Malware Analysis

Malware Analysis – evasion – d8959c5605e56b152c635aa80e01b266

February 14, 2023

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: d8959c5605e56b152c635aa80e01b266SHA1: 6b2e877afe304557830d98ba4bbb0425485f8072ANALYSIS DATE: 2023-02-14T11:53:16ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – persistence – 0969db4a1d191e1123fd93e5b93e678a

February 14, 2023

Score: 7 MALWARE FAMILY: persistenceTAGS:persistenceMD5: 0969db4a1d191e1123fd93e5b93e678aSHA1: 7ef148522510c4c683a98b545a2f721442cb3882ANALYSIS DATE: 2023-02-13T21:06:43ZTTPS: T1082, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – smokeloader – 04b8f812baa7371b51a70202b2bb61cd

February 14, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 04b8f812baa7371b51a70202b2bb61cdSHA1: 8806b675560c8ef0feacbec2944fa764ea30ebc5ANALYSIS DATE: 2023-02-13T21:32:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – a39b1c1c26ff233b02cbc9502e44c248

February 14, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: a39b1c1c26ff233b02cbc9502e44c248SHA1: 4ebbf8b4efba27429388e18db62d3e6e7a4a0131ANALYSIS DATE: 2023-02-13T21:40:05ZTTPS: T1005, T1081, T1082, T1222,...

Malware Analysis – djvu – 117f96dfc0ab20f0d6eaf75163adc4bd

February 14, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 117f96dfc0ab20f0d6eaf75163adc4bdSHA1: f7013ad41f52bcf45575e13e8c55b9e4abd10c11ANALYSIS DATE: 2023-02-13T22:25:01ZTTPS: T1005, T1081, T1060, T1112,...

Malware Analysis – ransomware – f790b7551cb5ae4572d2d0564c80a641

February 14, 2023

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: f790b7551cb5ae4572d2d0564c80a641SHA1: c7ae17ca4be16a176e39a870abfcd314a01d2704ANALYSIS DATE: 2023-02-13T21:33:09ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – dcrat – 6a23c189ce7698d8fdd6a1e40e973fb9

February 14, 2023

Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, family:djvu, family:laplas, family:smokeloader, family:vidar, botnet:19, backdoor, clipper, collection, discovery, infostealer, persistence, ransomware, rat, spyware, stealer,...

Malware Analysis – discovery – aeb643589c3402273bbbc011412a62f2

February 14, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, ransomwareMD5: aeb643589c3402273bbbc011412a62f2SHA1: 7595d9b873570a42c5290e14915a6f3a8629cb55ANALYSIS DATE: 2023-02-13T22:44:51ZTTPS: T1130, T1112, T1082, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – a53872097b49a45eeecaa869764e3062

February 14, 2023

Score: 5 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: a53872097b49a45eeecaa869764e3062SHA1: 5f763734bd4506ce22fc33ad241a1866ff53b451ANALYSIS DATE: 2023-02-13T22:45:21ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – c3d2d23a1bc7dc87e728d8d3f293aeec

February 14, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: c3d2d23a1bc7dc87e728d8d3f293aeecSHA1: db9ba277e1537dd42678fb149e1f4f60a087d935ANALYSIS DATE: 2023-02-13T23:20:19ZTTPS: T1012, T1082, T1053, T1005,...

Malware Analysis – djvu – 7143ef8e6f25a19691bd87a29462018f

February 14, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:laplas, family:rhadamanthys, family:smokeloader, backdoor, clipper, collection, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 7143ef8e6f25a19691bd87a29462018fSHA1: b2436b4e2fd3f40c38d4212947477a89fe634e3bANALYSIS...

Malware Analysis – djvu – 8d209026b323ff5940c7eee209b6d4b1

February 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 8d209026b323ff5940c7eee209b6d4b1SHA1: 83f572f25541b7b94f98fc89134563ce3754a335ANALYSIS DATE: 2023-02-13T15:10:37ZTTPS: T1082, T1060, T1112, T1053,...

Malware Analysis – smokeloader – fd466943736431592f5d3100cc5ef176

February 13, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: fd466943736431592f5d3100cc5ef176SHA1: ed2f661153cd32ba1fe2a3a46be0c2c8904f38c8ANALYSIS DATE: 2023-02-13T15:34:56ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 5d9ddf96915b5cc3112a2fe444eb4582

February 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:laplas, family:rhadamanthys, family:smokeloader, family:vidar, botnet:19, backdoor, clipper, collection, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5:...

Malware Analysis – djvu – 3ac1ab8780473d8322f7d39c3c0fe10d

February 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:rhadamanthys, family:smokeloader, family:vidar, botnet:19, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 3ac1ab8780473d8322f7d39c3c0fe10dSHA1: bf1cd5198f5b822fd6e2496e1e2a09028dee0309ANALYSIS...

Malware Analysis – djvu – dbdfd12830b865ceb0b6bdcdb9c6ddec

February 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: dbdfd12830b865ceb0b6bdcdb9c6ddecSHA1: c0e3cec4e0e44918037549d8e50863a4791a8eb3ANALYSIS DATE: 2023-02-13T16:40:19ZTTPS: T1005, T1081, T1012, T1060,...

