Malware Analysis

Malware Analysis – persistence – 9880fae6551d1e9ee921f39751a6f3c0

February 14, 2023

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 9880fae6551d1e9ee921f39751a6f3c0SHA1: 30466ccd4ec7bcafb370510855da2cd631f74b7aANALYSIS DATE: 2023-02-14T16:09:20ZTTPS: T1012, T1120, T1082, T1107, T1490, T1060, T1112, T1005,...

Malware Analysis – djvu – 92fb02b01109479cb8e0d3cca65199b1

February 14, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 92fb02b01109479cb8e0d3cca65199b1SHA1: e639b6880b9486bebfbf09e7d2826f87e9e9f000ANALYSIS DATE: 2023-02-14T16:25:42ZTTPS: T1053, T1005, T1081, T1060,...

Malware Analysis – djvu – 6f635ba6d98d1a3dec564090072ce091

February 14, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:laplas, family:rhadamanthys, family:smokeloader, family:vidar, botnet:19, backdoor, clipper, collection, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5:...

Malware Analysis – djvu – 3a3cc32c567af4815720880a6182ac97

February 14, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 3a3cc32c567af4815720880a6182ac97SHA1: 50bf2b40d7d495613e927d3b226d17cefe9bf3cdANALYSIS DATE: 2023-02-14T16:30:25ZTTPS: T1060, T1112, T1082, T1012,...

Malware Analysis – discovery – 3bb309fc1395242843ef36c926a15b80

February 14, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, ransomwareMD5: 3bb309fc1395242843ef36c926a15b80SHA1: 25a5261417bee5fef9112da58f49dcd82d68bf25ANALYSIS DATE: 2023-02-14T16:32:34ZTTPS: T1082, T1057, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – discovery – 8ca7462eaf003da6881548147ccafaaa

February 14, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 8ca7462eaf003da6881548147ccafaaaSHA1: 2a1e910f9da8efc68477b396f83fa71215145434ANALYSIS DATE: 2023-02-14T16:36:09ZTTPS: T1082, T1112, T1042, T1060, T1012 ScoreMeaningExample10Known badA malware family...

Malware Analysis – asyncrat – 29f0f2d0769386bee6f2e1f29bed2b0b

February 14, 2023

Score: 10 MALWARE FAMILY: asyncratTAGS:family:asyncrat, persistence, ratMD5: 29f0f2d0769386bee6f2e1f29bed2b0bSHA1: acf88bed891de8b1b60e878d0f69995f0a5a4b19ANALYSIS DATE: 2023-02-14T16:52:58ZTTPS: T1082, T1053, T1060, T1112 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – djvu – 421d7b773828d31b34f9e31d6c89aad7

February 14, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 421d7b773828d31b34f9e31d6c89aad7SHA1: dc470438bd47832894dec67bd9dcf9e55ec94ad5ANALYSIS DATE: 2023-02-14T17:32:11ZTTPS: T1060,...

Malware Analysis – djvu – cdb08d3042d957c83c78c10441433ab1

February 14, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: cdb08d3042d957c83c78c10441433ab1SHA1: 8176828a83107089d1f37aee44c209560ebdcd5cANALYSIS DATE: 2023-02-14T16:40:57ZTTPS: T1005, T1081, T1060, T1112,...

Malware Analysis – – e3c712d002a9d1683273ac63d11e28c1

February 14, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: e3c712d002a9d1683273ac63d11e28c1SHA1: a5d1c7ea301825070c7f3d8d214f5e92847837caANALYSIS DATE: 2023-02-14T17:15:18ZTTPS: T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – 5d1b05a15e2e3cb0f22999d24d5cbe87

February 14, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:laplas, family:smokeloader, family:vidar, botnet:19, backdoor, clipper, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 5d1b05a15e2e3cb0f22999d24d5cbe87SHA1: b172ca1edb980d35fe7779142cd5d718b076271fANALYSIS...

Malware Analysis – djvu – 8a0d4ad83b742a47ab723caffbcffda7

February 14, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 8a0d4ad83b742a47ab723caffbcffda7SHA1: 820efb5b2b1e4136f30800ebb3c68933942450b9ANALYSIS DATE: 2023-02-14T10:10:18ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – djvu – 9c6ab7aae2124899c85323156ad26e86

February 14, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 9c6ab7aae2124899c85323156ad26e86SHA1: 35c573961fa55f9549859a8b26cacd3600030d84ANALYSIS DATE: 2023-02-14T09:03:15ZTTPS: T1012, T1082, T1053, T1005,...

Malware Analysis – octo – 606b94fa8407316bcddaab6c35b64bc8

February 14, 2023

Score: 10 MALWARE FAMILY: octoTAGS:family:octo, banker, evasion, infostealer, ransomware, rat, trojanMD5: 606b94fa8407316bcddaab6c35b64bc8SHA1: 77227e9a1d78d2968f07f6d4be63811a2333bd16ANALYSIS DATE: 2023-02-14T10:19:16ZTTPS: ScoreMeaningExample10Known badA malware family was...

Malware Analysis – djvu – 19cddc6bdde317a1291c35be4a3f1a85

February 14, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 19cddc6bdde317a1291c35be4a3f1a85SHA1: 6c2b5fe6bf4671ea33f22fcb09afdb70b42491c2ANALYSIS DATE: 2023-02-14T10:35:26ZTTPS: T1082, T1053, T1012, T1005,...

