Malware Analysis

Malware Analysis – neshta – 3db3ee8509e8ce9c12936a1d5b82cca1

March 11, 2023

Score: 10 MALWARE FAMILY: neshtaTAGS:family:neshta, family:ramnit, banker, persistence, ransomware, spyware, stealer, trojan, upx, wormMD5: 3db3ee8509e8ce9c12936a1d5b82cca1SHA1: a0d8b919d49d820b506864493b82fa78228afc3fANALYSIS DATE: 2023-03-11T04:17:03ZTTPS: T1112, T1005,...

Malware Analysis – dharma – 2bbb2d9be1a993a8dfef0dd719c589a0

March 11, 2023

Score: 10 MALWARE FAMILY: dharmaTAGS:family:dharma, persistence, ransomware, spyware, stealerMD5: 2bbb2d9be1a993a8dfef0dd719c589a0SHA1: c03d6401902a7b07ac88dbde7f93c6cc74e57221ANALYSIS DATE: 2023-03-11T04:46:42ZTTPS: T1005, T1081, T1107, T1490, T1060, T1112, T1082...

Malware Analysis – persistence – 0d730b155b46fe1ec3e4503ae55db4d0

March 11, 2023

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 0d730b155b46fe1ec3e4503ae55db4d0SHA1: b32739129fac8810ebc99cf12a45b8c2c2e17176ANALYSIS DATE: 2023-03-11T04:22:05ZTTPS: T1107, T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – b7e2303419be1561979a92cde8e16670

March 11, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, ransomware, trojanMD5: b7e2303419be1561979a92cde8e16670SHA1: 5d1ec037dcb468ba9b08f1293f1fb1ff62034a12ANALYSIS DATE: 2023-03-11T04:52:03ZTTPS: T1112, T1107, T1490, T1082, T1012, T1088, T1089 ScoreMeaningExample10Known badA...

Malware Analysis – medusalocker – 19ddac9782acd73f66c5fe040e86ddee

March 11, 2023

Score: 10 MALWARE FAMILY: medusalockerTAGS:family:medusalocker, evasion, ransomware, spyware, stealer, trojanMD5: 19ddac9782acd73f66c5fe040e86ddeeSHA1: 24ceba1e2951cde8e41939da21c6ba3030fc531dANALYSIS DATE: 2023-03-11T04:46:04ZTTPS: T1107, T1490, T1082, T1088, T1089, T1112,...

Malware Analysis – djvu – 7eb2367fe8b1c3d81e4a3698ca504201

March 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 7eb2367fe8b1c3d81e4a3698ca504201SHA1: 6435fc8cab12caa63c6f56c7c6c0f36f736af4dbANALYSIS DATE: 2023-03-11T05:16:57ZTTPS: T1082, T1053, T1005, T1081,...

Malware Analysis – djvu – fa3ffaf5e547407347b758edb0b959aa

March 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: fa3ffaf5e547407347b758edb0b959aaSHA1: 9eee56d3ac31365d806a7ecc45f6249dccfd2bd6ANALYSIS DATE: 2023-03-11T04:52:09ZTTPS: T1222, T1060, T1112, T1082,...

Malware Analysis – amadey – a01c6ec9fdd07310f4f04c2ecc1d2813

March 11, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:laplas, family:pseudomanuscrypt, family:smokeloader, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, botnet:pub1, botnet:sprg, backdoor, clipper, discovery, loader, persistence, ransomware, stealer,...

Malware Analysis – dharma – 0880430c257ce49d7490099d2a8dd01a

March 11, 2023

Score: 10 MALWARE FAMILY: dharmaTAGS:family:dharma, persistence, ransomware, spyware, stealerMD5: 0880430c257ce49d7490099d2a8dd01aSHA1: 2720d2d386027b0036bfcf9f340e325cd348e0d0ANALYSIS DATE: 2023-03-11T04:58:03ZTTPS: T1060, T1112, T1107, T1490, T1005, T1081, T1082...

