Malware Analysis

Malware Analysis – discovery – cf5d70e9da8dd67bc9d9fb9e0d60a9d6

March 8, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomware, upxMD5: cf5d70e9da8dd67bc9d9fb9e0d60a9d6SHA1: 13b699cc65af670fc51b117a8344648840eefaddANALYSIS DATE: 2023-03-08T15:32:17ZTTPS: T1012, T1120, T1082, T1050 ScoreMeaningExample10Known badA malware family...

Malware Analysis – amadey – b3503a8c59408ce1ae5e2f00931ff9df

March 8, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, backdoor, discovery, persistence, ransomware, stealer, trojan, vmprotectMD5: b3503a8c59408ce1ae5e2f00931ff9dfSHA1: 2e8d5546ce7d1f9a645fb7fdca7de1b98c0b00b8ANALYSIS DATE: 2023-03-08T16:31:46ZTTPS: T1060,...

Malware Analysis – djvu – 012cb286ce81b404dc70c71a82269f9d

March 8, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 012cb286ce81b404dc70c71a82269f9dSHA1: 50433747e0eab4fcd9c9ae59b2b60b4174ab2a62ANALYSIS DATE: 2023-03-08T16:16:13ZTTPS: T1005, T1081, T1012, T1082, T1060,...

Malware Analysis – djvu – f87d7f832564c394452812cea1e4329a

March 8, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: f87d7f832564c394452812cea1e4329aSHA1: b3d889c87a05799fc1f40b70799a15470712d589ANALYSIS DATE: 2023-03-08T16:23:18ZTTPS: T1012, T1082, T1053, T1005, T1081,...

Malware Analysis – discovery – baabd73bcc36410b8ac2c583256daea4

March 8, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, exploit, ransomware, spyware, stealer, trojan, upxMD5: baabd73bcc36410b8ac2c583256daea4SHA1: 8cff0fd52aea3e2f4f1e0613a6a37b9c7efa88fbANALYSIS DATE: 2023-03-08T16:31:39ZTTPS: T1005, T1081, T1082, T1031,...

Malware Analysis – djvu – 13e3a0ef1cb2de40b1c4473a2dd07679

March 8, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 13e3a0ef1cb2de40b1c4473a2dd07679SHA1: c27be7a6c9183de9a308a70ac44d6092053b1d66ANALYSIS DATE: 2023-03-08T16:44:49ZTTPS: T1060, T1112, T1222, T1012, T1082,...

Malware Analysis – banker – 05279abec80ac228b807f4eb1c0e5a2c

March 8, 2023

Score: 8 MALWARE FAMILY: bankerTAGS:banker, evasion, ransomwareMD5: 05279abec80ac228b807f4eb1c0e5a2cSHA1: 2ceb03e65b935b599e56f7a5dacd8045633e115aANALYSIS DATE: 2023-03-08T17:20:36ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – b80fb8f1c0bb9b4e8d08ab130ab9071e

March 8, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: b80fb8f1c0bb9b4e8d08ab130ab9071eSHA1: 4b1a28730a1a2224a37ab641f80b1b53ac1f4240ANALYSIS DATE: 2023-03-08T16:46:14ZTTPS: T1012, T1082, T1005, T1081, T1222,...

Malware Analysis – amadey – cc08259751fc626dc85ab53850673c6e

March 8, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, backdoor, discovery, persistence, ransomware, stealer, trojan, vmprotectMD5: cc08259751fc626dc85ab53850673c6eSHA1: 3a78667441f736103b69433b8af21a739c17a460ANALYSIS DATE: 2023-03-08T17:03:09ZTTPS: T1012,...

Malware Analysis – djvu – fd9ec571c9317b69d96d3ef09fc3b722

March 8, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: fd9ec571c9317b69d96d3ef09fc3b722SHA1: 62950112b396b6299fb1e7fb3bb2bba5cf5f64b5ANALYSIS DATE: 2023-03-08T10:11:38ZTTPS: T1005, T1081, T1012, T1082, T1060,...

Malware Analysis – smokeloader – f4b08f9f07a4938b83f1564b1c21cf27

March 8, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: f4b08f9f07a4938b83f1564b1c21cf27SHA1: 7ac9dd5a0f7464836ae4b001c2774bb5eb352b5aANALYSIS DATE: 2023-03-08T10:26:12ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – amadey – cf4c9cd6e648b12c80bf947c77be8f89

March 8, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, backdoor, discovery, evasion, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: cf4c9cd6e648b12c80bf947c77be8f89SHA1: 1683c6778019a0269a430a40fa26872a484df307ANALYSIS DATE:...

Malware Analysis – djvu – 2cfcb21bd5b1513337f74222240a83e9

March 8, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 2cfcb21bd5b1513337f74222240a83e9SHA1: c64a12aab3c9192d1969762c4d97dfe6947bebfaANALYSIS DATE: 2023-03-08T10:25:44ZTTPS: T1222, T1060, T1112, T1082, T1053 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – cb8e4278d5baa134718728a057f7076b

March 8, 2023

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: cb8e4278d5baa134718728a057f7076bSHA1: ef3247d324af56d5254d6d1bebc84d0223da2b4aANALYSIS DATE: 2023-03-08T10:24:51ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – smokeloader – ff7b81d1699ab3539723c7b373112acf

