005, T1081, T1082,...

Malware Analysis – smokeloader – 104d5c4fcc1354becfae10ce09f0fb24

March 11, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 104d5c4fcc1354becfae10ce09f0fb24SHA1: 971ab0be3950346706add04bad69028a641355a1ANALYSIS DATE: 2023-03-11T15:44:16ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 5a92c380094b8168ae2a6b2216a0053c

March 11, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 5a92c380094b8168ae2a6b2216a0053cSHA1: 7b2b731df7a4b6e4ede438cc742d0aa43010b2daANALYSIS DATE: 2023-03-11T15:44:15ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – a54e2410ede6d7e2b5c09d71f82bce2a

March 11, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: a54e2410ede6d7e2b5c09d71f82bce2aSHA1: 284fcca666ea40c49d6037b09c8cb5675c63e356ANALYSIS DATE: 2023-03-11T15:44:47ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – avaddon – 9f0f396edd98f347ba72634814d9958e

March 11, 2023

Score: 10 MALWARE FAMILY: avaddonTAGS:family:avaddon, evasion, persistence, ransomware, trojanMD5: 9f0f396edd98f347ba72634814d9958eSHA1: 334b98749279e793ea861ec4e868101314077592ANALYSIS DATE: 2023-03-11T15:54:45ZTTPS: T1082, T1088, T1089, T1112, T1130, T1012, T1120,...

Malware Analysis – avaddon – a071fce53e2bf9fb9a2db5ce91c511ef

March 11, 2023

Score: 10 MALWARE FAMILY: avaddonTAGS:family:avaddon, evasion, persistence, ransomware, trojanMD5: a071fce53e2bf9fb9a2db5ce91c511efSHA1: addf8230e78fa84c8b9c1b3bac4162a82e6421b4ANALYSIS DATE: 2023-03-11T15:54:43ZTTPS: T1082, T1107, T1490, T1088, T1089, T1112, T1012,...

Malware Analysis – avaddon – 8f51096756e54fda6bedd87f3d5d8a6d

March 11, 2023

Score: 10 MALWARE FAMILY: avaddonTAGS:family:avaddon, evasion, persistence, ransomware, trojanMD5: 8f51096756e54fda6bedd87f3d5d8a6dSHA1: 77a16be6841337b467e9b27f33e0e30decda0e92ANALYSIS DATE: 2023-03-11T15:54:46ZTTPS: T1082, T1088, T1089, T1112, T1060, T1107, T1490,...

Malware Analysis – avaddon – 5ea6f26b734ba366c801dbc4bef0ad28

March 11, 2023

Score: 10 MALWARE FAMILY: avaddonTAGS:family:avaddon, evasion, ransomware, trojanMD5: 5ea6f26b734ba366c801dbc4bef0ad28SHA1: 232ce5cb35b9c930da0cfcb07d074aecd8f30a28ANALYSIS DATE: 2023-03-11T15:54:44ZTTPS: T1107, T1490, T1082, T1012, T1120, T1088, T1089, T1112...

Malware Analysis – avaddon – 145cb17599f245058b5fd7fccb6f0d8a

March 11, 2023

Score: 10 MALWARE FAMILY: avaddonTAGS:family:avaddon, evasion, ransomware, trojanMD5: 145cb17599f245058b5fd7fccb6f0d8aSHA1: 4ebfef558949f71b78efd9a874951cac799ecbb3ANALYSIS DATE: 2023-03-11T15:54:53ZTTPS: T1082, T1088, T1089, T1112, T1107, T1490, T1012, T1120...

Malware Analysis – avaddon – 93130b2a1f14c0518e7320a9e9802807

March 11, 2023

Score: 10 MALWARE FAMILY: avaddonTAGS:family:avaddon, evasion, persistence, ransomware, trojanMD5: 93130b2a1f14c0518e7320a9e9802807SHA1: 10ea43cae274915aa0a42b16a8485a90962139f7ANALYSIS DATE: 2023-03-11T15:54:49ZTTPS: T1088, T1089, T1112, T1107, T1490, T1082, T1012,...

