Malware Analysis

Malware Analysis – evasion – fbaeb3757e8d010e5da5f4366a77f88a

February 28, 2023

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: fbaeb3757e8d010e5da5f4366a77f88aSHA1: eb604d0e919f4779cc524f8a837f3437acac2833ANALYSIS DATE: 2023-02-28T05:28:04ZTTPS: T1060, T1112, T1107, T1490, T1082, T1088, T1089 ScoreMeaningExample10Known...

Malware Analysis – persistence – 7751da230d7676b1fc2fc7585cc51fcb

February 28, 2023

Score: 7 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 7751da230d7676b1fc2fc7585cc51fcbSHA1: ee19393e64b25da8a4cdd48221a71854aa0e3a74ANALYSIS DATE: 2023-02-27T20:58:22ZTTPS: T1005, T1081, T1491, T1112, T1060 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – a91aaf3dfb34b6f450d2a07f95f04fd4

February 28, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: a91aaf3dfb34b6f450d2a07f95f04fd4SHA1: 5483a5d4ec4c5f35f845f25bcae01d8903735e0cANALYSIS DATE: 2023-02-27T20:59:14ZTTPS: T1222, T1053, T1005, T1081, T1060,...

Malware Analysis – lampion – 68ba045e1427d63d03660ef2d88584d0

February 28, 2023

Score: 10 MALWARE FAMILY: lampionTAGS:family:lampion, banker, discovery, persistence, ransomware, trojanMD5: 68ba045e1427d63d03660ef2d88584d0SHA1: a3e9bd9adddf1aaaaff03cd69a7128e6fc774977ANALYSIS DATE: 2023-02-27T22:16:25ZTTPS: T1112, T1042, T1060, T1012, T1120, T1082,...

Malware Analysis – djvu – 4f3f6dcf9708921f89402fca1786ce69

February 28, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 4f3f6dcf9708921f89402fca1786ce69SHA1: b209a7639b33c4a143a1165cde74432e5e3ea9f0ANALYSIS DATE: 2023-02-27T22:16:54ZTTPS: T1053, T1012, T1082, T1005, T1081,...

Malware Analysis – djvu – 284188684107ced16015103e14cd8a43

February 28, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, backdoor, discovery, persistence, pyinstaller, ransomware, stealer, trojan, vmprotectMD5: 284188684107ced16015103e14cd8a43SHA1: 3b41c2744db958f5fa7951be4e60ad396699e4cbANALYSIS DATE: 2023-02-27T21:07:25ZTTPS: T1012,...

Malware Analysis – smokeloader – 917ec402257747008f49ca8ef2cbb68d

February 28, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 917ec402257747008f49ca8ef2cbb68dSHA1: 1e24cb0554b0889f8f738af9ca7f0ba3bbe08b9cANALYSIS DATE: 2023-02-27T23:56:02ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – b7f75322a5ae47dcbc0ae9c35930181f

February 27, 2023

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: b7f75322a5ae47dcbc0ae9c35930181fSHA1: c999e7c030a56b39090a5506413565cead8fa779ANALYSIS DATE: 2023-02-27T15:02:34ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – d68fc03f5679d210f0a3cd70cc8c13e1

February 27, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: d68fc03f5679d210f0a3cd70cc8c13e1SHA1: a4ad2eddb55670b99a2e628205911b5ba21686e4ANALYSIS DATE: 2023-02-27T15:39:56ZTTPS: T1222, T1053, T1005, T1081, T1082,...

Malware Analysis – djvu – 14e05bdb6fb15db02e5247582084999a

February 27, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 14e05bdb6fb15db02e5247582084999aSHA1: c462df95f587ad8e7ab3f703e912aaf12762d03dANALYSIS DATE: 2023-02-27T15:11:02ZTTPS: T1012, T1082, T1005, T1081, T1060,...

Malware Analysis – smokeloader – 32e664bc1683bf60db15e50df9d04d94

February 27, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 32e664bc1683bf60db15e50df9d04d94SHA1: 2f58984ab4b88eff4cf3271a9b3d9b8a0abed2ecANALYSIS DATE: 2023-02-27T15:50:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – f440f4b68d8a753de17f40da8067c74c

February 27, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, backdoor, discovery, persistence, ransomware, stealer, trojan, vmprotectMD5: f440f4b68d8a753de17f40da8067c74cSHA1: fec25fe57dae2be79962fa9a3f79e62472be6d00ANALYSIS DATE: 2023-02-27T16:10:02ZTTPS: T1060, T1112,...

Malware Analysis – djvu – 4ee7170c8ae51589936baaa60bfca7b7

February 27, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 4ee7170c8ae51589936baaa60bfca7b7SHA1: 98eecd829b63e29452f6f9bb40c01303ed4d58e1ANALYSIS DATE: 2023-02-27T16:37:27ZTTPS: T1222, T1082, T1012, T1053, T1005,...

Malware Analysis – smokeloader – 35ccb4adbce0d03c3409df6207401429

February 27, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 35ccb4adbce0d03c3409df6207401429SHA1: 525be7f6caed949ddfa929c0a2ee75b26ba57c64ANALYSIS DATE: 2023-02-27T16:29:08ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – bfc03a90243efb1bbb02f65bce3b02a2

February 27, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: bfc03a90243efb1bbb02f65bce3b02a2SHA1: 1f3d840f29f5595f7db3465fa4b09b397b38f009ANALYSIS DATE: 2023-02-27T16:30:56ZTTPS: T1060, T1112, T1053, T1005, T1081,...

