Malware Analysis

Malware Analysis – djvu – 182fe34b1f0462a9e1cd16da7e407343

March 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 182fe34b1f0462a9e1cd16da7e407343SHA1: 53c3f029d3ff7f58ca9954f749edb6e44114a02fANALYSIS DATE: 2023-03-09T15:25:52ZTTPS: T1060, T1112, T1082, T1053,...

Malware Analysis – djvu – 3770d4e8c8b7e2a4c37a0ba09f28e2be

March 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 3770d4e8c8b7e2a4c37a0ba09f28e2beSHA1: 0495a7a5dbbe35a232f1bc7ed4d5da214bf2bf35ANALYSIS DATE: 2023-03-09T15:27:04ZTTPS: T1130, T1112, T1222, T1053,...

Malware Analysis – smokeloader – f30433ddb4f9db7afc0d5a61d6730e4a

March 9, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: f30433ddb4f9db7afc0d5a61d6730e4aSHA1: 74ab86a37e6f164e2d9c07c248f7bb07111b339fANALYSIS DATE: 2023-03-09T15:22:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – c7cd0cfab160d2c50eca232bbebb9ec0

March 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: c7cd0cfab160d2c50eca232bbebb9ec0SHA1: ced9ebf65abc14747b31118182acc859b537c3beANALYSIS DATE: 2023-03-09T15:19:05ZTTPS: T1130, T1112, T1005, T1081,...

Malware Analysis – amadey – 177b4a7c81cecf64811c06aba1bd56df

March 9, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:laplas, family:smokeloader, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, botnet:pub1, botnet:sprg, backdoor, clipper, discovery, evasion, persistence, pyinstaller, ransomware, stealer,...

Malware Analysis – evasion – 928fd385b000799b395957768079f032

March 9, 2023

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 928fd385b000799b395957768079f032SHA1: 1f902ca013cad6e4e1482ba7b08b8c50bf8ec40aANALYSIS DATE: 2023-03-09T16:09:20ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – ransomware – f261a5e674a442842c7e581122256fb3

March 9, 2023

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: f261a5e674a442842c7e581122256fb3SHA1: e9e92b942c8f6092ae55b3e2b98e1a3a9667695aANALYSIS DATE: 2023-03-09T16:34:58ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – amadey – 8d990e00f9718a8d43195a38865a1462

March 9, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:laplas, family:pseudomanuscrypt, family:smokeloader, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, botnet:pub1, botnet:sprg, backdoor, clipper, discovery, evasion, loader, persistence, ransomware,...

Malware Analysis – amadey – 018791f76b98abc15177ca780693eeb5

March 9, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:laplas, family:smokeloader, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, botnet:pub1, botnet:sprg, backdoor, clipper, discovery, persistence, pyinstaller, ransomware, stealer, trojanMD5:...

Malware Analysis – djvu – 8f815dd83d1432167479a2ec981834fd

March 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 8f815dd83d1432167479a2ec981834fdSHA1: 8ea74de3209010e6dd81dd3dc66214a7878dd5ebANALYSIS DATE: 2023-03-09T16:42:57ZTTPS: T1060, T1112, T1082, T1005,...

Malware Analysis – discovery – 0acd5fdeb1332e99679f9c5403fd5dbe

March 9, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, persistence, ransomware, trojanMD5: 0acd5fdeb1332e99679f9c5403fd5dbeSHA1: 9941abbb97c285b8528830cae8762b251e16991aANALYSIS DATE: 2023-03-09T16:57:34ZTTPS: T1102, T1112, T1107, T1490, T1060, T1031, T1562,...

Malware Analysis – djvu – 5f0ba5567cbd04f4528289d3fa64075d

March 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 5f0ba5567cbd04f4528289d3fa64075dSHA1: 745147caf91e2c4aefbf68e75156e19e8f7400f6ANALYSIS DATE: 2023-03-09T16:41:13ZTTPS: T1060, T1112, T1082, T1012,...

Malware Analysis – amadey – 7b8fa1719da67f606547a11c93356b2e

March 9, 2023

Malware Analysis – djvu – 6bdc4ff9c91e4846d8924c28d7e909da

March 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 6bdc4ff9c91e4846d8924c28d7e909daSHA1: c504e74669f65893874e77d70d78c01526694d54ANALYSIS DATE: 2023-03-09T17:47:29ZTTPS: T1222, T1060, T1112, T1005,...

Malware Analysis – djvu – 58556e2d969b55db9c1731ee540cb31f

March 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: 58556e2d969b55db9c1731ee540cb31fSHA1: e36eafc1c83133c0b4f322017b1be84e7c11eb9aANALYSIS DATE: 2023-03-09T17:38:47ZTTPS: T1060, T1112, T1012, T1005,...

Malware Analysis – djvu – f65c1bc6f57a0964c1cb68ef89ad44c6

March 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:694f12963bedb0c6040fb3c74aac71e5, discovery, persistence, ransomware, spyware, stealerMD5: f65c1bc6f57a0964c1cb68ef89ad44c6SHA1: d46497b7e0200fc399e964339b0a7805f2551ab4ANALYSIS DATE: 2023-03-09T17:34:46ZTTPS: T1082, T1005, T1081, T1012,...

Malware Analysis – djvu – 5239b4963a8dd2bddc6dcbd203851e31

March 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 5239b4963a8dd2bddc6dcbd203851e31SHA1: d770c3b7d73c5fb50adbc31e0479c79ab6747167ANALYSIS DATE: 2023-03-09T10:29:04ZTTPS: T1082, T1053, T1012, T1005, T1081,...

