Malware Analysis

Malware Analysis – smokeloader – c418a430529db80b4daabd52c5c8adce

February 11, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: c418a430529db80b4daabd52c5c8adceSHA1: 3fd4955aca9bb801a2cb337cb9acbb3f61fd4d07ANALYSIS DATE: 2023-02-11T10:39:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ryuk – 5ac0f050f93f86e69026faea1fbb4450

February 11, 2023

Score: 10 MALWARE FAMILY: ryukTAGS:family:ryuk, persistence, ransomwareMD5: 5ac0f050f93f86e69026faea1fbb4450SHA1: 9709774fde9ec740ad6fed8ed79903296ca9d571ANALYSIS DATE: 2023-02-11T10:59:29ZTTPS: T1082, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – smokeloader – 0aeddad4b0aa26e2b46f2b1c498bda5c

February 11, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 0aeddad4b0aa26e2b46f2b1c498bda5cSHA1: ab08be349ed68c56de52a04a502683a45f1020e5ANALYSIS DATE: 2023-02-11T11:34:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – ransomware – e29a4153e08b5b85b4a51f8a2cd2714e

February 11, 2023

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: e29a4153e08b5b85b4a51f8a2cd2714eSHA1: 1a2056b4d141fcfc44f7132f31cba62d6f31d86dANALYSIS DATE: 2023-02-11T10:17:53ZTTPS: T1107, T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – djvu – 16200b113af6deaf8d20299b2ee6fdce

February 10, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 16200b113af6deaf8d20299b2ee6fdceSHA1: 00f2271b4d2bdafab93d0bc3d40c7a309507ce64ANALYSIS DATE: 2023-02-10T16:26:12ZTTPS: T1012, T1082, T1053, T1005,...

Malware Analysis – djvu – 670936165fe244e2905fbc7354f0ba35

February 10, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:546, backdoor, discovery, evasion, persistence, ransomware, stealer, themida, trojan, vmprotectMD5: 670936165fe244e2905fbc7354f0ba35SHA1: aaed184b2c9991afe8d1db5af006220ef6a0d3c1ANALYSIS DATE:...

Malware Analysis – djvu – b83ea35b0ed8ecdc998e9fffeb694da4

February 10, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: b83ea35b0ed8ecdc998e9fffeb694da4SHA1: 673a7442d490c9c6eabc3f43bc8299ff68f8106fANALYSIS DATE: 2023-02-10T15:35:44ZTTPS: T1082, T1012, T1060, T1112, T1222 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – ca6745b53c57a5d2353781f173126a26

February 10, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, backdoor, discovery, persistence, ransomware, trojan, vmprotectMD5: ca6745b53c57a5d2353781f173126a26SHA1: 648541dc24452c5363f5f6885a5f1b121760af2dANALYSIS DATE: 2023-02-10T16:40:27ZTTPS: T1012, T1120, T1082, T1060,...

Malware Analysis – djvu – d014aa8d507c1461690db496c97cb16a

February 10, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: d014aa8d507c1461690db496c97cb16aSHA1: abaa15064b543bb6e4e0ece2743fe88864eef1c7ANALYSIS DATE: 2023-02-10T16:58:56ZTTPS: T1082, T1005, T1081, T1012,...

Malware Analysis – djvu – abd9de0a607b47e396cae4b372c69879

February 10, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, stealer, trojan, vmprotectMD5: abd9de0a607b47e396cae4b372c69879SHA1: c55a2208cc2b3eabfb10bd499a6e88c41de05906ANALYSIS DATE: 2023-02-10T17:13:19ZTTPS: T1012,...

Malware Analysis – adware – 11ff322997d98d02afe198c20b613ff3

February 10, 2023

Score: 8 MALWARE FAMILY: adwareTAGS:adware, discovery, exploit, persistence, ransomware, stealer, upxMD5: 11ff322997d98d02afe198c20b613ff3SHA1: 48e70395f187454bddc01484a6cbcf1c5f1753fcANALYSIS DATE: 2023-02-10T17:50:24ZTTPS: T1060, T1012, T1120, T1082, T1222,...

Malware Analysis – chaos – 4cc6ec4d961a14c4fc4b45dfe939ca00

February 10, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, ransomware, spyware, stealerMD5: 4cc6ec4d961a14c4fc4b45dfe939ca00SHA1: 7a115dcc3ca91877b70de091b122259503d7109fANALYSIS DATE: 2023-02-10T05:37:03ZTTPS: T1490, T1059, T1107, T1005, T1081, T1082 ScoreMeaningExample10Known...

Malware Analysis – djvu – 20d5e3daaa4f8ce2e83c91861f2a8ade

February 10, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 20d5e3daaa4f8ce2e83c91861f2a8adeSHA1: 4a555a39d41a0d10d35cbe5f78682a00210be6a0ANALYSIS DATE: 2023-02-10T05:55:27ZTTPS: T1012, T1082, T1005, T1081,...

Malware Analysis – discovery – e5f2fcd6f0327a18366243c8c657eb8d

February 10, 2023

Score: 8 MALWARE FAMILY: discoveryTAGS:discovery, exploit, upxMD5: e5f2fcd6f0327a18366243c8c657eb8dSHA1: 0d195362be5e95e4c6efc264c8027c0720d344f5ANALYSIS DATE: 2023-02-10T03:24:24ZTTPS: T1222 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – ransomware – 50f4469ad4b9bf352c5c9604ef913ccf

February 10, 2023

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 50f4469ad4b9bf352c5c9604ef913ccfSHA1: 5c82d5155c9151115346efd94e1b1da34cced32cANALYSIS DATE: 2023-02-10T05:42:47ZTTPS: T1005, T1081, T1107, T1490, T1082 ScoreMeaningExample10Known badA malware family...

