Malware Analysis

Malware Analysis – smokeloader – bb0785cea59f398b48f378ecc18cc51a

March 11, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: bb0785cea59f398b48f378ecc18cc51aSHA1: 5cc2527d36f511f479be467d1f785832592f571fANALYSIS DATE: 2023-03-11T17:12:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – 2979ed84c4ca3deb2924bd1f26bf88bd

March 11, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 2979ed84c4ca3deb2924bd1f26bf88bdSHA1: 8f01f9112904389e0b53a25506ef69f99cc0fa1bANALYSIS DATE: 2023-03-11T16:58:05ZTTPS: T1222, T1107, T1490, T1012, T1120, T1082, T1060, T1112 ScoreMeaningExample10Known...

Malware Analysis – chaos – ba34b55b9b2031776fc958aef2d3bee1

March 11, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, ransomware, spyware, stealerMD5: ba34b55b9b2031776fc958aef2d3bee1SHA1: dad577c2667c6bb3930a8f3d95687d3a7f2dfca2ANALYSIS DATE: 2023-03-11T17:20:19ZTTPS: T1490, T1059, T1107, T1005, T1081, T1012, T1082,...

Malware Analysis – djvu – 3995219f721e211ddda920b74a4b4aa5

March 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 3995219f721e211ddda920b74a4b4aa5SHA1: 2c37c03bdab7e0b77b02c5e298cfe845bdff3096ANALYSIS DATE: 2023-03-11T17:53:59ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – persistence – f592e7faba96a23ee25ff25f3779f44f

March 11, 2023

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: f592e7faba96a23ee25ff25f3779f44fSHA1: 66656b81b43130ddd6774845c249700ffb06ceadANALYSIS DATE: 2023-03-11T17:20:04ZTTPS: T1060, T1112, T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – chaos – 23591c81d46ac87baf52184f72d5f475

March 11, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, ransomware, spyware, stealerMD5: 23591c81d46ac87baf52184f72d5f475SHA1: 11516bfd63450b217b38e916677e1346269e2d15ANALYSIS DATE: 2023-03-11T17:13:02ZTTPS: T1490, T1059, T1107, T1491, T1112, T1082, T1005,...

Malware Analysis – djvu – 85d1135dd2bb5d21ad16ce99e30d9696

March 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 85d1135dd2bb5d21ad16ce99e30d9696SHA1: 0b0fa3c027bf94fa88af705a6477d624c8a2735dANALYSIS DATE: 2023-03-11T09:12:23ZTTPS: T1005, T1081, T1012, T1060,...

Malware Analysis – – aa64fb557f18e0240ccb88532ec897db

March 11, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: aa64fb557f18e0240ccb88532ec897dbSHA1: e067b415bfbcbb4d5b218942cbe5eb57f64b023bANALYSIS DATE: 2023-03-11T09:37:11ZTTPS: T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – amadey – 9a2a7a1bf5fce12479673c598886e0eb

March 11, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:laplas, family:pseudomanuscrypt, family:redline, family:smokeloader, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, botnet:pub1, botnet:sprg, backdoor, clipper, discovery, infostealer, loader, persistence,...

Malware Analysis – djvu – 8525f75b65ad910ccd74c1a08d70efa8

March 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 8525f75b65ad910ccd74c1a08d70efa8SHA1: c230ffced0fe8e2122ed655b7331ad5e692b1490ANALYSIS DATE: 2023-03-11T09:24:10ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – amadey – fda35e2d619136257720ce6084fb58cd

March 11, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:laplas, family:smokeloader, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, botnet:pub1, botnet:sprg, backdoor, clipper, discovery, persistence, ransomware, spyware, stealer, trojanMD5:...

Malware Analysis – smokeloader – 5bf3877b8fd815085586d2de55398d00

March 11, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 5bf3877b8fd815085586d2de55398d00SHA1: c542cf69aee77009d8a4727e423a88900726979fANALYSIS DATE: 2023-03-11T11:01:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – 4a84df07dff0c3424bc90ce8d0938b06

March 11, 2023

Score: 5 MALWARE FAMILY: evasionTAGS:evasionMD5: 4a84df07dff0c3424bc90ce8d0938b06SHA1: b883da20bd85c49972b46c50db40589767dd201cANALYSIS DATE: 2023-03-11T10:58:22ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – e8dcd90463339d7a2c9f28cdea5fa8df

March 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: e8dcd90463339d7a2c9f28cdea5fa8dfSHA1: 215c67423859b770f595bb6b9ec46f392f8de7c0ANALYSIS DATE: 2023-03-11T10:33:59ZTTPS: T1082, T1012, T1005, T1081,...

Malware Analysis – djvu – cd9756f38524bab1b74b7c39db74c4b9

March 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: cd9756f38524bab1b74b7c39db74c4b9SHA1: 0a128916538431c21b9413f98119082bf21890aaANALYSIS DATE: 2023-03-11T11:02:20ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – djvu – 8e335bde5ed8b1c9f9f459074421901b

March 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 8e335bde5ed8b1c9f9f459074421901bSHA1: 1a6e47d0857208e0570b63d09532dde77494a816ANALYSIS DATE: 2023-03-11T11:11:02ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – djvu – 8e72f80f57f0a2061ed8707b4ae8bd0b

March 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 8e72f80f57f0a2061ed8707b4ae8bd0bSHA1: 067df8847a06e814faa9709ff132934f1bb954e5ANALYSIS DATE: 2023-03-11T11:11:02ZTTPS: T1005, T1081, T1060, T1112,...