Malware Analysis – djvu – f98fe87bead9791ad932ee9e21a5f75c

February 14, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: f98fe87bead9791ad932ee9e21a5f75cSHA1: c126886171f8b93da108c2bd8c78ba0fa280a8acANALYSIS DATE: 2023-02-14T10:22:04ZTTPS: T1005, T1081, T1012, T1082,...

Malware Analysis – smokeloader – dfc608e08849b60d39c69bd24bcdc63f

February 14, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: dfc608e08849b60d39c69bd24bcdc63fSHA1: 7775aa1574ee0ca33303aac8d6ab8fb0caaf5d54ANALYSIS DATE: 2023-02-14T10:33:11ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – da3ca16cb610b7d26a6303556ef78c60

February 14, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: da3ca16cb610b7d26a6303556ef78c60SHA1: d5812ca0cd178605d232589c0f9176eab1ea6012ANALYSIS DATE: 2023-02-14T10:40:27ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – – 21c313045e7616ed10b00400f16a3bb7

February 14, 2023

Score: 3 MALWARE FAMILY: TAGS:MD5: 21c313045e7616ed10b00400f16a3bb7SHA1: 4bdcba2131f6267a8eb6697bec5969d367c70496ANALYSIS DATE: 2023-02-14T10:40:32ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – smokeloader – dbfb7c060193971c9fe40ddf22a9e3e0

February 14, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: dbfb7c060193971c9fe40ddf22a9e3e0SHA1: 375114a694b9267e2e96268a3bcd01469a344991ANALYSIS DATE: 2023-02-14T11:34:07ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – f01ebad1b96dd519f39d6911e086650b

February 14, 2023

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: f01ebad1b96dd519f39d6911e086650bSHA1: 313b86587c94feceda09198b8a2e5892a7383db0ANALYSIS DATE: 2023-02-14T11:46:06ZTTPS: T1005, T1081, T1107, T1490 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – evasion – d8959c5605e56b152c635aa80e01b266

February 14, 2023

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: d8959c5605e56b152c635aa80e01b266SHA1: 6b2e877afe304557830d98ba4bbb0425485f8072ANALYSIS DATE: 2023-02-14T11:53:16ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – persistence – 0969db4a1d191e1123fd93e5b93e678a

February 14, 2023

Score: 7 MALWARE FAMILY: persistenceTAGS:persistenceMD5: 0969db4a1d191e1123fd93e5b93e678aSHA1: 7ef148522510c4c683a98b545a2f721442cb3882ANALYSIS DATE: 2023-02-13T21:06:43ZTTPS: T1082, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – smokeloader – 04b8f812baa7371b51a70202b2bb61cd

February 14, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 04b8f812baa7371b51a70202b2bb61cdSHA1: 8806b675560c8ef0feacbec2944fa764ea30ebc5ANALYSIS DATE: 2023-02-13T21:32:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis

Malware Analysis – persistence – 9880fae6551d1e9ee921f39751a6f3c0

Malware Analysis – djvu – 92fb02b01109479cb8e0d3cca65199b1

Malware Analysis – djvu – 6f635ba6d98d1a3dec564090072ce091

Malware Analysis – djvu – 3a3cc32c567af4815720880a6182ac97

Malware Analysis – discovery – 3bb309fc1395242843ef36c926a15b80

Malware Analysis – discovery – 8ca7462eaf003da6881548147ccafaaa

Malware Analysis – asyncrat – 29f0f2d0769386bee6f2e1f29bed2b0b

Malware Analysis – djvu – 421d7b773828d31b34f9e31d6c89aad7

Malware Analysis – djvu – cdb08d3042d957c83c78c10441433ab1

Malware Analysis – – e3c712d002a9d1683273ac63d11e28c1

Malware Analysis – djvu – 5d1b05a15e2e3cb0f22999d24d5cbe87

Malware Analysis – djvu – 8a0d4ad83b742a47ab723caffbcffda7

Malware Analysis – djvu – 9c6ab7aae2124899c85323156ad26e86

Malware Analysis – octo – 606b94fa8407316bcddaab6c35b64bc8

Malware Analysis – djvu – 19cddc6bdde317a1291c35be4a3f1a85

Malware Analysis – djvu – f98fe87bead9791ad932ee9e21a5f75c

Malware Analysis – smokeloader – dfc608e08849b60d39c69bd24bcdc63f

Malware Analysis – djvu – da3ca16cb610b7d26a6303556ef78c60

Malware Analysis – – 21c313045e7616ed10b00400f16a3bb7

Malware Analysis – smokeloader – dbfb7c060193971c9fe40ddf22a9e3e0

Malware Analysis – ransomware – f01ebad1b96dd519f39d6911e086650b

Malware Analysis – evasion – d8959c5605e56b152c635aa80e01b266

Malware Analysis – persistence – 0969db4a1d191e1123fd93e5b93e678a

Malware Analysis – smokeloader – 04b8f812baa7371b51a70202b2bb61cd

[LYNX] – Ransomware Victim: Inside One

[QILIN] – Ransomware Victim: City of Green River

[AKIRA] – Ransomware Victim: BAF Management Consulting

[QILIN] – Ransomware Victim: ProActive Solutions USA

[QILIN] – Ransomware Victim: The Paul Wilkinson Law Firm

You may have missed