Malware Analysis – persistence – 046fbae3ebc4d201d4e8eafcc67743b4

February 10, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 046fbae3ebc4d201d4e8eafcc67743b4SHA1: 3a77dabee37c375b2bbcca77c222c98fba423010ANALYSIS DATE: 2023-02-09T23:25:22ZTTPS: T1060, T1082, T1012, T1120 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – persistence – bf6105e0bc1d98f773c139c95e071311

February 10, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: bf6105e0bc1d98f773c139c95e071311SHA1: 38b12ff1618d1d7499d9b0a37d15a0d42d247895ANALYSIS DATE: 2023-02-09T22:39:19ZTTPS: T1082, T1060 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – evasion – 43194e64a0e20b8a582d56aa5bd36b86

February 10, 2023

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 43194e64a0e20b8a582d56aa5bd36b86SHA1: 2e7ac74639dee36c0f1c15bcdea45c8b89271c4eANALYSIS DATE: 2023-02-09T21:45:20ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – fantom – 9d15a3b314600b4c08682b0202700ee7

February 9, 2023

Score: 10 MALWARE FAMILY: fantomTAGS:family:fantom, evasion, ransomware, spyware, stealer, upxMD5: 9d15a3b314600b4c08682b0202700ee7SHA1: 208e79cdb96328d5929248bb8a4dd622cf0684d1ANALYSIS DATE: 2023-02-09T15:12:39ZTTPS: T1012, T1082, T1005, T1081, T1102 ScoreMeaningExample10Known...

Malware Analysis – – fbeddce9531477bcf7607c5883a5c0d2

February 9, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: fbeddce9531477bcf7607c5883a5c0d2SHA1: 351534c1d9b07bcf2f7427ea016685a129dcf044ANALYSIS DATE: 2023-02-09T15:22:31ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 17e4f3aa916ca0e5b25223578daf822f

February 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 17e4f3aa916ca0e5b25223578daf822fSHA1: c9cf6d42e128fbb4a7a06bb1fb5c17517f4ee493ANALYSIS DATE: 2023-02-09T17:04:33ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – discovery – 144bac7279821a5778ce270ee308127e

February 9, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, ransomware, spyware, stealerMD5: 144bac7279821a5778ce270ee308127eSHA1: 9216982f01832fce65503f7edb8691ec740fd3cfANALYSIS DATE: 2023-02-09T15:41:34ZTTPS: T1057, T1012, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 6fda6069f74ac4ac29a6902c26c51dbe

February 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 6fda6069f74ac4ac29a6902c26c51dbeSHA1: a481c765969c8ea660483fda0d3e629687febf98ANALYSIS DATE: 2023-02-09T16:11:00ZTTPS: T1222, T1012, T1082, T1060,...

Malware Analysis – djvu – f7e484ed4d3b204dffa616abf58a050d

February 9, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: f7e484ed4d3b204dffa616abf58a050dSHA1: 9f6f3dae7a695dbad8f4cc28aee8daa096788bfdANALYSIS DATE: 2023-02-09T04:15:26ZTTPS: T1222, T1012, T1082, T1005,...

Malware Analysis

Malware Analysis – smokeloader – c418a430529db80b4daabd52c5c8adce

Malware Analysis – ryuk – 5ac0f050f93f86e69026faea1fbb4450

Malware Analysis – smokeloader – 0aeddad4b0aa26e2b46f2b1c498bda5c

Malware Analysis – ransomware – e29a4153e08b5b85b4a51f8a2cd2714e

Malware Analysis – djvu – 16200b113af6deaf8d20299b2ee6fdce

Malware Analysis – djvu – 670936165fe244e2905fbc7354f0ba35

Malware Analysis – djvu – b83ea35b0ed8ecdc998e9fffeb694da4

Malware Analysis – djvu – ca6745b53c57a5d2353781f173126a26

Malware Analysis – djvu – d014aa8d507c1461690db496c97cb16a

Malware Analysis – djvu – abd9de0a607b47e396cae4b372c69879

Malware Analysis – adware – 11ff322997d98d02afe198c20b613ff3

Malware Analysis – chaos – 4cc6ec4d961a14c4fc4b45dfe939ca00

Malware Analysis – djvu – 20d5e3daaa4f8ce2e83c91861f2a8ade

Malware Analysis – discovery – e5f2fcd6f0327a18366243c8c657eb8d

Malware Analysis – ransomware – 50f4469ad4b9bf352c5c9604ef913ccf

Malware Analysis – persistence – 046fbae3ebc4d201d4e8eafcc67743b4

Malware Analysis – persistence – bf6105e0bc1d98f773c139c95e071311

Malware Analysis – evasion – 43194e64a0e20b8a582d56aa5bd36b86

Malware Analysis – fantom – 9d15a3b314600b4c08682b0202700ee7

Malware Analysis – – fbeddce9531477bcf7607c5883a5c0d2

Malware Analysis – djvu – 17e4f3aa916ca0e5b25223578daf822f

Malware Analysis – discovery – 144bac7279821a5778ce270ee308127e

Malware Analysis – djvu – 6fda6069f74ac4ac29a6902c26c51dbe

Malware Analysis – djvu – f7e484ed4d3b204dffa616abf58a050d

Cobalt Strike Beacon Detected – 167[.]99[.]76[.]115:80

Cobalt Strike Beacon Detected – 185[.]208[.]159[.]224:80

Cobalt Strike Beacon Detected – 115[.]175[.]39[.]35:443

Cobalt Strike Beacon Detected – 121[.]36[.]228[.]26:8080

Cobalt Strike Beacon Detected – 166[.]108[.]200[.]194:443

You may have missed