Malware Analysis – djvu – a67c30efdd7940f034852302dcbf493d

March 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: a67c30efdd7940f034852302dcbf493dSHA1: 118d9b5bfa530f65dec204bc075db6ec15c7cb43ANALYSIS DATE: 2023-03-10T22:10:12ZTTPS: T1012, T1082, T1053, T1060,...

Malware Analysis – djvu – 74660444c99b457537291dcac33f5307

March 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 74660444c99b457537291dcac33f5307SHA1: 8bcc8d0c6a57c51fc9c37cfc7c3a6b1bed7ba087ANALYSIS DATE: 2023-03-10T21:58:43ZTTPS: T1060, T1112, T1222, T1053,...

Malware Analysis – amadey – 5bf3877b8fd815085586d2de55398d00

March 11, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:pseudomanuscrypt, family:smokeloader, family:vidar, botnet:pub1, botnet:sprg, backdoor, discovery, loader, ransomware, stealer, trojanMD5: 5bf3877b8fd815085586d2de55398d00SHA1: c542cf69aee77009d8a4727e423a88900726979fANALYSIS DATE:...

Malware Analysis – amadey – deaf892bd1b4cbf1ff3a7f5449f4c4ea

March 11, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:pseudomanuscrypt, family:smokeloader, family:vidar, botnet:pub1, botnet:sprg, backdoor, discovery, loader, ransomware, stealer, trojanMD5: deaf892bd1b4cbf1ff3a7f5449f4c4eaSHA1: 73c21e3539ca408e21fc1e643e1a922d628825c7ANALYSIS DATE:...

Malware Analysis – djvu – cd584418ce391a1196c4d4363d974705

March 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: cd584418ce391a1196c4d4363d974705SHA1: 2a5aa89caf43a27d66e9f66395527f3c6072374fANALYSIS DATE: 2023-03-10T23:22:24ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – blackcat – 8f2b7a45a93ee6f4806918aaa99c1b1b

March 11, 2023

Score: 10 MALWARE FAMILY: blackcatTAGS:family:blackcat, ransomwareMD5: 8f2b7a45a93ee6f4806918aaa99c1b1bSHA1: 3a71e11a742a1ba1b7c088ce1377bd9eeb0f63f0ANALYSIS DATE: 2023-03-10T23:29:48ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – 6d825cec46935a1b76c26bcb752053c9

March 11, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 6d825cec46935a1b76c26bcb752053c9SHA1: 6740dff3a6b49ac67778753ce6a7e452a1445f98ANALYSIS DATE: 2023-03-10T23:47:09ZTTPS: T1012, T1082, T1053, T1005,...

Malware Analysis – amadey – 2051792209ae3e2fc7dc07de18c52235

March 10, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, botnet:pub1, botnet:sprg, backdoor, discovery, persistence, ransomware, stealer, trojanMD5: 2051792209ae3e2fc7dc07de18c52235SHA1: 7620a99286b5b508b1f1a6a0019cba33d5be277bANALYSIS DATE:...

Malware Analysis – djvu – 9d9e1f1da9553e70bcf9f9f21b99167f

March 10, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 9d9e1f1da9553e70bcf9f9f21b99167fSHA1: 5b9f1b9c7216b7215d2604eeda8282f0acd959b6ANALYSIS DATE: 2023-03-10T16:15:34ZTTPS: T1005, T1081, T1060, T1112,...

Malware Analysis – djvu – 7cefb72243c731675df371bb892b40b9

March 10, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 7cefb72243c731675df371bb892b40b9SHA1: 64543f0ae0994f2e80fd1b355f3e7e5ca5e9036dANALYSIS DATE: 2023-03-10T16:21:40ZTTPS: T1082, T1053, T1005, T1081,...

Malware Analysis – djvu – ff05365f6a607f44f30f0e926f2d08ec

March 10, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: ff05365f6a607f44f30f0e926f2d08ecSHA1: a8e020dd7e64c16e9af8444aa005341082d5bebbANALYSIS DATE: 2023-03-10T16:21:19ZTTPS: T1222, T1053, T1012, T1082,...