Malware Analysis – avaddon – 37c880cd7d92ba4201db8985971bcf98

March 11, 2023

Score: 10 MALWARE FAMILY: avaddonTAGS:family:avaddon, evasion, persistence, ransomware, trojanMD5: 37c880cd7d92ba4201db8985971bcf98SHA1: 80704180991ff9b493da78032ea071b2d3221ec1ANALYSIS DATE: 2023-03-11T15:54:50ZTTPS: T1112, T1060, T1082, T1088, T1089, T1107, T1490,...

Malware Analysis – djvu – b036716c3f9ac55b6474de4aba85fd94

March 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: b036716c3f9ac55b6474de4aba85fd94SHA1: f7bd8dc2b12e6d7125d66abd41cc22705ed78971ANALYSIS DATE: 2023-03-11T16:14:04ZTTPS: T1130, T1112, T1053, T1005,...

Malware Analysis – djvu – 77aaf1d9fe73f9e880fc692d1d410029

March 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 77aaf1d9fe73f9e880fc692d1d410029SHA1: 6dc62a2cd2079e9a32137471778ae7e46cc54d46ANALYSIS DATE: 2023-03-11T16:41:20ZTTPS: T1012, T1082, T1060, T1112,...

Malware Analysis – evasion – bd4787c247bf809d94d3b16d5243730c

March 11, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomware, trojanMD5: bd4787c247bf809d94d3b16d5243730cSHA1: 789066dd4e4187e5d0a5ea3c2166970bcbfe2ab8ANALYSIS DATE: 2023-03-11T16:35:59ZTTPS: T1088, T1089, T1112, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 5a97dead64d220f172b81f4d9de2a6c3

March 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 5a97dead64d220f172b81f4d9de2a6c3SHA1: 0b704f55ae59306c6b49916114d8bef6f5192c66ANALYSIS DATE: 2023-03-11T16:40:36ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – chaos – f5b62c5b6c334b0384ec26decc67ee1d

March 11, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, ransomware, spyware, stealerMD5: f5b62c5b6c334b0384ec26decc67ee1dSHA1: 84ed720f8a90a0c33454016a618c071f680c0dc1ANALYSIS DATE: 2023-03-11T16:41:19ZTTPS: T1490, T1059, T1107, T1012, T1491, T1112, T1082,...

Malware Analysis – chaos – 5e9e6b90b530260d1f6dd462a9a2fa16

March 11, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, ransomware, spyware, stealerMD5: 5e9e6b90b530260d1f6dd462a9a2fa16SHA1: 3caa6e6d2aed85b9ea046a077a972c2a1718ee7bANALYSIS DATE: 2023-03-11T16:45:07ZTTPS: T1490, T1059, T1107, T1082, T1012, T1005, T1081...

Malware Analysis – dharma – a0dd1dfbac4b2aaed94b2065a9c9f30c

March 11, 2023

Score: 10 MALWARE FAMILY: dharmaTAGS:family:dharma, persistence, ransomware, spyware, stealerMD5: a0dd1dfbac4b2aaed94b2065a9c9f30cSHA1: b797000407eb333dc80777dd088204179b62fb5cANALYSIS DATE: 2023-03-11T16:46:30ZTTPS: T1107, T1490, T1112, T1060, T1005, T1081, T1082...

Malware Analysis – phobos – de3118d4369fddeedf5272011350476c

March 11, 2023

Score: 10 MALWARE FAMILY: phobosTAGS:family:phobos, evasion, persistence, ransomware, spyware, stealerMD5: de3118d4369fddeedf5272011350476cSHA1: f04db253158efe0aa9427e61b7b62ae4a4373660ANALYSIS DATE: 2023-03-11T16:53:04ZTTPS: T1490, T1059, T1107, T1060, T1112, T1005,...