Malware Analysis – djvu – da75c7fe6dca73c9e3df80dacf68d82e

March 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: da75c7fe6dca73c9e3df80dacf68d82eSHA1: 191d3ad1944f32f6beeb6194f006b3f21d0b5615ANALYSIS DATE: 2023-03-11T11:11:02ZTTPS: T1082, T1130, T1112, T1060,...

Malware Analysis – smokeloader – ac9b8ee2453bae125e950f895d79846d

March 11, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: ac9b8ee2453bae125e950f895d79846dSHA1: 70ab4b5ef6e73202b0cb9655f020682af2b2be9dANALYSIS DATE: 2023-03-11T11:05:15ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – amadey – c561a34103a1003f3c6de1e2423ade7c

March 11, 2023

Malware Analysis – evasion – e2f5edd025b87d51036bb52654aedc08

March 11, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomware, trojanMD5: e2f5edd025b87d51036bb52654aedc08SHA1: 64f3751d5dbbb85e4cbffa38bee8ce1ecaa1331cANALYSIS DATE: 2023-03-11T04:12:04ZTTPS: T1112, T1012, T1082, T1107, T1490, T1088, T1089 ScoreMeaningExample10Known badA...

Malware Analysis – – deebbea18401e8b5e83c410c6d3a8b4e

March 11, 2023

Score: 8 MALWARE FAMILY: TAGS:MD5: deebbea18401e8b5e83c410c6d3a8b4eSHA1: 96d81e77b6af8f54a5ac07b2c613a5655dd05353ANALYSIS DATE: 2023-03-11T04:18:05ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – lockbit – 4fca4d754e6dda3c6d0a2e0c6ec70f20

March 11, 2023

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, ransomwareMD5: 4fca4d754e6dda3c6d0a2e0c6ec70f20SHA1: 3f6179eccd1f79b61db349186106cbc58bb6ba20ANALYSIS DATE: 2023-03-11T04:15:05ZTTPS: T1491, T1112, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – chaos – 2430019335d88321467e82ab8f51546b

March 11, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, ransomware, spyware, stealerMD5: 2430019335d88321467e82ab8f51546bSHA1: 7d233a893492e0efd4d7e919941325b5d44abeb7ANALYSIS DATE: 2023-03-11T04:22:04ZTTPS: T1490, T1059, T1107, T1082, T1012, T1005, T1081...

Malware Analysis

Malware Analysis – smokeloader – bb0785cea59f398b48f378ecc18cc51a

Malware Analysis – discovery – 2979ed84c4ca3deb2924bd1f26bf88bd

Malware Analysis – chaos – ba34b55b9b2031776fc958aef2d3bee1

Malware Analysis – djvu – 3995219f721e211ddda920b74a4b4aa5

Malware Analysis – persistence – f592e7faba96a23ee25ff25f3779f44f

Malware Analysis – chaos – 23591c81d46ac87baf52184f72d5f475

Malware Analysis – djvu – 85d1135dd2bb5d21ad16ce99e30d9696

Malware Analysis – – aa64fb557f18e0240ccb88532ec897db

Malware Analysis – amadey – 9a2a7a1bf5fce12479673c598886e0eb

Malware Analysis – djvu – 8525f75b65ad910ccd74c1a08d70efa8

Malware Analysis – amadey – fda35e2d619136257720ce6084fb58cd

Malware Analysis – smokeloader – 5bf3877b8fd815085586d2de55398d00

Malware Analysis – evasion – 4a84df07dff0c3424bc90ce8d0938b06

Malware Analysis – djvu – e8dcd90463339d7a2c9f28cdea5fa8df

Malware Analysis – djvu – cd9756f38524bab1b74b7c39db74c4b9

Malware Analysis – djvu – 8e335bde5ed8b1c9f9f459074421901b

Malware Analysis – djvu – 8e72f80f57f0a2061ed8707b4ae8bd0b

Malware Analysis – djvu – da75c7fe6dca73c9e3df80dacf68d82e

Malware Analysis – smokeloader – ac9b8ee2453bae125e950f895d79846d

Malware Analysis – amadey – c561a34103a1003f3c6de1e2423ade7c

Malware Analysis – evasion – e2f5edd025b87d51036bb52654aedc08

Malware Analysis – – deebbea18401e8b5e83c410c6d3a8b4e

Malware Analysis – lockbit – 4fca4d754e6dda3c6d0a2e0c6ec70f20

Malware Analysis – chaos – 2430019335d88321467e82ab8f51546b

Cobalt Strike Beacon Detected – 121[.]43[.]37[.]134:4434

Cobalt Strike Beacon Detected – 119[.]29[.]231[.]118:443

Cobalt Strike Beacon Detected – 39[.]101[.]74[.]162:443

Cobalt Strike Beacon Detected – 8[.]218[.]112[.]112:8880

Cobalt Strike Beacon Detected – 47[.]109[.]48[.]57:443

You may have missed