Malware Analysis – smokeloader – aa058c705e64a433166d975f4e9a5261

February 27, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: aa058c705e64a433166d975f4e9a5261SHA1: d286ebd54477fef7a45cc12edfb05ae0197bbdaaANALYSIS DATE: 2023-02-27T16:29:08ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – quantum – c1fbbf273c1e4094f6bf0cdde36d2764

February 27, 2023

Score: 10 MALWARE FAMILY: quantumTAGS:family:quantum, ransomwareMD5: c1fbbf273c1e4094f6bf0cdde36d2764SHA1: bcf4ed6e49e30c5ab9e0fdfcaf5ee8e2756cc98aANALYSIS DATE: 2023-02-27T17:25:04ZTTPS: T1158, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – quasar – 04c0f75fb7507ed1d87c6946698ec064

February 27, 2023

Score: 10 MALWARE FAMILY: quasarTAGS:family:quasar, evasion, persistence, ransomware, spyware, trojanMD5: 04c0f75fb7507ed1d87c6946698ec064SHA1: 577911bb677fbf7870209d4417e277e89b1263feANALYSIS DATE: 2023-02-27T16:44:51ZTTPS: T1082, T1088, T1089, T1112, T1031, T1060,...

Malware Analysis – smokeloader – 3423b310f4725f7d0954f38d346eff1e

February 27, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 3423b310f4725f7d0954f38d346eff1eSHA1: 475cdb695f781e4cbd29c5c601d52377d96503e9ANALYSIS DATE: 2023-02-27T17:00:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 5c1055bd70425b00ccdd27fb4568aa3b

February 27, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, backdoor, discovery, persistence, pyinstaller, ransomware, spyware, stealer, trojan, vmprotectMD5: 5c1055bd70425b00ccdd27fb4568aa3bSHA1: 5643011b8cc2ed9d83d5ed3d4f508bc7bbedf811ANALYSIS DATE: 2023-02-27T17:30:36ZTTPS:...

Malware Analysis – smokeloader – 52c84c3173a4681cce7fc7bc5d8042db

February 27, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 52c84c3173a4681cce7fc7bc5d8042dbSHA1: d63990866ef6a285a6a18c2c3527ee547934ca5aANALYSIS DATE: 2023-02-27T09:07:19ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 0791d4fdb3ab94c236568ac890a16a5a

February 27, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 0791d4fdb3ab94c236568ac890a16a5aSHA1: 3ae812bc7977181c578867dbe5a43a4b84ceead0ANALYSIS DATE: 2023-02-27T09:06:13ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – troldesh – 63210f8f1dde6c40a7f3643ccf0ff313

February 27, 2023

Score: 10 MALWARE FAMILY: troldeshTAGS:family:troldesh, persistence, ransomware, trojan, upxMD5: 63210f8f1dde6c40a7f3643ccf0ff313SHA1: 57edd72391d710d71bead504d44389d0462ccec9ANALYSIS DATE: 2023-02-27T09:11:05ZTTPS: T1060, T1112, T1082 ScoreMeaningExample10Known badA malware family...

Malware Analysis – smokeloader – b7d558b62705bb9da3e9154d81eddc6c

February 27, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: b7d558b62705bb9da3e9154d81eddc6cSHA1: a54d91fb7224a9bd32b13d13a1bc259f631decfbANALYSIS DATE: 2023-02-27T09:07:20ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis

Malware Analysis – evasion – fbaeb3757e8d010e5da5f4366a77f88a

Malware Analysis – persistence – 7751da230d7676b1fc2fc7585cc51fcb

Malware Analysis – djvu – a91aaf3dfb34b6f450d2a07f95f04fd4

Malware Analysis – lampion – 68ba045e1427d63d03660ef2d88584d0

Malware Analysis – djvu – 4f3f6dcf9708921f89402fca1786ce69

Malware Analysis – djvu – 284188684107ced16015103e14cd8a43

Malware Analysis – smokeloader – 917ec402257747008f49ca8ef2cbb68d

Malware Analysis – evasion – b7f75322a5ae47dcbc0ae9c35930181f

Malware Analysis – djvu – d68fc03f5679d210f0a3cd70cc8c13e1

Malware Analysis – djvu – 14e05bdb6fb15db02e5247582084999a

Malware Analysis – smokeloader – 32e664bc1683bf60db15e50df9d04d94

Malware Analysis – djvu – f440f4b68d8a753de17f40da8067c74c

Malware Analysis – djvu – 4ee7170c8ae51589936baaa60bfca7b7

Malware Analysis – smokeloader – 35ccb4adbce0d03c3409df6207401429

Malware Analysis – djvu – bfc03a90243efb1bbb02f65bce3b02a2

Malware Analysis – smokeloader – aa058c705e64a433166d975f4e9a5261

Malware Analysis – quantum – c1fbbf273c1e4094f6bf0cdde36d2764

Malware Analysis – quasar – 04c0f75fb7507ed1d87c6946698ec064

Malware Analysis – smokeloader – 3423b310f4725f7d0954f38d346eff1e

Malware Analysis – djvu – 5c1055bd70425b00ccdd27fb4568aa3b

Malware Analysis – smokeloader – 52c84c3173a4681cce7fc7bc5d8042db

Malware Analysis – smokeloader – 0791d4fdb3ab94c236568ac890a16a5a

Malware Analysis – troldesh – 63210f8f1dde6c40a7f3643ccf0ff313

Malware Analysis – smokeloader – b7d558b62705bb9da3e9154d81eddc6c

Cobalt Strike Beacon Detected – 121[.]43[.]37[.]134:4434

Cobalt Strike Beacon Detected – 119[.]29[.]231[.]118:443

Cobalt Strike Beacon Detected – 39[.]101[.]74[.]162:443

Cobalt Strike Beacon Detected – 8[.]218[.]112[.]112:8880

Cobalt Strike Beacon Detected – 47[.]109[.]48[.]57:443

You may have missed