Malware Analysis

Malware Analysis – smokeloader – 10c1d309a43c0ae8c867d445f0983a7c

February 27, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 10c1d309a43c0ae8c867d445f0983a7cSHA1: 7e81c65fa44afac85129806815dc422e42e7f421ANALYSIS DATE: 2023-02-27T09:07:20ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – b3f4fcfb20dc2d65bc7355f744cc471a

February 27, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: b3f4fcfb20dc2d65bc7355f744cc471aSHA1: 9768b327aa6be677923550e9d949b0606eb3f116ANALYSIS DATE: 2023-02-27T09:07:20ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – ef701a28f6a0f6c47bbeb9075bfdbb17

February 27, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, backdoor, discovery, persistence, ransomware, stealer, trojan, vmprotectMD5: ef701a28f6a0f6c47bbeb9075bfdbb17SHA1: d8d7540d7aa77ab65a808114ab968245901fc6b0ANALYSIS DATE: 2023-02-27T10:05:24ZTTPS: T1012, T1120,...

Malware Analysis – djvu – 5c99ee62a7e7bdd30257f2af5af760eb

February 27, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 5c99ee62a7e7bdd30257f2af5af760ebSHA1: 4273c64a6dd3cdc41689d3fe84063a64b3444fc7ANALYSIS DATE: 2023-02-27T10:02:29ZTTPS: T1060, T1112, T1012, T1082, T1005,...

Malware Analysis – ransomware – 9aed6f35603d5b43be90947cb901646d

February 27, 2023

Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 9aed6f35603d5b43be90947cb901646dSHA1: 4c5fcdf8e12c51412448a0eab83c9e70d8d85802ANALYSIS DATE: 2023-02-27T09:27:49ZTTPS: T1082, T1107, T1490, T1012, T1120 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 497f80075a5ef00096030f57892b04f7

February 27, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 497f80075a5ef00096030f57892b04f7SHA1: cbad6c33c852e1ccee944854e9d3d80e49b585a5ANALYSIS DATE: 2023-02-27T10:23:25ZTTPS: T1053, T1005, T1081, T1012, T1082,...

Malware Analysis – djvu – 9bef94cc928804cc3d23a4ae8293215e

February 27, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 9bef94cc928804cc3d23a4ae8293215eSHA1: de9c936943f6290228972dd27a663887c0fd138bANALYSIS DATE: 2023-02-27T10:54:39ZTTPS: T1012, T1082, T1005, T1081, T1060,...

Malware Analysis – djvu – d4dde394647d6d74a212f2abfc38d785

February 27, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: d4dde394647d6d74a212f2abfc38d785SHA1: b0f6ef1a54339f048af1ebf29691e471c926cd3cANALYSIS DATE: 2023-02-27T10:52:10ZTTPS: T1053, T1005, T1081, T1060, T1112,...

Malware Analysis – djvu – a76852e5eb1e18a990ff1d0a6e34d830

February 27, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: a76852e5eb1e18a990ff1d0a6e34d830SHA1: aca915229ecc63c5fbe37e3b024ab2a40d40abb5ANALYSIS DATE: 2023-02-27T11:24:55ZTTPS: T1060, T1112, T1012, T1005, T1081,...

Malware Analysis – djvu – 765a4e60824b26944e349fd5c5d25773

February 27, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 765a4e60824b26944e349fd5c5d25773SHA1: 69d86ac73275a3bbf24afcf2d1c113c196eb1a08ANALYSIS DATE: 2023-02-27T10:41:59ZTTPS: T1012, T1082, T1222, T1053, T1005,...

Malware Analysis – djvu – 1ffe527454fb2cb48d1c58fd37a5d953

February 27, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 1ffe527454fb2cb48d1c58fd37a5d953SHA1: 07381a0116186c6be393b695dbf9a139defa4e64ANALYSIS DATE: 2023-02-27T04:22:24ZTTPS: T1082, T1012, T1005, T1081, T1222,...

Malware Analysis – djvu – aa058c705e64a433166d975f4e9a5261

February 27, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, backdoor, discovery, persistence, ransomware, stealer, trojan, vmprotectMD5: aa058c705e64a433166d975f4e9a5261SHA1: d286ebd54477fef7a45cc12edfb05ae0197bbdaaANALYSIS DATE: 2023-02-27T03:42:43ZTTPS: T1082, T1012,...

Malware Analysis – djvu – af18071fb08b87b6b3997313a205f2fa

February 27, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: af18071fb08b87b6b3997313a205f2faSHA1: e113a28a4ec2c2fe961b0e63c3ecb0cd787aff0cANALYSIS DATE: 2023-02-27T04:18:15ZTTPS: T1012, T1082, T1222, T1005, T1081,...

Malware Analysis – djvu – ba3aabae5595f9b43fa0063f3d076340

February 27, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, backdoor, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: ba3aabae5595f9b43fa0063f3d076340SHA1: 8f33d2fae042f706487354ccd87c1a749a73a994ANALYSIS DATE: 2023-02-27T05:31:11ZTTPS: T1082,...

Malware Analysis – djvu – d4e8036c9af8375f5c06ea31c5267612

February 27, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: d4e8036c9af8375f5c06ea31c5267612SHA1: 9a4d77ab1d106ae4bda5250adcfb0dc7c4d6126fANALYSIS DATE: 2023-02-27T05:33:18ZTTPS: T1222, T1060, T1112, T1053, T1005,...

Malware Analysis – djvu – a46513985a2902ced4e4212fbb73df88

February 27, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: a46513985a2902ced4e4212fbb73df88SHA1: 00af6a70f41858895bfeb3fc45abebe6ef4e0e47ANALYSIS DATE: 2023-02-27T05:54:24ZTTPS: T1053, T1005, T1081, T1012, T1082,...