Malware Analysis – amadey – d6b9b6638f6427d82d83c5b08bde7ef7

March 9, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, backdoor, discovery, evasion, persistence, ransomware, stealer, trojanMD5: d6b9b6638f6427d82d83c5b08bde7ef7SHA1: 9b9caf7c62a21bedf100ab496dd4959a7d7ef7b8ANALYSIS DATE: 2023-03-09T09:34:31ZTTPS: T1012,...

Malware Analysis – bootkit – 8212c56b81cf868f127f5cb87e86ae44

March 9, 2023

Score: 8 MALWARE FAMILY: bootkitTAGS:bootkit, discovery, persistence, ransomwareMD5: 8212c56b81cf868f127f5cb87e86ae44SHA1: bc90de21627fd7bba718af8587ae68ef15cdd4adANALYSIS DATE: 2023-03-09T10:02:41ZTTPS: T1012, T1082, T1060, T1112, T1491, T1067, T1130 ScoreMeaningExample10Known...

Malware Analysis – djvu – 5bb17f0bd59304af2640fa2beb074d16

March 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 5bb17f0bd59304af2640fa2beb074d16SHA1: 64a300c6079fdcbb48f15d7ff8f801d6be160100ANALYSIS DATE: 2023-03-09T10:13:18ZTTPS: T1082, T1005, T1081, T1060, T1112,...

Malware Analysis – djvu – 185b3efe7ae7908a5d7767832f79fc20

March 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 185b3efe7ae7908a5d7767832f79fc20SHA1: 0eda0497474c4cf23809be14dd46f06c2f4f102dANALYSIS DATE: 2023-03-09T10:42:24ZTTPS: T1012, T1082, T1005, T1081, T1060,...

Malware Analysis – amadey – b89600a981edebb261b4076e2b05b528

March 9, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, backdoor, discovery, evasion, persistence, ransomware, stealer, trojanMD5: b89600a981edebb261b4076e2b05b528SHA1: 7dfb72a1401e3f230b43414cff60c43f3c927ce5ANALYSIS DATE: 2023-03-09T10:53:22ZTTPS: T1222,...

Malware Analysis – persistence – afa9d7c88c28e9b8cca140413cfb32e4

March 9, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: afa9d7c88c28e9b8cca140413cfb32e4SHA1: 6936af81c974d6c9e2e6eaedd4026a37135369bcANALYSIS DATE: 2023-03-09T10:50:58ZTTPS: T1491, T1112, T1082, T1060, T1005, T1081 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – 7cd226630786c2dde981731544463b23

March 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 7cd226630786c2dde981731544463b23SHA1: fbb8cb23aa804fda321bc9079cdcaf0d61095b96ANALYSIS DATE: 2023-03-09T10:34:30ZTTPS: T1005, T1081, T1222, T1082, T1053,...

Malware Analysis

Malware Analysis – djvu – 182fe34b1f0462a9e1cd16da7e407343

Malware Analysis – djvu – 3770d4e8c8b7e2a4c37a0ba09f28e2be

Malware Analysis – smokeloader – f30433ddb4f9db7afc0d5a61d6730e4a

Malware Analysis – djvu – c7cd0cfab160d2c50eca232bbebb9ec0

Malware Analysis – amadey – 177b4a7c81cecf64811c06aba1bd56df

Malware Analysis – evasion – 928fd385b000799b395957768079f032

Malware Analysis – ransomware – f261a5e674a442842c7e581122256fb3

Malware Analysis – amadey – 8d990e00f9718a8d43195a38865a1462

Malware Analysis – amadey – 018791f76b98abc15177ca780693eeb5

Malware Analysis – djvu – 8f815dd83d1432167479a2ec981834fd

Malware Analysis – discovery – 0acd5fdeb1332e99679f9c5403fd5dbe

Malware Analysis – djvu – 5f0ba5567cbd04f4528289d3fa64075d

Malware Analysis – amadey – 7b8fa1719da67f606547a11c93356b2e

Malware Analysis – djvu – 6bdc4ff9c91e4846d8924c28d7e909da

Malware Analysis – djvu – 58556e2d969b55db9c1731ee540cb31f

Malware Analysis – djvu – f65c1bc6f57a0964c1cb68ef89ad44c6

Malware Analysis – djvu – 5239b4963a8dd2bddc6dcbd203851e31

Malware Analysis – amadey – d6b9b6638f6427d82d83c5b08bde7ef7

Malware Analysis – bootkit – 8212c56b81cf868f127f5cb87e86ae44

Malware Analysis – djvu – 5bb17f0bd59304af2640fa2beb074d16

Malware Analysis – djvu – 185b3efe7ae7908a5d7767832f79fc20

Malware Analysis – amadey – b89600a981edebb261b4076e2b05b528

Malware Analysis – persistence – afa9d7c88c28e9b8cca140413cfb32e4

Malware Analysis – djvu – 7cd226630786c2dde981731544463b23

[GLOBAL] – Ransomware Victim: loraincountyauditor[.]gov

[PLAY] – Ransomware Victim: Hulberg & Associates

[AKIRA] – Ransomware Victim: McKenzie Commercia

[PLAY] – Ransomware Victim: Rockrose Development

CVE Alert: CVE-2025-7529

You may have missed