Malware Analysis – djvu – 805a09fc14592c2acfbb1eb90502f8a7

February 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 805a09fc14592c2acfbb1eb90502f8a7SHA1: 289a454f384c9027904cfce7d69c7c1626c2ca87ANALYSIS DATE: 2023-02-13T16:36:03ZTTPS: T1082, T1005, T1081, T1060,...

Malware Analysis – octo – 3acd48e20cdc01d9f5a9bc760077f938

February 13, 2023

Score: 10 MALWARE FAMILY: octoTAGS:family:octo, banker, infostealer, ransomware, rat, trojanMD5: 3acd48e20cdc01d9f5a9bc760077f938SHA1: b083b4c1cb2130dc20fcda5d9e0325a48348ac62ANALYSIS DATE: 2023-02-13T16:31:42ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – c93e4b78158efa64b90fcb312e4b2941

February 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: c93e4b78158efa64b90fcb312e4b2941SHA1: a7656cdafd25e30ed1e65b8c4657532622861354ANALYSIS DATE: 2023-02-13T16:56:08ZTTPS: T1005, T1081, T1060, T1112,...

Malware Analysis – djvu – 60cc8946da4b0009609c496abe4165e8

February 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 60cc8946da4b0009609c496abe4165e8SHA1: 4ae2c52aba43861999b0732c2ac1fe6f377de06cANALYSIS DATE: 2023-02-13T17:00:31ZTTPS: T1222, T1053, T1005, T1081,...

Malware Analysis – smokeloader – 75b77c265064ba24c8ce3896b9d2b34f

February 13, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 75b77c265064ba24c8ce3896b9d2b34fSHA1: 14e32c84bf6906218fbde3e232a13004e87db36cANALYSIS DATE: 2023-02-13T17:04:40ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – djvu – 157f6a581db909a688b13ee0e5de0db8

February 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 157f6a581db909a688b13ee0e5de0db8SHA1: e54e9534af33694c65ef5694af3c6f6d523891fcANALYSIS DATE: 2023-02-13T17:02:20ZTTPS: T1082, T1012, T1053, T1005,...

Malware Analysis – djvu – b209283b35ce5990f08a55c45a6c9c1a

February 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:laplas, family:rhadamanthys, family:smokeloader, family:vidar, botnet:19, backdoor, clipper, collection, discovery, evasion, persistence, ransomware, spyware, stealer, trojan,...

Malware Analysis – djvu – 9520c1288f8a4b39c0ed8c876c6ce342

February 13, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:laplas, family:rhadamanthys, family:smokeloader, family:vidar, botnet:19, backdoor, clipper, collection, discovery, evasion, persistence, ransomware, spyware, stealer, trojan,...

Malware Analysis

Malware Analysis – evasion – d8959c5605e56b152c635aa80e01b266

Malware Analysis – persistence – 0969db4a1d191e1123fd93e5b93e678a

Malware Analysis – smokeloader – 04b8f812baa7371b51a70202b2bb61cd

Malware Analysis – djvu – a39b1c1c26ff233b02cbc9502e44c248

Malware Analysis – djvu – 117f96dfc0ab20f0d6eaf75163adc4bd

Malware Analysis – ransomware – f790b7551cb5ae4572d2d0564c80a641

Malware Analysis – dcrat – 6a23c189ce7698d8fdd6a1e40e973fb9

Malware Analysis – discovery – aeb643589c3402273bbbc011412a62f2

Malware Analysis – ransomware – a53872097b49a45eeecaa869764e3062

Malware Analysis – djvu – c3d2d23a1bc7dc87e728d8d3f293aeec

Malware Analysis – djvu – 7143ef8e6f25a19691bd87a29462018f

Malware Analysis – djvu – 8d209026b323ff5940c7eee209b6d4b1

Malware Analysis – smokeloader – fd466943736431592f5d3100cc5ef176

Malware Analysis – djvu – 5d9ddf96915b5cc3112a2fe444eb4582

Malware Analysis – djvu – 3ac1ab8780473d8322f7d39c3c0fe10d

Malware Analysis – djvu – dbdfd12830b865ceb0b6bdcdb9c6ddec

Malware Analysis – djvu – 805a09fc14592c2acfbb1eb90502f8a7

Malware Analysis – octo – 3acd48e20cdc01d9f5a9bc760077f938

Malware Analysis – djvu – c93e4b78158efa64b90fcb312e4b2941

Malware Analysis – djvu – 60cc8946da4b0009609c496abe4165e8

Malware Analysis – smokeloader – 75b77c265064ba24c8ce3896b9d2b34f

Malware Analysis – djvu – 157f6a581db909a688b13ee0e5de0db8

Malware Analysis – djvu – b209283b35ce5990f08a55c45a6c9c1a

Malware Analysis – djvu – 9520c1288f8a4b39c0ed8c876c6ce342

Miljödata – 870,108 breached accounts

Cobalt Strike Beacon Detected – 119[.]91[.]203[.]199:88

Cobalt Strike Beacon Detected – 106[.]54[.]239[.]134:80

Cobalt Strike Beacon Detected – 81[.]69[.]98[.]230:50010

Cobalt Strike Beacon Detected – 103[.]43[.]18[.]10:80

You may have missed