Malware Analysis – evasion – a013722d6c33cfe87c4feb7f59b1adef

February 27, 2023

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: a013722d6c33cfe87c4feb7f59b1adefSHA1: 67fedd6e65bbe6d0189494221fed770c5733399dANALYSIS DATE: 2023-02-27T05:06:50ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – f1d7f5ce6cd0b059b0ab842e1b6b335c

February 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: f1d7f5ce6cd0b059b0ab842e1b6b335cSHA1: d56d30a1921b853b2439f0cd7df5b13c52d22718ANALYSIS DATE: 2023-02-26T15:03:12ZTTPS: T1012, T1082, T1060, T1112, T1053,...

Malware Analysis – djvu – f1ff95c988f110902e532fb0a8034660

February 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: f1ff95c988f110902e532fb0a8034660SHA1: ba7ce5e7faf3a89516cd24d8a2bdb84ecd765df8ANALYSIS DATE: 2023-02-26T16:17:34ZTTPS: T1082, T1012, T1053, T1222, T1005,...

Malware Analysis – djvu – fc3f018b16daacdd0252b8d3f622747e

February 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, backdoor, discovery, persistence, ransomware, trojan, vmprotectMD5: fc3f018b16daacdd0252b8d3f622747eSHA1: 8b2e9ef98193544cc1288bcdfb372ef2aca54989ANALYSIS DATE: 2023-02-26T15:04:28ZTTPS: T1012, T1120, T1082, T1060,...

Malware Analysis – bootkit – 08480329b811e7d893d69964f42d04e7

February 26, 2023

Score: 8 MALWARE FAMILY: bootkitTAGS:bootkit, evasion, persistence, ransomwareMD5: 08480329b811e7d893d69964f42d04e7SHA1: a6749bd149d476ecfd0ac7453d9bfeae39579325ANALYSIS DATE: 2023-02-26T16:07:45ZTTPS: T1491, T1112, T1031, T1012, T1120, T1082, T1060, T1067,...

Malware Analysis – djvu – 33dbc5a31f712af90386ac6023f039ff

February 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 33dbc5a31f712af90386ac6023f039ffSHA1: 44f2d096498a5d511cf88e1e747399f5ca0db38eANALYSIS DATE: 2023-02-26T17:13:34ZTTPS: T1012, T1082, T1053, T1005, T1081,...

Malware Analysis – djvu – a8630ef62cf10a9fb477716e03071487

February 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, backdoor, discovery, evasion, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: a8630ef62cf10a9fb477716e03071487SHA1: 91d146ba7eccc4679b0c656f0a2fe7d39a212db4ANALYSIS DATE: 2023-02-26T17:42:41ZTTPS:...

Malware Analysis – djvu – 5f929857301a882af743e3b51dd8c95b

February 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 5f929857301a882af743e3b51dd8c95bSHA1: 5d187df8a3a13f9a467cc295f0f60f3453f5c1c4ANALYSIS DATE: 2023-02-26T17:35:32ZTTPS: T1060, T1112, T1012, T1082, T1053,...

Malware Analysis

Malware Analysis – smokeloader – 10c1d309a43c0ae8c867d445f0983a7c

Malware Analysis – smokeloader – b3f4fcfb20dc2d65bc7355f744cc471a

Malware Analysis – djvu – ef701a28f6a0f6c47bbeb9075bfdbb17

Malware Analysis – djvu – 5c99ee62a7e7bdd30257f2af5af760eb

Malware Analysis – ransomware – 9aed6f35603d5b43be90947cb901646d

Malware Analysis – djvu – 497f80075a5ef00096030f57892b04f7

Malware Analysis – djvu – 9bef94cc928804cc3d23a4ae8293215e

Malware Analysis – djvu – d4dde394647d6d74a212f2abfc38d785

Malware Analysis – djvu – a76852e5eb1e18a990ff1d0a6e34d830

Malware Analysis – djvu – 765a4e60824b26944e349fd5c5d25773

Malware Analysis – djvu – 1ffe527454fb2cb48d1c58fd37a5d953

Malware Analysis – djvu – aa058c705e64a433166d975f4e9a5261

Malware Analysis – djvu – af18071fb08b87b6b3997313a205f2fa

Malware Analysis – djvu – ba3aabae5595f9b43fa0063f3d076340

Malware Analysis – djvu – d4e8036c9af8375f5c06ea31c5267612

Malware Analysis – djvu – a46513985a2902ced4e4212fbb73df88

Malware Analysis – evasion – a013722d6c33cfe87c4feb7f59b1adef

Malware Analysis – djvu – f1d7f5ce6cd0b059b0ab842e1b6b335c

Malware Analysis – djvu – f1ff95c988f110902e532fb0a8034660

Malware Analysis – djvu – fc3f018b16daacdd0252b8d3f622747e

Malware Analysis – bootkit – 08480329b811e7d893d69964f42d04e7

Malware Analysis – djvu – 33dbc5a31f712af90386ac6023f039ff

Malware Analysis – djvu – a8630ef62cf10a9fb477716e03071487

Malware Analysis – djvu – 5f929857301a882af743e3b51dd8c95b

Cobalt Strike Beacon Detected – 121[.]43[.]37[.]134:4434

Cobalt Strike Beacon Detected – 119[.]29[.]231[.]118:443

Cobalt Strike Beacon Detected – 39[.]101[.]74[.]162:443

Cobalt Strike Beacon Detected – 8[.]218[.]112[.]112:8880

Cobalt Strike Beacon Detected – 47[.]109[.]48[.]57:443

You may have missed