Malware Analysis – djvu – 479babeb495794837bc83b21222d2fd2

March 10, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 479babeb495794837bc83b21222d2fd2SHA1: 693be18d689a4674698488150f11b7f1052db0efANALYSIS DATE: 2023-03-10T16:46:17ZTTPS: T1012, T1082, T1053, T1005,...

Malware Analysis – djvu – 2210099924266e5ba46da6e8329c2881

March 10, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 2210099924266e5ba46da6e8329c2881SHA1: ec0dd5b5e535fc9960b87f5f037c4af02be5d96aANALYSIS DATE: 2023-03-10T16:44:51ZTTPS: T1005, T1081, T1060, T1112,...

Malware Analysis – amadey – f16dd161b9394a75a981df03662e61d8

March 10, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, botnet:sprg, backdoor, discovery, ransomware, trojanMD5: f16dd161b9394a75a981df03662e61d8SHA1: e011edf5e79f12d715d497a5a699edfcf0de4918ANALYSIS DATE: 2023-03-10T17:04:11ZTTPS: T1012, T1053, T1082, T1120,...

Malware Analysis – amadey – 92f5a6a4e0cb84ba8c8f640ff44b5af4

March 10, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:pseudomanuscrypt, family:smokeloader, botnet:pub1, botnet:sprg, backdoor, discovery, loader, ransomware, trojanMD5: 92f5a6a4e0cb84ba8c8f640ff44b5af4SHA1: e9f2e6f2060c62e4afe4c1bc71836947dcf6bea2ANALYSIS DATE: 2023-03-10T16:32:20ZTTPS: T1222,...

Malware Analysis

Malware Analysis – neshta – 3db3ee8509e8ce9c12936a1d5b82cca1

Malware Analysis – dharma – 2bbb2d9be1a993a8dfef0dd719c589a0

Malware Analysis – persistence – 0d730b155b46fe1ec3e4503ae55db4d0

Malware Analysis – evasion – b7e2303419be1561979a92cde8e16670

Malware Analysis – medusalocker – 19ddac9782acd73f66c5fe040e86ddee

Malware Analysis – djvu – 7eb2367fe8b1c3d81e4a3698ca504201

Malware Analysis – djvu – fa3ffaf5e547407347b758edb0b959aa

Malware Analysis – amadey – a01c6ec9fdd07310f4f04c2ecc1d2813

Malware Analysis – dharma – 0880430c257ce49d7490099d2a8dd01a

Malware Analysis – djvu – a67c30efdd7940f034852302dcbf493d

Malware Analysis – djvu – 74660444c99b457537291dcac33f5307

Malware Analysis – amadey – 5bf3877b8fd815085586d2de55398d00

Malware Analysis – amadey – deaf892bd1b4cbf1ff3a7f5449f4c4ea

Malware Analysis – djvu – cd584418ce391a1196c4d4363d974705

Malware Analysis – blackcat – 8f2b7a45a93ee6f4806918aaa99c1b1b

Malware Analysis – djvu – 6d825cec46935a1b76c26bcb752053c9

Malware Analysis – amadey – 2051792209ae3e2fc7dc07de18c52235

Malware Analysis – djvu – 9d9e1f1da9553e70bcf9f9f21b99167f

Malware Analysis – djvu – 7cefb72243c731675df371bb892b40b9

Malware Analysis – djvu – ff05365f6a607f44f30f0e926f2d08ec

Malware Analysis – djvu – 479babeb495794837bc83b21222d2fd2

Malware Analysis – djvu – 2210099924266e5ba46da6e8329c2881

Malware Analysis – amadey – f16dd161b9394a75a981df03662e61d8

Malware Analysis – amadey – 92f5a6a4e0cb84ba8c8f640ff44b5af4

Cobalt Strike Beacon Detected – 121[.]43[.]37[.]134:4434

Cobalt Strike Beacon Detected – 119[.]29[.]231[.]118:443

Cobalt Strike Beacon Detected – 39[.]101[.]74[.]162:443

Cobalt Strike Beacon Detected – 8[.]218[.]112[.]112:8880

Cobalt Strike Beacon Detected – 47[.]109[.]48[.]57:443

You may have missed