March 8, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: ff7b81d1699ab3539723c7b373112acfSHA1: 252fdf43cd58f3b4690c8ee44a6fb0b633365245ANALYSIS DATE: 2023-03-08T10:32:39ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – d1c3d5824dfbb2c0b0965194f0679cc9

March 8, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: d1c3d5824dfbb2c0b0965194f0679cc9SHA1: 44e1cae1144368395fcd7bb9e13d2b88e47a1b6cANALYSIS DATE: 2023-03-08T10:32:39ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – 34841af731c1b0be5c9309017b67bbff

March 8, 2023

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 34841af731c1b0be5c9309017b67bbffSHA1: 5b760afa71a95ba24140a56012f0faaf99154a04ANALYSIS DATE: 2023-03-08T11:18:10ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – cf5f0ec10c96449539d5fb28714034a8

March 8, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: cf5f0ec10c96449539d5fb28714034a8SHA1: d4e2fa2c5631f9e48c862b8f70a2c82b1c4e586eANALYSIS DATE: 2023-03-08T11:11:05ZTTPS: T1222, T1060, T1112, T1082, T1012,...

Malware Analysis – smokeloader – 45e9ebac4458e3e5bfd25e9ced12442d

March 8, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 45e9ebac4458e3e5bfd25e9ced12442dSHA1: 581159e264a22f962795e53b058dcd8a47056042ANALYSIS DATE: 2023-03-08T11:25:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 89bd882e0242cae0249a90795d9e029e

March 8, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 89bd882e0242cae0249a90795d9e029eSHA1: e754d8689aea58c801f93aa5ac1dae609b2d81d2ANALYSIS DATE: 2023-03-08T11:25:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – dab230c7e5cb1132fd5588950ed6bae7

March 8, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: dab230c7e5cb1132fd5588950ed6bae7SHA1: 301b5a8db37427dbad3887b6e2069c8e8c3fbffeANALYSIS DATE: 2023-03-08T11:20:58ZTTPS: T1012, T1082, T1005, T1081, T1222,...

Malware Analysis – smokeloader – ce55326184e2c015b6f24334c3084540

March 8, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: ce55326184e2c015b6f24334c3084540SHA1: 7750094147cc42c9b38e5c5d17b4d37f580487a1ANALYSIS DATE: 2023-03-08T11:19:25ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – b9cb1b0a55dcf4d065422a2b4ea694fe

March 7, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: b9cb1b0a55dcf4d065422a2b4ea694feSHA1: b67e999f4cfe34e85d3ab9446668cd4d4f9ca865ANALYSIS DATE: 2023-03-07T15:20:47ZTTPS: T1060, T1112, T1012, T1082, T1053,...

Malware Analysis – – 8237549d0f3175eb29b0f4fe0b641364

March 7, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: 8237549d0f3175eb29b0f4fe0b641364SHA1: 9222774ac583f059bebe81a6bdebd0854f0ad131ANALYSIS DATE: 2023-03-07T15:39:56ZTTPS: T1130, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis

Malware Analysis – discovery – cf5d70e9da8dd67bc9d9fb9e0d60a9d6

Malware Analysis – amadey – b3503a8c59408ce1ae5e2f00931ff9df

Malware Analysis – djvu – 012cb286ce81b404dc70c71a82269f9d

Malware Analysis – djvu – f87d7f832564c394452812cea1e4329a

Malware Analysis – discovery – baabd73bcc36410b8ac2c583256daea4

Malware Analysis – djvu – 13e3a0ef1cb2de40b1c4473a2dd07679

Malware Analysis – banker – 05279abec80ac228b807f4eb1c0e5a2c

Malware Analysis – djvu – b80fb8f1c0bb9b4e8d08ab130ab9071e

Malware Analysis – amadey – cc08259751fc626dc85ab53850673c6e

Malware Analysis – djvu – fd9ec571c9317b69d96d3ef09fc3b722

Malware Analysis – smokeloader – f4b08f9f07a4938b83f1564b1c21cf27

Malware Analysis – amadey – cf4c9cd6e648b12c80bf947c77be8f89

Malware Analysis – djvu – 2cfcb21bd5b1513337f74222240a83e9

Malware Analysis – ransomware – cb8e4278d5baa134718728a057f7076b

Malware Analysis – smokeloader – ff7b81d1699ab3539723c7b373112acf

Malware Analysis – smokeloader – d1c3d5824dfbb2c0b0965194f0679cc9

Malware Analysis – ransomware – 34841af731c1b0be5c9309017b67bbff

Malware Analysis – djvu – cf5f0ec10c96449539d5fb28714034a8

Malware Analysis – smokeloader – 45e9ebac4458e3e5bfd25e9ced12442d

Malware Analysis – smokeloader – 89bd882e0242cae0249a90795d9e029e

Malware Analysis – djvu – dab230c7e5cb1132fd5588950ed6bae7

Malware Analysis – smokeloader – ce55326184e2c015b6f24334c3084540

Malware Analysis – djvu – b9cb1b0a55dcf4d065422a2b4ea694fe

Malware Analysis – – 8237549d0f3175eb29b0f4fe0b641364

Cobalt Strike Beacon Detected – 121[.]43[.]37[.]134:4434

Cobalt Strike Beacon Detected – 119[.]29[.]231[.]118:443

Cobalt Strike Beacon Detected – 39[.]101[.]74[.]162:443

Cobalt Strike Beacon Detected – 8[.]218[.]112[.]112:8880

Cobalt Strike Beacon Detected – 47[.]109[.]48[.]57:443

You may have missed