Malware Analysis – lockbit – 927426bafb84fe8daff84cff77258e0d

March 11, 2023

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, ransomware, spyware, stealerMD5: 927426bafb84fe8daff84cff77258e0dSHA1: 320a91f6b810e4f5dbb38f58fd2949c780d4c807ANALYSIS DATE: 2023-03-11T16:44:08ZTTPS: T1005, T1081, T1012, T1082, T1491, T1112 ScoreMeaningExample10Known badA...

Malware Analysis – discovery – 2316091f02153ac20dff768513aae1a4

March 11, 2023

Score: 9 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 2316091f02153ac20dff768513aae1a4SHA1: 6b7b1017b9313ab87fccf4ea08a427c1499b89dcANALYSIS DATE: 2023-03-11T16:57:16ZTTPS: T1107, T1490, T1112, T1012, T1120, T1082, T1060, T1222 ScoreMeaningExample10Known...

Malware Analysis – evasion – cec36706e3491210f6fe29a415ade419

March 11, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomware, trojanMD5: cec36706e3491210f6fe29a415ade419SHA1: a6c5246e86fd9bc90f0805236b1676ae5228398fANALYSIS DATE: 2023-03-11T17:06:03ZTTPS: T1012, T1082, T1107, T1490, T1088, T1089, T1112, T1053 ScoreMeaningExample10Known...

Malware Analysis

Malware Analysis – smokeloader – 3515b1f929c1143764fc8243e94cd9a1

Malware Analysis – djvu – 565255248ac5173c85d3e37dd93c9da6

Malware Analysis – djvu – 5ef6d0054454a4b73abc91f68cd7b2e3

Malware Analysis – smokeloader – 104d5c4fcc1354becfae10ce09f0fb24

Malware Analysis – smokeloader – 5a92c380094b8168ae2a6b2216a0053c

Malware Analysis – smokeloader – a54e2410ede6d7e2b5c09d71f82bce2a

Malware Analysis – avaddon – 9f0f396edd98f347ba72634814d9958e

Malware Analysis – avaddon – a071fce53e2bf9fb9a2db5ce91c511ef

Malware Analysis – avaddon – 8f51096756e54fda6bedd87f3d5d8a6d

Malware Analysis – avaddon – 5ea6f26b734ba366c801dbc4bef0ad28

Malware Analysis – avaddon – 145cb17599f245058b5fd7fccb6f0d8a

Malware Analysis – avaddon – 93130b2a1f14c0518e7320a9e9802807

Malware Analysis – avaddon – 37c880cd7d92ba4201db8985971bcf98

Malware Analysis – djvu – b036716c3f9ac55b6474de4aba85fd94

Malware Analysis – djvu – 77aaf1d9fe73f9e880fc692d1d410029

Malware Analysis – evasion – bd4787c247bf809d94d3b16d5243730c

Malware Analysis – djvu – 5a97dead64d220f172b81f4d9de2a6c3

Malware Analysis – chaos – f5b62c5b6c334b0384ec26decc67ee1d

Malware Analysis – chaos – 5e9e6b90b530260d1f6dd462a9a2fa16

Malware Analysis – dharma – a0dd1dfbac4b2aaed94b2065a9c9f30c

Malware Analysis – phobos – de3118d4369fddeedf5272011350476c

Malware Analysis – lockbit – 927426bafb84fe8daff84cff77258e0d

Malware Analysis – discovery – 2316091f02153ac20dff768513aae1a4

Malware Analysis – evasion – cec36706e3491210f6fe29a415ade419

Cobalt Strike Beacon Detected – 121[.]43[.]37[.]134:4434

Cobalt Strike Beacon Detected – 119[.]29[.]231[.]118:443

Cobalt Strike Beacon Detected – 39[.]101[.]74[.]162:443

Cobalt Strike Beacon Detected – 8[.]218[.]112[.]112:8880

Cobalt Strike Beacon Detected – 47[.]109[.]48[.]57:443

You may have missed